chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
axios (source)	^0.25.0 -> ^0.29.0
axios-retry	^3.2.4 -> ^3.9.1
nuxt (source)	^2.15.8 -> ^2.18.1
vue-plausible	^1.3.1 -> ^1.3.2

---

Release Notes

axios/axios (axios)

v0.29.0

Compare Source

Release notes:

Bug Fixes

• fix(backport): backport security fixes in commits #​6167 and #​6163 to v0.x by @​Sean-Powell in https://github.com/axios/axios/pull/6402
• fix: omit nulls in params by @​Willshaw in https://github.com/axios/axios/pull/6394
• fix(backport): fix paramsSerializer function validation by @​solonzhu in https://github.com/axios/axios/pull/6361
• fix: Regular Expression Denial of Service (ReDoS) by @​qiongshusheng in https://github.com/axios/axios/pull/6708

Contributors to this release

• @​Sean-Powell made their first contribution in https://github.com/axios/axios/pull/6402
• @​Willshaw made their first contribution in https://github.com/axios/axios/pull/6394
• @​solonzhu made their first contribution in https://github.com/axios/axios/pull/6361
• @​qiongshusheng made their first contribution in https://github.com/axios/axios/pull/6708

v0.28.1

Compare Source

v0.28.0

Compare Source

Release notes:

Bug Fixes

• fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#​6091)

Backports from v1.x:

• Allow null indexes on formSerializer and paramsSerializer v0.x (#​4961)
• Fixing content-type header repeated #​4745
• Fixed timeout error message for HTTP 4738
• Added axios.formToJSON method (#​4735)
• URL params serializer (#​4734)
• Fixed toFormData Blob issue on node>v17 #​4728
• Adding types for progress event callbacks #​4675
• Fixed max body length defaults #​4731
• Added data URL support for node.js (#​4725)
• Added isCancel type assert (#​4293)
• Added the ability for the url-encoded-form serializer to respect the formSerializer config (#​4721)
• Add string[] to AxiosRequestHeaders type (#​4322)
• Allow type definition for axios instance methods (#​4224)
• Fixed AxiosError stack capturing; (#​4718)
• Fixed AxiosError status code type; (#​4717)
• Adding Canceler parameters config and request (#​4711)
• fix(types): allow to specify partial default headers for instance creation (#​4185)
• Added blob to the list of protocols supported by the browser (#​4678)
• Fixing Z_BUF_ERROR when no content (#​4701)
• Fixed race condition on immediate requests cancellation (#​4261)
• Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance https://github.com/axios/axios/pull/4248
• Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#​4229)
• Fix TS definition for AxiosRequestTransformer (#​4201)
• Use type alias instead of interface for AxiosPromise (#​4505)
• Include request and config when creating a CanceledError instance (#​4659)
• Added generic TS types for the exposed toFormData helper (#​4668)
• Optimized the code that checks cancellation (#​4587)
• Replaced webpack with rollup (#​4596)
• Added stack trace to AxiosError (#​4624)
• Updated AxiosError.config to be optional in the type definition (#​4665)
• Removed incorrect argument for NetworkError constructor (#​4656)

v0.27.2

Compare Source

Fixes and Functionality:

• Fixed FormData posting in browser environment by reverting #​3785 (#​4640)
• Enhanced protocol parsing implementation (#​4639)
• Fixed bundle size

v0.27.1

Compare Source

Fixes and Functionality:

• Removed import of url module in browser build due to huge size overhead and builds being broken (#​4594)
• Bumped follow-redirects to ^1.14.9 (#​4615)

v0.27.0

Compare Source

Breaking changes:

• New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData (#​3757)
• Removed functionality that removed the the Content-Type request header when passing FormData (#​3785)
• (*) Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole (#​3645)
• Separated responsibility for FormData instantiation between transformRequest and toFormData (#​4470)
• (*) Improved and fixed multiple issues with FormData support (#​4448)

QOL and DevX improvements:

• Added a multipart/form-data testing playground allowing contributors to debug changes easily (#​4465)

Fixes and Functionality:

• Refactored project file structure to avoid circular imports (#​4515) & (#​4516)
• Bumped follow-redirects to ^1.14.9 (#​4562)

Internal and Tests:

• Updated dev dependencies to latest version

Documentation:

• Fixing incorrect link in changelog (#​4551)

Notes:

• (*) Please read these pull requests before updating, these changes are very impactful and far reaching.

v0.26.1

Compare Source

Fixes and Functionality:

• Refactored project file structure to avoid circular imports (#​4220)

v0.26.0

Compare Source

Fixes and Functionality:

• Fixed The timeoutErrorMessage property in config not work with Node.js (#​3581)
• Added errors to be displayed when the query parsing process itself fails (#​3961)
• Fix/remove url required (#​4426)
• Update follow-redirects dependency due to Vulnerability (#​4462)
• Bump karma from 6.3.11 to 6.3.14 (#​4461)
• Bump follow-redirects from 1.14.7 to 1.14.8 (#​4473)

softonic/axios-retry (axios-retry)

v3.9.1

Compare Source

• Revert: Export of type definitions, depending on whether it is ES Module or CommonJS

v3.9.0

Compare Source

• Export of type definitions, depending on whether it is ES Module or CommonJS

v3.8.2

Compare Source

• Expose axios-retry options in error object

v3.8.1

Compare Source

• onRetry support for async function

v3.8.0

Compare Source

• Don't retry cancelled requests by default

v3.7.0

Compare Source

• Changed type definitions to support both CommonJS and ESM

v3.6.1

Compare Source

• introduced IAxiosRetryReturn in type definition

v3.6.0

Compare Source

• allow to eject interceptors

v3.5.1

Compare Source

• fix exponentialDelay type definition

v3.5.0

Compare Source

• exponentialDelay now supports delayFactor as a param

v3.4.0

Compare Source

• Updated axios dep to 1.2.3
• Update package-lock to version 2
• Prevent the whole request lifecycle from being longer than timeout

v3.3.1

Compare Source

• Security updates

v3.3.0

Compare Source

• Added onRetry callback option

v3.2.6

Compare Source

• Add types export to package.json

v3.2.5

Compare Source

• handle retryCondition false return value

nuxt/nuxt (nuxt)

v2.18.1

Compare Source

👉 Changelog

compare changes

🩹 Fixes

• webpack: Depend on earlier version of mkdirp (f67056b9e)

❤️ Contributors

• Daniel Roe (@​danielroe)

v2.18.0

Compare Source

👉 Changelog

compare changes

🚀 Enhancements

• webpack: Migrate to memfs (#​27652)

🩹 Fixes

• vue-app: Don't throw if we can't read sessionStorage (#​27662)
• config: Add back md4 monkey-patch for wider ecosystem (#​27865)

🏡 Chore

• Bump internal versions (9e829b59a)
• Add non-applicable advisory GHSA-3h5v-q93c-6h6q (5ef7311f0)

❤️ Contributors

• Daniel Roe (@​danielroe)

v2.17.4

Compare Source

👉 Changelog

compare changes

🩹 Fixes

• types: Bump serve-static types to v1.15.7 (1c44c376d)
• generator: Use maintained html-minifier-terser (#​26914)
• vue-app: Prevent double page mount (#​10874)
• core: Don't skip loading runtime modules if one is improperly resolved (#​10193)
• vue-app: Prevent error page mounting twice (#​27484)

🏡 Chore

• Update repository field for @nuxt/config (c283cc039)
• Mark GHSA-2p57-rm9w-gvfp as not applicable (4782e3c90)
• Update repository urls (07668eafb)
• Mark GHSA-grv7-fg5c-xmjg as not applicable (eeb6207c9)
• Refresh yarn lockfile (#​27612)

✅ Tests

• Properly close page in e2e tests (1700aa131)
• Wait for navigation in redirect test (e74715606)
• Don't register promise in external nav (#​27468)

🤖 CI

• Add label PR workflow (#​25580)
• Make edge releases on commit basis (1eb08d1ba)
• Remove ref for release workflows (06f91349f)
• Don't skip tests from branch named dev (2a5d05257)
• Update test conditions (940fc7dcb)

❤️ Contributors

• Dmitriy (@​Kolobok12309)
• Ivan Ehreshi (@​IvanEh)
• Daniel Roe (@​danielroe)
• Damian Głowala (@​DamianGlowala)

v2.17.3

Compare Source

2.17.3 is the next patch release for the 2.x branch.

👉 Changelog

compare changes

💅 Refactors

• Migrate to hookable package (#​24426)

🏡 Chore

• Fix invalid package files with npm pkg fix (4d0474c4b)

✅ Tests

• Skip lib check with vue-tsc test (90ffd8170)

🤖 CI

• Split type check into separate test (40f1f301e)

❤️ Contributors

• Andrey Yolkin (@​AndreyYolkin)
• Daniel Roe (@​danielroe)

v2.17.2

Compare Source

👉 Changelog

compare changes

🩹 Fixes

• types: Prevent overwriting vue types in template (#​22802)
• types: Don't pin webpack types to exact version (#​23531)
• Remove md4 patch now that webpack has it in core (#​23703)

🤖 CI

• Add script to update changelog for 2.x releases (#​23031)
• Revert to codecov-action v3 (e66e44803)
• Remove node version from matrix (#​23706)
• Use node 18 for ci jobs (#​23701)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Rafał Chłodnicki (@​rchl)

v2.17.1

Compare Source

2.17.1 is the next patch release for Nuxt 2.

👉 Changelog

compare changes

🩹 Fixes

• webpack: Downgrade dev-middleware to fix peer dep issue (#​21626)
• webpack: Pin webpack-dev-middleware to 5.0.0 (#​21804)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Lehoczky Zoltán (@​Lehoczky)

v2.17.0

Compare Source

2.17.0 is the next minor release for Nuxt 2.

✨ Highlights

Nuxt 2.17 comes with a few new features, including better support for new Vue 2.7 types, and supporting passing postcss config as a function.

It also includes support for Node 20+ and a fix for a dependency issue with the Babel preset that affected new installs.

👉 Changelog

compare changes

🚀 Enhancements

• types: Support nuxt types for defineComponent (#​19789)
• csp: Support generating nonce for scripts and links in ssr (#​9621)
• webpack: Support passing function as postcssOptions (#​19495)

🔥 Performance

• config: Avoid recursive md4 patching (7fab95252)

🩹 Fixes

• Relax node engines upper constraint (010b539ed)
• utils: Respect patterns within paths when sorting routes (#​20669)
• vue-app: Skip page render early on error or navigation (#​20719)
• babel-preset-app: Add explicit dep on used babel plugin (#​21488)

🏡 Chore

• Reenable publishing 🙈 (4ce8b118e)
• Exclude yaml exception vulnerability (build-time dep) (c8ed87a26)
• Bump jest dependencies (#​20506)
• Remove resolved advisories (98cd35665)
• Skip publishing node_modules folder (8799cfacc)
• Remove obsolete useWorkspaces option (27e450119)

✅ Tests

• Add catchall path to route generation test (71c359516)
• Update windows snapshot (4ec274ae2)
• Update jest snapshots to remove escaped quotes (f93411c7c)

🤖 CI

• Run tests in node 16 (#​20644)
• Pin actions by hash and use corepack (#​21356)

❤️ Contributors

• Olga Bulat (@​obulat)
• Daniel Roe (@​danielroe)
• Xin Du (Clark) (@​clarkdo)
• Rafał Chłodnicki (@​rchl)
• Marcelo Botega Fontana (@​marcelobotega)

v2.16.3

Compare Source

2.16.3 is a patch release with bug fixes.

👉 Changelog

compare changes

🩹 Fixes

• types: Add return type for error() (#​19044)
• types: Bring types from less into namespace (#​19738)
• types: Sync vue type augmentations with Vue 2.7 (#​19526)
• config: Move preset to inner postcssOptions (#​19518)
• webpack: Add node-fetch-native to externals list (#​19755)

🏡 Chore

• Release all packages with latest tag except nuxt (4e9dcddcb)
• examples: Use 2.x version of nuxt instead of latest (#​19737)
• Lint package files (6ca842e36)

❤️ Contributors

• Daniel Roe - @​danielroe
• Olga Bulat - @​obulat
• Rafał Chłodnicki - @​rchl

v2.16.2

Compare Source

2.16.2 is a patch release with bug fixes.

✨ Highlights

The main change in this patch release is that we now patch the crypto node built-in during build to allow Nuxt 2 to be used on Node versions greater than Node 16, which should ease the pressure users feel after Node 16 reaches its own EOL this year.

Warning
This should not be taken for an endorsement of continuing to run with Webpack 4, which is out of date and has a number of dependencies with issues. I expect that number to continue to grow, and we will not be able to resolve all of them. I would strongly urge migrating to Nuxt 3 if possible and the team will do our best to make this possible over the course of the year ❤️

👉 Changelog

compare changes

🚀 Enhancements

• types: Add basic types for Nuxt interface (#​9772)

🩹 Fixes

• vue-renderer: Insert charset before title (#​18998)
• types: Remove non-existent properties from context (#​19021)
• Add minimum node 14.18 version constraint (#​19112)
• config: Upgrade md4 -> md5 on node > 16 (#​19108)
• vue-app: Handle promise rejection from asyncData (#​18585)

🏡 Chore

• Update tag name (15787a2)
• Fix version merge (49ea657)
• Add @types/jest (d48efa6)

❤️ Contributors

• Rafał Chłodnicki (@​rchl)
• Daniel Roe (@​danielroe )
• Pooya Parsa (@​pi0)
• Harlan Wilton (@​harlan-zw)

v2.16.1

Compare Source

Nuxt 2.16.1 is a patch release with a couple of small bugfixes to last week's 2.16.0 release.

v2.16.0...v2.16.1

🩹 Fixes

• deps: Downgrade @types packages depending on webpack 5 (#​18827)
• config: Let webpack merge postcss plugins (#​18839)
• types: Import Location from vue-router (#​18908)

🏡 Chore

• Tag 2.x releases appropriately (aba93e9)
• Revert node types to v16 (3d034a3)
• Remove stub type definitions (daed62a)

❤️ Contributors

• H-kishi
• Daniel Roe [email protected]

v2.16.0

Compare Source

Nuxt 2.16.0 is the first minor release since Feb 15, 2021. The focus is mostly on releasing the latest fixes and enhancements that have been present in nuxt-edge for some time.

✨ Highlights

• upgrade to PostCSS 8
• default to core-js v3
• ... full details below

⚠️ Breaking changes

• In this PR we only support Node 14+. This is mostly an issue for dependencies, which we need to keep updated for security reasons. Going forward until its own EOL, Nuxt 2 will only officially support Node versions that have not reached their EOL.

• New postcss options format. See https://github.com/nuxt/nuxt/pull/9671 for full details.

• Dependency upgrades. A number of dependencies have dropped support for earlier node versions. dotenv has changed how it parses .env files in a number of edge cases. glob now requires / instead of \ on windows machines. There may also be other changes that affect your usage, so please do upgrade with care.

• Vue 2.7 upgrade. Although you can use Vue 2.7 with any release of Nuxt 2, 2.16.0 for the first time includes it as a dependency, which means that you may well encounter some issues associated with upgrading Vue 2.6 -> Vue 2.7.

  This may be a good time to consider using the composition API utilities provided by https://github.com/nuxt/bridge instead, which mirror Nuxt 3's more precisely than @nuxtjs/composition-api. (You can opt-in to just these utilities by disabling the other bridge modules individually.)

Changelog

compare changes

🚀 Enhancements

• config: Support nuxtrc in dist directory (#​9280)
• generator: Add ignoreEnv generate option during ensureBuild(cmd) (#​8955)
• server: Allow disabling serve-static middleware (#​9365)
• types: Add asyncData return types to component instance type (#​9239)
• vue-app: context.beforeSerialize method (#​9332)
• vue-app: Pass store to createRouter (#​9629)
• Default to core-js version 3 (#​9987)
• webpack: ⚠️ Update postcss to v8 (#​9671)

🩹 Fixes

• vue-app: Respect scroll-margin-top when navigating with hash (#​9187)
• webpack: Use javascript/auto for js rule (#​9180)
• server: Unregister error event listener (#​9245)
• babel-preset-app: Respect explicit options.targets for modern preset (#​9337)
• types: Add nuxt.config alias type (#​9424)
• vue-app: Check whether route exists within nuxt app before replacing (#​9431)
• vue-renderer: Decode route path for payload.js (#​9494)
• vue-app: Don't normalise route path if it's valid (#​9460)
• vue-app: Redirect to external url replaces current history entry (#​9500)
• utils: trailingSlash causes error with dynamic nuxt-child routes (#​9505)
• types: Add onNuxtLoaded and onNuxtReady types (#​9510)
• vue-app: Re-register components construtor in HMR (#​9539)
• types: Add typing for build.stats options (#​9555)
• babel: Loose option for babel private-property-in-object (#​9631)
• vue-app: Serialize route meta to allow functions (#​9634)
• vue-app: null check for $root access (#​9150)
• generator: Allow passing builder to getGenerator (#​9574)
• generator: Throw an error when Builder is missing (#​9663)
• vue-app: Use correct $config for finding basePath (#​9706)
• vue-renderer: Ensure custom build indicator preserves some whitespace (#​9705)
• 'npm run test' fails because the last command lacks 'yarn' (#​9761)
• generator: Decode path with ufo (#​9739)
• cli: Ensure nuxt instance is closed when skipping build (3e9d7e3)
• Nuxt-child-key in web-types.json (#​9792)
• types: Return type of $fetch (#​9854)
• deps: Update ua-parser-js to 1.x (#​9979)
• deps: Update ya-parser-js to latest 0.7.x (#​9979)
• vue-app: Call ssrContext.unsetMutationObserver only if it exists (#​10132)
• webpack: Allow files with .cjs extension to be transpiled (#​10340)
• vue-app: Preview mode fetch (#​10489)
• webpack: Resolve .wasm extension with lower priority (#​10676)
• vue-app: Clear hide timeout when calling clear() (#​10086)

📦 Build

• Use 7 digit edge hashes (0501a42)
• Upgrade to rollup v3 (#​18686)

🌊 Types

• Add prefetchPayloads to router options (#​9715)

🏡 Chore

• release: V2.15.6 (a53fd32)
• pkg: Build for es2019 target (#​9328)
• types: Add types for new false option for render.static (#​9372)
• Update error tests (d4e5998)
• test: Revert jest and babel-jest to 26 (#​9377)
• Ignore audit 1754,1755 (39f7859)
• Fix vetur extension syntax for GitPod (#​9572)
• Ignore globby > 12 upgrade as needs native esm (e0968a3)
• Update rollup plugins (5614399)
• Fix code formatting (17bbb21)
• utils: Improve stripWhitespace utility (#​9668)
• Update license year to present (#​9682)
• Add separate file with security disclosure info (#​9738)
• Update logo (#​9796)
• doc: Fix link to contribution guide (#​9815)
• test: Fix external redirect link (#​9816)
• Update funding.yml (1f85137)
• Update lockfile (7614360)
• Update audit list (6f73c36)
• Update lockfile and audit (1878b26)
• Update issue template with nuxt 3 (#​9948)
• Enable blank issues (54542c1)
• radme: Fix browserstack and saucelabs icons (#​10068)
• Update dependencies (#​10510)
• Update repo (773d292)
• Ignore vue and vuex major updates (bafc814)
• Update README.md (#​10831)
• Update pull request template (0db7e7b)
• Update issue templates (f36fb9c)
• Rename 2.x bug template (ba966cf)
• Move nuxt 2 report to bottom (ce7b1a9)
• Bump ua-parser-js version (1cedad5)
• Bump test/dev dependencies (#​18672)
• Upgrade unjs dependencies (#​18670)
• Use named export from defu (#​18679)

✅ Tests

• Update async size test (23e2018)
• Update size limit tests (4f11d3c)

🤖 CI

• Update test branch condition (331a2d7)
• Update workflows (9677fbe)

⚠️ Breaking Changes

• webpack: ⚠️ Update postcss to v8 (#​9671)

❤️ Contributors

• Xin Du (Clark) [email protected]
• Daniel Roe [email protected]
• Arik
• Bot08
• Pooya Parsa [email protected]
• Yuyao Nie <nieyuyao0826@​hotmail.com>
• Sébastien Chopin [email protected]
• Clément Ollivier [email protected]
• Michiel Doesburg
• Rafał Chłodnicki [email protected]
• Abdfn
• K-utsumi
• Matteo Rigon <matteo.rigon7@​gmail.com>
• Mehmet
• Thibault Vlacich [email protected]
• Jon-ht <jonathan.huteau15@​gmail.com>
• Ahmadou Waly NDIAYE [email protected]
• Daniil Okhlopkov
• Aewshyae
• Michał Kędrzyński [email protected]
• Mrazauskas
• Loick Le Digabel [email protected]
• Payel Karmakar
• SlayerOfTheBad
• Ofer Shaal [email protected]
• Mohammad Saleh Fadaei
• Andrew Luca [email protected]
• David Ovčačík [email protected]
• Carbotaniuman
• William L'Archeveque [email protected]
• Matthieu Sieben

moritzsternemann/vue-plausible (vue-plausible)

v1.3.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 88.67%. Comparing base (0965a13) to head (1292d69).

❗ Current head 1292d69 differs from pull request most recent head fc116bb

Please upload reports for the commit fc116bb to get more accurate results.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #563   +/-   ##
=======================================
  Coverage   88.67%   88.67%           
=======================================
  Files           1        1           
  Lines          53       53           
  Branches       29       29           
=======================================
  Hits           47       47           
  Misses          6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[thisislawatts]

Anything I can do to help see this merged? t would be great to see this package updated to use the latest version of axios. ✨

[gkatsanos]

@Wuksha @pi0 would it be possible to update , especially axios ? we're getting duplicates from other apps we most of the folks are on 26.x or 27.x ..