[Snyk] Upgrade nuxt from 2.8.1 to 2.12.0 #6

snyk-bot · 2020-04-15T07:45:42Z

Snyk has created this PR to upgrade nuxt from 2.8.1 to 2.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 8 versions ahead of your current version.
The recommended version was released a month ago, on 2020-03-17.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	No Known Exploit
	Timing Attack SNYK-JS-ELLIPTIC-511941	No Known Exploit
	Prototype Pollution SNYK-JS-DOTPROP-543489	Proof of Concept

Release notes

Package name: nuxt

2.12.0 - 2020-03-17
🚀 Features
- general
  - #6950 Support crossorigin attribute in SSR script and preload tags
  - #6868 Improve programmatic usage (see docs)
  - #7029 Expose webpack config
  - #6272 Allow disabling loading-screen
- webpack
  - #6987 Support @import using ~assets in css files
  - #6272 Allow disabling loading-screen
- vue-app
  - #6880 New fetch syntax (see docs)
  - #6939 Pass error as param to nuxt-loading fail method
  - #6244 Trigger watchParam when param is changed in same route
- cli
  - #6855 Pass context when nuxt.config exports a function
👌 DX
- builder
  - #6924 Analyze mode warning rewording
- general
  - #6881, #6896 HMR support for server middleware
- generator
  - #6882 Log message or full error for unhandled error without stack trace
- cli
  - #6904 Display listening URLs after build
- vue-app
  - #7032 Improve missing inject value error message
  - #6775 Middleware not executing on double browser back navigation
- core
  - #7079 Better module not found handling
🔥 Performance
- vue-renderer
  - #6973 Early return render when redirect happens
  - #6846 Don't serialize session when injectScripts is false
🐛 Bug Fixes
- core
  - #7002 Deprecated render:context and render:routeContext hooks was not being called
- babel-preset-app
  - #7070 TypeError when import cjs in webpack building
- vue-app
  - #6946 Use child transition name when navigating to parent
  - #6854 Add fallback context for errors
  - #6803 Resolve leave transition on child routes
  - #6807 Move head to the index to avoid global state
- webpack
  - #6864 Provide global URL and URLSearchParams
💅 Refactors
- general
  - #6954 Use scope variable memo for modern utils
- utils
  - #6953 Eliminate side effect from modern utils
📝 Examples
- cached-components
  - #6997 Remove non-existing link
🏡 Chore
- general
  - #6816 Simplifies Code Contributions & Reviews
- ci
  - #6857 Support Github actions
👓 Tests
- general
  - Fix socket-hang-up test
  - Separate dev and unit test
  - Avoid unexpected outside stderr assertion count
  - Fix uncompressed resource size
  - Wrap error test with consola to make output clear
💖 Thanks to
- 404-NOTFOUND (@404-NF)
- HG (@husayt)
- James George (@jamesgeorge007)
- Jason Poindexter (@jsonpoindexter)
- Mark Honeychurch (@markhoney)
- Matteo Rigon (@matteo-rigon)
- Sand Of Vega (@sandofvega)
- Sean Hellum (@JesterOrNot)
- Vladlen (@negezor)
- @wppd
2.11.0 - 2019-12-17
🐛 Bug Fixes
- utils
  - #6777 Add catch statement to non function block in serializeFunction
  - #6791 Fix flatRoutes regex for nested routes with trailing slash enabled
- vue-app
  - #6658 Pass router mode to getLocation
  - #6683 Apply path-to-regexp options to tokensToFunction
  - #6650 Layout in error.vue not work for Vue.extend component
  - #6623 Add prefetched class to <nuxt-link> after chunk loaded
- general
  - #6685 context.route issue in plugins and splitChunks.pages === false
  - #6590 Collapsed SSR log
- webpack
  - #6495 Enable devtool for dev mode
  - #6566 Normalize devtool for terser compatibility
- config
  - #6583 Typo in unsafeInlineCompatibility name
🚀 Features
- vue-app
  - #6722 Upgrade vue-router to 3.1.x
- general
  - #6149 Optionally strip non-client or non-server code
- vue-renderer
  - #6505 Support evaluation in templates
- config
  - #6597 Add ignoreOptions for node-ignore
💅 Refactors
- server
  - #6771 Only append not empty allowed sources to csp
🔥 Performance
- webpack
  - #6632 Prefer using contenthash
📝 Examples
- with-sockets
  - #6586 Fix cannot read property 'app' of undefined on nuxt build
🏡 Chore
- general
  - #6732 Update @nuxtjs/eslint-config to v2 and fix lint errors
  - #6686 Fix typo in middleware readme
  - #6649 Limit stale bot to only issues
  - #6637 Remove unused dependencies
  - #6630 Use .github/config.yml for issue template
- docs
  - #6719 Update code-of-conduct
- ci
  - #6739 Remove coverage collection in fixtures
  - #6747 Use LTS Node.js instead of latest
  - #6737 Separate dev test and unit test
- github
  - #6657 Add chinese translation for issue template
👓 Tests
- general
  - #6752 Pass array to allowedSources
  - #6740 Use got instead of request
  - #6638 Fix chrome detection in macOS Catalina
  - #6596 SSR log
💖 Thanks to
- Ahad Birang (@farnabaz)
- Cain Hall (@cain)
- Daniel Roe (@danielroe)
- Dennis Herzberg (@dennis47528)
- Harry Trần (@jetaimefrc)
- Mohammad M. Shahbazi (@mshahbazi)
- @PedroD
- Stephan Besser (@reskume)
- Rafał Chłodnicki (@rchl)
- Vanessa A (@Vinesse)
- @crutch12
2.10.2 - 2019-10-21
🐛 Bug Fixes
- webpack
  - #6495 Enable devtool for dev mode
  - #6566 Normalize devtool for terser compatibility
- config
  - #6583 Typo in unsafeInlineCompatibility name
- vue-app
  - #6590 Fix collapsed SSR log
📝 Examples
- with-sockets
  - #6586 Fix cannot read property 'app' of undefined on nuxt build
💖 Thanks to
- @PedroD
- Stephan Besser (@reskume)
2.10.1 - 2019-10-11
🐞 Fixes
- vue-app, webpack
  - #6504 Remove consola from client
- utils
  - #6515 Fix error when router.trailingSlash is false
- generator
  - #6362 Remove trailing slash when no subFolders are used
- webpack
  - #6520 chunkhash and contenthash not work with extractCSS
- cli
  - #6525 Enable server for nuxt build when pages should be generated
🏡 Chore
- readme
  - #6511 Remove deprecated starter template
⚓ Dependency Upgrades
- vue-meta: Upgraded to v2.3 which fixes duplicated tags in SPA mode
💖 Thanks to
- Dennis Herzberg (@dennis47528)
- Yuki Terashima (@y-temp4)
2.10.0 - 2019-10-02
🌟Highlights
- Support for improved typescript runtime
- Experimental support for feature toggling for SUPER slim builds!
- Mitigate problems with nuxt server stocking during development
- Fix issues with internet-explorer in development mode
- Upgrade to terser webpack plugin v2
- Improved stability of loading-screen. No more endless loops (nuxt/screens#44) and show fatal errors (nuxt/screens#45) for the initial build
🐛 Bug Fixes
- core
  - #6490 Clear resolver cache for project files dev mode
- vue-app
  - #6479 Error page layout not correctly applied in client-side rendering
  - #6473 Pass vm as arg to support data() with arrow function
  - #6433 Fix asyncData hydration when features.transition is false
  - #6430 Clear idle callback
  - #6217 Prevent looping on error during render of error page
- webpack
  - #6298 Fix consola IE compatibility
  - Revert pause/resume
  - #6460 Correct sass options for sass-loader@8
  - #6448 Don't push to compilersWatching in callback
- cli
  - #6441 Server should not be initialized in nuxt build
- babel-preset-app
  - #6435 Use loose mode for babel class plugin
- vue-renderer
  - #6429 Dont mutate options.head
- config
  - #6371 Enable total timing by default when server.timing is enabled
- config, vue-app
  - #6379 Add module declaration for config and vue-app
🚀 Features
- cli, config
  - #6399 cli.bannerColor option
- config
  - #6414 serverMiddleware as a simple key/value object
- builder
  - #6368 followSymlinks option to allow for symlinks
  - #6285 extendPlugins option and builder:extendPlugins hook
  - #6329 Add builder:prepared hook
  - #6342 Support adding custom middleware
- cli
  - #6475 Catch build errors with cli:buildError hook
- webpack
  - #6477 Use vue-meta browser build for client bundle
  - #6398 Upgrade terser-webpack-plugin to v2
  - #6350 Add webpack:config hook
- server
  - #6438 Add config option to define etag hash function
- vue-app
  - #6292 Add prefetch prop to <nuxt-link>
  - #6287 Support configurable features
  - #6297 Function watchQuery
- general
  - #6432 Support setting (non-essential) vue-meta options by user
- utils
  - #6277 Export sort routes
- builder, router
  - #6331 Enforce uniform trailing slash handling
💅 Refactors
- cli
  - #6353 Call setup hook in run command with more args
- builder
  - #6352 Await build.createRoutes to allow async functions inside it
- babel-preset-app
  - #6087 Simplify babel preset config
📝 Examples
- with-sockets
  - #6396 Create server inside the export function
🏡 Chore
- general
  - Fix example in babel-preset-app readme
  - #6390 Lint vue-app templates
  - #6363 Rename setup hook to run:before
💖 Thanks to
- Louis-Marie Michelin (@lmichelin)
- Daniel Roe (@danielroe)
- Snir Shechter (@SnirShechter)
- @radimhornicek
- @xxRockOnxx
2.9.2 - 2019-08-28
🐛 Bug Fixes
- general
  - #6257 Improve watching experience for generated files
- builder
  - #6283 fix(builder): apply overrides from app dir only
- server
  - #6265 Treat https: null as https: undefined
- nuxt-start
  - #6267 Add missing vue-client-only dependency
- vue-app
  - #6264 Only overwrite leave listener when none provided or without done arg
  - #6255 Enforce default css when used with frameworks
- config
  - #6258 Provide typescript backward compatibility
💅 Refactors
- core
  - #6271 Use hable
2.9.1 - 2019-08-20
🐛 Bug Fixes
- vue-app
  - #6252 Provide typescript backward compatibility
- loading-screen
  - nuxt/screens#38 set Content-Type for index page
📝 Examples
- CoffeeScript
  - #6248 Update module for using additionalExtensions
💖 Thanks to
- Artyom Bogomolov (@DevArtyom)
- Rafał Chłodnicki (@rchl)
2.9.0 - 2019-08-20
⚠️ Important Notes
- 👉 Minimum required node version is 8.9.0
- 👉 Typescript support is now externalized. Refer to official docs and migration guide.
- 👉 vue-meta upgraded to 2.0.0. Please refer to the changelog to review notable changes.
- 👉 scrollBehavior option is deprecated in favor of app/router.scrollBehavior.js (#6055)
- 👉 devModules option is deprecated in favor of buildModules (#6203)
🐛 Bug Fixes
- general
  - #6118 Fix modulepreload warnings
  - #6075 Throw error when building failed in quiet mode
  - #6070 Support babel corejs config for modern mode
  - #6021 Babel polyfill can not be disabled
- renderer
  - #6033 Correctly load nomodule scripts in safari 10
- cli
  - #6020 Prevent both nuxt & nuxt-edge being installed
- vue-app
  - #6012 Emit triggerScroll to support hash navigation
  - #5920 Fix font-size and make width bigger
  - #5891 Always finish transition.leave asynchronously
  - #5890 Fix position of the build indicator when page scrolled
- vue-renderer
  - #6223 Call render:resourcesLoaded hook before createRenderer
  - #5964 Clone SPA meta to prevent cache modification
- webpack
  - #5906 Extract css breaks hmr and source-maps
🚀 Features
- cli
  - #6206 Export options
- server
  - #6178 Allow passing loadingTimeout and other arguments to renderAndGetWindow
- webpack
  - #6120 Allow function entries for build.transpile
- vue-app
  - #6194 Add $nuxt.refresh
  - #6186 Use EventSource instead of WebSocket for build indicator
  - #6055 Support app/router.scrollBehavior.js and deprecate scrollBehavior
  - #5941 Add <client-only> alias for <no-ssr>
  - #5844 Allow customizing loading indicator
  - #6194 Add $nuxt.refresh() method or refresh the actual page asyncData and fetch
  - #6231 Export router options
  - #6222 Support functional watchQuery
- vue-renderer
  - #5975 Add csp option for csp v1 compatibility
  - #6134 Support prepend/append body tags during ssr for all allowed tag types
- typescript
  - #5858 Externalize typescript support
💅 Refactors
- config
  - #6203 Rename devModules to buildModules
- babel-preset-app
  - #6197 Remove babel-plugin-dynamic-import-node
- webpack
  - #6179 Simplify transpile normalization
- general
  - Refactor to adhere to @nuxt/eslint-config v1
🏡 Chore
- general
  - #6065 Fix typo
  - #5990 Inverse wording of error message
  - #5910 Update opencollective infos
  - #5869 Rename backers -> nuxters
- babel-preset-app
  - #5897 Fix typo in babel-preset readme
⚓ Dependency Upgrades
- file-loader@4
- url-loader@2
- cache-loader@4
- css-loader@3
- vue-meta@2
- fs-extra@8
💖 Thanks to
- 719media (@719media)
- Anthony Fu (@antfu)
- Farzad Soltani (@farzadso)
- François Hodierne (@znarf)
- Josh Deltener (@hecktarzuli)
- Rafał Chłodnicki (@rchl)
- Ricardo Gobbo de Souza (@ricardogobbosouza)
- Ustun Ozgur (@ustun)
- William Chong (@williamchong007)
- bluelovers (@bluelovers)
- orblazer (@orblazer)
- yutanoma (@yutanoma)
- Dzmitry Bachko (@dbachko)
2.8.1 - 2019-06-04
🐛 Bug Fixes
- vue-renderer
  - #5867 Fix exception on property access of undefined object
  - #5863 Prevent "can't set headers after they are sent" error in modern server mode
- vue-app
  - #5864 Reduce consola direct access and don't override browser console.log
- cli
  - #5865 Don't mutate options export to prevent ESM regression with nuxt.config in mixed (cjs + esm) mode (TIP: never mix them as is non-standard and may be unsupported in any future version)
💅 Refactors
- typescript
  - #5854 Prepare for external typescript support
💖 Thanks to
- Rafał Chłodnicki (@rchl)

from nuxt GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade nuxt from 2.8.1 to 2.12.0. See this package in NPM: https://www.npmjs.com/package/nuxt See this project in Snyk: https://app.snyk.io/org/mc-ireiser/project/a0c50c45-818b-4331-880f-2857afcf5edc?utm_source=github&utm_medium=upgrade-pr

[Snyk] Upgrade nuxt from 2.8.1 to 2.12.0 #6

Are you sure you want to change the base?

[Snyk] Upgrade nuxt from 2.8.1 to 2.12.0 #6

Conversation

snyk-bot commented Apr 15, 2020

Snyk has created this PR to upgrade nuxt from 2.8.1 to 2.12.0.

🚀 Features

👌 DX

🔥 Performance

🐛 Bug Fixes

💅 Refactors

📝 Examples

🏡 Chore

👓 Tests

💖 Thanks to

🐛 Bug Fixes

🚀 Features

💅 Refactors

🔥 Performance

📝 Examples

🏡 Chore

👓 Tests

💖 Thanks to

🐛 Bug Fixes

📝 Examples

💖 Thanks to

🐞 Fixes

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🌟Highlights

🐛 Bug Fixes

🚀 Features

💅 Refactors

📝 Examples

🏡 Chore

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

🐛 Bug Fixes

📝 Examples

💖 Thanks to

⚠️ Important Notes

🐛 Bug Fixes

🚀 Features

💅 Refactors

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

💖 Thanks to