[Snyk] Upgrade nuxt from 2.5.1 to 2.12.0 #4

snyk-bot · 2020-04-15T04:49:38Z

Snyk has created this PR to upgrade nuxt from 2.5.1 to 2.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 16 versions ahead of your current version.
The recommended version was released a month ago, on 2020-03-17.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-450202	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	No Known Exploit
	Timing Attack SNYK-JS-ELLIPTIC-511941	No Known Exploit
	Prototype Pollution SNYK-JS-DOTPROP-543489	Proof of Concept

Release notes

Package name: nuxt

2.12.0 - 2020-03-17
🚀 Features
- general
  - #6950 Support crossorigin attribute in SSR script and preload tags
  - #6868 Improve programmatic usage (see docs)
  - #7029 Expose webpack config
  - #6272 Allow disabling loading-screen
- webpack
  - #6987 Support @import using ~assets in css files
  - #6272 Allow disabling loading-screen
- vue-app
  - #6880 New fetch syntax (see docs)
  - #6939 Pass error as param to nuxt-loading fail method
  - #6244 Trigger watchParam when param is changed in same route
- cli
  - #6855 Pass context when nuxt.config exports a function
👌 DX
- builder
  - #6924 Analyze mode warning rewording
- general
  - #6881, #6896 HMR support for server middleware
- generator
  - #6882 Log message or full error for unhandled error without stack trace
- cli
  - #6904 Display listening URLs after build
- vue-app
  - #7032 Improve missing inject value error message
  - #6775 Middleware not executing on double browser back navigation
- core
  - #7079 Better module not found handling
🔥 Performance
- vue-renderer
  - #6973 Early return render when redirect happens
  - #6846 Don't serialize session when injectScripts is false
🐛 Bug Fixes
- core
  - #7002 Deprecated render:context and render:routeContext hooks was not being called
- babel-preset-app
  - #7070 TypeError when import cjs in webpack building
- vue-app
  - #6946 Use child transition name when navigating to parent
  - #6854 Add fallback context for errors
  - #6803 Resolve leave transition on child routes
  - #6807 Move head to the index to avoid global state
- webpack
  - #6864 Provide global URL and URLSearchParams
💅 Refactors
- general
  - #6954 Use scope variable memo for modern utils
- utils
  - #6953 Eliminate side effect from modern utils
📝 Examples
- cached-components
  - #6997 Remove non-existing link
🏡 Chore
- general
  - #6816 Simplifies Code Contributions & Reviews
- ci
  - #6857 Support Github actions
👓 Tests
- general
  - Fix socket-hang-up test
  - Separate dev and unit test
  - Avoid unexpected outside stderr assertion count
  - Fix uncompressed resource size
  - Wrap error test with consola to make output clear
💖 Thanks to
- 404-NOTFOUND (@404-NF)
- HG (@husayt)
- James George (@jamesgeorge007)
- Jason Poindexter (@jsonpoindexter)
- Mark Honeychurch (@markhoney)
- Matteo Rigon (@matteo-rigon)
- Sand Of Vega (@sandofvega)
- Sean Hellum (@JesterOrNot)
- Vladlen (@negezor)
- @wppd
2.11.0 - 2019-12-17
🐛 Bug Fixes
- utils
  - #6777 Add catch statement to non function block in serializeFunction
  - #6791 Fix flatRoutes regex for nested routes with trailing slash enabled
- vue-app
  - #6658 Pass router mode to getLocation
  - #6683 Apply path-to-regexp options to tokensToFunction
  - #6650 Layout in error.vue not work for Vue.extend component
  - #6623 Add prefetched class to <nuxt-link> after chunk loaded
- general
  - #6685 context.route issue in plugins and splitChunks.pages === false
  - #6590 Collapsed SSR log
- webpack
  - #6495 Enable devtool for dev mode
  - #6566 Normalize devtool for terser compatibility
- config
  - #6583 Typo in unsafeInlineCompatibility name
🚀 Features
- vue-app
  - #6722 Upgrade vue-router to 3.1.x
- general
  - #6149 Optionally strip non-client or non-server code
- vue-renderer
  - #6505 Support evaluation in templates
- config
  - #6597 Add ignoreOptions for node-ignore
💅 Refactors
- server
  - #6771 Only append not empty allowed sources to csp
🔥 Performance
- webpack
  - #6632 Prefer using contenthash
📝 Examples
- with-sockets
  - #6586 Fix cannot read property 'app' of undefined on nuxt build
🏡 Chore
- general
  - #6732 Update @nuxtjs/eslint-config to v2 and fix lint errors
  - #6686 Fix typo in middleware readme
  - #6649 Limit stale bot to only issues
  - #6637 Remove unused dependencies
  - #6630 Use .github/config.yml for issue template
- docs
  - #6719 Update code-of-conduct
- ci
  - #6739 Remove coverage collection in fixtures
  - #6747 Use LTS Node.js instead of latest
  - #6737 Separate dev test and unit test
- github
  - #6657 Add chinese translation for issue template
👓 Tests
- general
  - #6752 Pass array to allowedSources
  - #6740 Use got instead of request
  - #6638 Fix chrome detection in macOS Catalina
  - #6596 SSR log
💖 Thanks to
- Ahad Birang (@farnabaz)
- Cain Hall (@cain)
- Daniel Roe (@danielroe)
- Dennis Herzberg (@dennis47528)
- Harry Trần (@jetaimefrc)
- Mohammad M. Shahbazi (@mshahbazi)
- @PedroD
- Stephan Besser (@reskume)
- Rafał Chłodnicki (@rchl)
- Vanessa A (@Vinesse)
- @crutch12
2.10.2 - 2019-10-21
🐛 Bug Fixes
- webpack
  - #6495 Enable devtool for dev mode
  - #6566 Normalize devtool for terser compatibility
- config
  - #6583 Typo in unsafeInlineCompatibility name
- vue-app
  - #6590 Fix collapsed SSR log
📝 Examples
- with-sockets
  - #6586 Fix cannot read property 'app' of undefined on nuxt build
💖 Thanks to
- @PedroD
- Stephan Besser (@reskume)
2.10.1 - 2019-10-11
🐞 Fixes
- vue-app, webpack
  - #6504 Remove consola from client
- utils
  - #6515 Fix error when router.trailingSlash is false
- generator
  - #6362 Remove trailing slash when no subFolders are used
- webpack
  - #6520 chunkhash and contenthash not work with extractCSS
- cli
  - #6525 Enable server for nuxt build when pages should be generated
🏡 Chore
- readme
  - #6511 Remove deprecated starter template
⚓ Dependency Upgrades
- vue-meta: Upgraded to v2.3 which fixes duplicated tags in SPA mode
💖 Thanks to
- Dennis Herzberg (@dennis47528)
- Yuki Terashima (@y-temp4)
2.10.0 - 2019-10-02
🌟Highlights
- Support for improved typescript runtime
- Experimental support for feature toggling for SUPER slim builds!
- Mitigate problems with nuxt server stocking during development
- Fix issues with internet-explorer in development mode
- Upgrade to terser webpack plugin v2
- Improved stability of loading-screen. No more endless loops (nuxt/screens#44) and show fatal errors (nuxt/screens#45) for the initial build
🐛 Bug Fixes
- core
  - #6490 Clear resolver cache for project files dev mode
- vue-app
  - #6479 Error page layout not correctly applied in client-side rendering
  - #6473 Pass vm as arg to support data() with arrow function
  - #6433 Fix asyncData hydration when features.transition is false
  - #6430 Clear idle callback
  - #6217 Prevent looping on error during render of error page
- webpack
  - #6298 Fix consola IE compatibility
  - Revert pause/resume
  - #6460 Correct sass options for sass-loader@8
  - #6448 Don't push to compilersWatching in callback
- cli
  - #6441 Server should not be initialized in nuxt build
- babel-preset-app
  - #6435 Use loose mode for babel class plugin
- vue-renderer
  - #6429 Dont mutate options.head
- config
  - #6371 Enable total timing by default when server.timing is enabled
- config, vue-app
  - #6379 Add module declaration for config and vue-app
🚀 Features
- cli, config
  - #6399 cli.bannerColor option
- config
  - #6414 serverMiddleware as a simple key/value object
- builder
  - #6368 followSymlinks option to allow for symlinks
  - #6285 extendPlugins option and builder:extendPlugins hook
  - #6329 Add builder:prepared hook
  - #6342 Support adding custom middleware
- cli
  - #6475 Catch build errors with cli:buildError hook
- webpack
  - #6477 Use vue-meta browser build for client bundle
  - #6398 Upgrade terser-webpack-plugin to v2
  - #6350 Add webpack:config hook
- server
  - #6438 Add config option to define etag hash function
- vue-app
  - #6292 Add prefetch prop to <nuxt-link>
  - #6287 Support configurable features
  - #6297 Function watchQuery
- general
  - #6432 Support setting (non-essential) vue-meta options by user
- utils
  - #6277 Export sort routes
- builder, router
  - #6331 Enforce uniform trailing slash handling
💅 Refactors
- cli
  - #6353 Call setup hook in run command with more args
- builder
  - #6352 Await build.createRoutes to allow async functions inside it
- babel-preset-app
  - #6087 Simplify babel preset config
📝 Examples
- with-sockets
  - #6396 Create server inside the export function
🏡 Chore
- general
  - Fix example in babel-preset-app readme
  - #6390 Lint vue-app templates
  - #6363 Rename setup hook to run:before
💖 Thanks to
- Louis-Marie Michelin (@lmichelin)
- Daniel Roe (@danielroe)
- Snir Shechter (@SnirShechter)
- @radimhornicek
- @xxRockOnxx
2.9.2 - 2019-08-28
🐛 Bug Fixes
- general
  - #6257 Improve watching experience for generated files
- builder
  - #6283 fix(builder): apply overrides from app dir only
- server
  - #6265 Treat https: null as https: undefined
- nuxt-start
  - #6267 Add missing vue-client-only dependency
- vue-app
  - #6264 Only overwrite leave listener when none provided or without done arg
  - #6255 Enforce default css when used with frameworks
- config
  - #6258 Provide typescript backward compatibility
💅 Refactors
- core
  - #6271 Use hable
2.9.1 - 2019-08-20
🐛 Bug Fixes
- vue-app
  - #6252 Provide typescript backward compatibility
- loading-screen
  - nuxt/screens#38 set Content-Type for index page
📝 Examples
- CoffeeScript
  - #6248 Update module for using additionalExtensions
💖 Thanks to
- Artyom Bogomolov (@DevArtyom)
- Rafał Chłodnicki (@rchl)
2.9.0 - 2019-08-20
⚠️ Important Notes
- 👉 Minimum required node version is 8.9.0
- 👉 Typescript support is now externalized. Refer to official docs and migration guide.
- 👉 vue-meta upgraded to 2.0.0. Please refer to the changelog to review notable changes.
- 👉 scrollBehavior option is deprecated in favor of app/router.scrollBehavior.js (#6055)
- 👉 devModules option is deprecated in favor of buildModules (#6203)
🐛 Bug Fixes
- general
  - #6118 Fix modulepreload warnings
  - #6075 Throw error when building failed in quiet mode
  - #6070 Support babel corejs config for modern mode
  - #6021 Babel polyfill can not be disabled
- renderer
  - #6033 Correctly load nomodule scripts in safari 10
- cli
  - #6020 Prevent both nuxt & nuxt-edge being installed
- vue-app
  - #6012 Emit triggerScroll to support hash navigation
  - #5920 Fix font-size and make width bigger
  - #5891 Always finish transition.leave asynchronously
  - #5890 Fix position of the build indicator when page scrolled
- vue-renderer
  - #6223 Call render:resourcesLoaded hook before createRenderer
  - #5964 Clone SPA meta to prevent cache modification
- webpack
  - #5906 Extract css breaks hmr and source-maps
🚀 Features
- cli
  - #6206 Export options
- server
  - #6178 Allow passing loadingTimeout and other arguments to renderAndGetWindow
- webpack
  - #6120 Allow function entries for build.transpile
- vue-app
  - #6194 Add $nuxt.refresh
  - #6186 Use EventSource instead of WebSocket for build indicator
  - #6055 Support app/router.scrollBehavior.js and deprecate scrollBehavior
  - #5941 Add <client-only> alias for <no-ssr>
  - #5844 Allow customizing loading indicator
  - #6194 Add $nuxt.refresh() method or refresh the actual page asyncData and fetch
  - #6231 Export router options
  - #6222 Support functional watchQuery
- vue-renderer
  - #5975 Add csp option for csp v1 compatibility
  - #6134 Support prepend/append body tags during ssr for all allowed tag types
- typescript
  - #5858 Externalize typescript support
💅 Refactors
- config
  - #6203 Rename devModules to buildModules
- babel-preset-app
  - #6197 Remove babel-plugin-dynamic-import-node
- webpack
  - #6179 Simplify transpile normalization
- general
  - Refactor to adhere to @nuxt/eslint-config v1
🏡 Chore
- general
  - #6065 Fix typo
  - #5990 Inverse wording of error message
  - #5910 Update opencollective infos
  - #5869 Rename backers -> nuxters
- babel-preset-app
  - #5897 Fix typo in babel-preset readme
⚓ Dependency Upgrades
- file-loader@4
- url-loader@2
- cache-loader@4
- css-loader@3
- vue-meta@2
- fs-extra@8
💖 Thanks to
- 719media (@719media)
- Anthony Fu (@antfu)
- Farzad Soltani (@farzadso)
- François Hodierne (@znarf)
- Josh Deltener (@hecktarzuli)
- Rafał Chłodnicki (@rchl)
- Ricardo Gobbo de Souza (@ricardogobbosouza)
- Ustun Ozgur (@ustun)
- William Chong (@williamchong007)
- bluelovers (@bluelovers)
- orblazer (@orblazer)
- yutanoma (@yutanoma)
- Dzmitry Bachko (@dbachko)
2.8.1 - 2019-06-04
🐛 Bug Fixes
- vue-renderer
  - #5867 Fix exception on property access of undefined object
  - #5863 Prevent "can't set headers after they are sent" error in modern server mode
- vue-app
  - #5864 Reduce consola direct access and don't override browser console.log
- cli
  - #5865 Don't mutate options export to prevent ESM regression with nuxt.config in mixed (cjs + esm) mode (TIP: never mix them as is non-standard and may be unsupported in any future version)
💅 Refactors
- typescript
  - #5854 Prepare for external typescript support
💖 Thanks to
- Rafał Chłodnicki (@rchl)
2.8.0 - 2019-05-30
😎 Developer Experience
- #5770 Add a group for SSR logs to avoid polluting the browser console
- #5810 Fancier browser logs with consola
- #5820, #5832, #5834 Show build indicator in the browser when rebuilding code:
- #5753 Watch for pages/ creation when default page displayed
- #5812 Only listen for file changes for supported extensions
- #5753 Re-use the same port when randomly assigned when restarting in dev mode
🐛 Bug Fixes
- vue-renderer
  - #5807 Add User-Agent‍ to Vary header in modern server mode
  - #5764 Safe format SSR logs
- server
  - #5793 Preserve random port when restarting
  - Return listener when calling listen
- builder
  - #5753 Watch for pages/ creation when default page displayed
  - #2812 Only listen for file changes for supported extensions
- generator
  - #5791 Minify spa fallback
- types
  - #5785 Add type definition for functional babel.presets
- vue-app
  - #5757 Reuse page component with watchQuery
  - #5746 Remove trailing slash in vue-router non-strict mode
  - #5752 Don't attach catch handler to already loaded component
  - #5824 fixPrepatch in-out transition fix (issue #5797)
- utils
  - #5754 Handle serializeFunction edge case
🚀 Features
- vue-renderer
  - #5745 Add render.injectScripts option
  - #5784 Support render.ssrLog for controlling SSR logs
💅 Refactors
- core
  - #5796 Use require.resolve instead of Module internals
- builder
  - #5792 Pass nuxt options to template as nuxtOptions
- vue-app
  - #5770 Add a group for SSR logs
  - #5826 simplify mount error log
- general
  - #5748 Small readability improvements
📝 Examples
- auth-jwt
  - #5775 Use named store export to prevent warning
- typescript
  - #5742 Add missing ts-node dependency
🏡 Chore
- ci
  - #5802 Upload test report to CircleCI and Azure
  - Add flags for codecov
  - Enable audit
- general
  - Remove unused dependency cross-env
  - Add FUNDING.md
  - Improve links in readme
♻️ Tests
- general
  - #5790 Add unit tests for core/resolver.js
  - #5782 Remove duplicate unit tests in packages/core/test/resolver
⚓ Dependency upgrades
- consola v2.7.0
- connect v3.7.0
- webpack v4.32
- babel v7.4.5
- thread-loader v2.1.2
💖 Thanks to
2.7.1 - 2019-05-14
2.7.0 - 2019-05-14
2.6.3 - 2019-04-25
2.6.2 - 2019-04-15
2.6.1 - 2019-04-04
2.6.0 - 2019-04-04
2.5.1 - 2019-03-21

from nuxt GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade nuxt from 2.5.1 to 2.12.0. See this package in NPM: https://www.npmjs.com/package/nuxt See this project in Snyk: https://app.snyk.io/org/mc-ireiser/project/56600da5-aa80-4987-83aa-7e9ac5945364?utm_source=github&utm_medium=upgrade-pr

[Snyk] Upgrade nuxt from 2.5.1 to 2.12.0 #4

Are you sure you want to change the base?

[Snyk] Upgrade nuxt from 2.5.1 to 2.12.0 #4

Conversation

snyk-bot commented Apr 15, 2020

Snyk has created this PR to upgrade nuxt from 2.5.1 to 2.12.0.

🚀 Features

👌 DX

🔥 Performance

🐛 Bug Fixes

💅 Refactors

📝 Examples

🏡 Chore

👓 Tests

💖 Thanks to

🐛 Bug Fixes

🚀 Features

💅 Refactors

🔥 Performance

📝 Examples

🏡 Chore

👓 Tests

💖 Thanks to

🐛 Bug Fixes

📝 Examples

💖 Thanks to

🐞 Fixes

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🌟Highlights

🐛 Bug Fixes

🚀 Features

💅 Refactors

📝 Examples

🏡 Chore

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

🐛 Bug Fixes

📝 Examples

💖 Thanks to

⚠️ Important Notes

🐛 Bug Fixes

🚀 Features

💅 Refactors

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

💖 Thanks to

😎 Developer Experience

🐛 Bug Fixes

🚀 Features

💅 Refactors

📝 Examples

🏡 Chore

♻️ Tests

⚓ Dependency upgrades

💖 Thanks to