[Snyk] Upgrade nuxt from 1.0.0-rc11 to 2.10.2 #8

snyk-bot · 2019-11-25T03:46:46Z

Snyk has created this PR to upgrade nuxt from 1.0.0-rc11 to 2.10.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 135 versions ahead of your current version.
The recommended version was released a month ago, on 2019-10-21.

The recommended version fixes:

Severity	Title	Issue ID
	Arbitrary Command Injection	npm:macaddress:20180511
	Denial of Service (DoS)	npm:ws:20171108
	Arbitrary Code Execution	SNYK-JS-JSYAML-174129
	Timing Attack	SNYK-JS-ELLIPTIC-511941
	Denial of Service (DoS)	SNYK-JS-JSYAML-173999
	Cross-site Scripting (XSS)	SNYK-JS-WEBPACKBUNDLEANALYZER-174190
	Cross-site Scripting (XSS)	npm:vue:20180802
	Denial of Service (DoS)	npm:mem:20180117
	Regular Expression Denial of Service (ReDoS)	npm:braces:20180219
	Regular Expression Denial of Service (ReDoS)	npm:mime:20170907
	Regular Expression Denial of Service (ReDoS)	npm:vue:20180222

Release notes

Package name: nuxt
- 2.10.2 - 2019-10-21
  🐛 Bug Fixes
  - webpack
    - #6495 Enable devtool for dev mode
    - #6566 Normalize devtool for terser compatibility
  - config
    - #6583 Typo in unsafeInlineCompatibility name
  - vue-app
    - #6590 Fix collapsed SSR log
  📝 Examples
  - with-sockets
    - #6586 Fix cannot read property 'app' of undefined on nuxt build
  💖 Thanks to
  - @PedroD
  - Stephan Besser (@reskume)
- 2.10.1 - 2019-10-11
  🐞 Fixes
  - vue-app, webpack
    - #6504 Remove consola from client
  - utils
    - #6515 Fix error when router.trailingSlash is false
  - generator
    - #6362 Remove trailing slash when no subFolders are used
  - webpack
    - #6520 chunkhash and contenthash not work with extractCSS
  - cli
    - #6525 Enable server for nuxt build when pages should be generated
  🏡 Chore
  - readme
    - #6511 Remove deprecated starter template
  ⚓ Dependency Upgrades
  - vue-meta: Upgraded to v2.3 which fixes duplicated tags in SPA mode
  💖 Thanks to
  - Dennis Herzberg (@dennis47528)
  - Yuki Terashima (@y-temp4)
- 2.10.0 - 2019-10-02
  🌟Highlights
  - Support for improved typescript runtime
  - Experimental support for feature toggling for SUPER slim builds!
  - Mitigate problems with nuxt server stocking during development
  - Fix issues with internet-explorer in development mode
  - Upgrade to terser webpack plugin v2
  - Improved stability of loading-screen. No more endless loops (nuxt/loading-screen#44) and show fatal errors (nuxt/loading-screen#45) for the initial build
  🐛 Bug Fixes
  - core
    - #6490 Clear resolver cache for project files dev mode
  - vue-app
    - #6479 Error page layout not correctly applied in client-side rendering
    - #6473 Pass vm as arg to support data() with arrow function
    - #6433 Fix asyncData hydration when features.transition is false
    - #6430 Clear idle callback
    - #6217 Prevent looping on error during render of error page
  - webpack
    - #6298 Fix consola IE compatibility
    - Revert pause/resume
    - #6460 Correct sass options for sass-loader@8
    - #6448 Don't push to compilersWatching in callback
  - cli
    - #6441 Server should not be initialized in nuxt build
  - babel-preset-app
    - #6435 Use loose mode for babel class plugin
  - vue-renderer
    - #6429 Dont mutate options.head
  - config
    - #6371 Enable total timing by default when server.timing is enabled
  - config, vue-app
    - #6379 Add module declaration for config and vue-app
  🚀 Features
  - cli, config
    - #6399 cli.bannerColor option
  - config
    - #6414 serverMiddleware as a simple key/value object
  - builder
    - #6368 followSymlinks option to allow for symlinks
    - #6285 extendPlugins option and builder:extendPlugins hook
    - #6329 Add builder:prepared hook
    - #6342 Support adding custom middleware
  - cli
    - #6475 Catch build errors with cli:buildError hook
  - webpack
    - #6477 Use vue-meta browser build for client bundle
    - #6398 Upgrade terser-webpack-plugin to v2
    - #6350 Add webpack:config hook
  - server
    - #6438 Add config option to define etag hash function
  - vue-app
    - #6292 Add prefetch prop to <nuxt-link>
    - #6287 Support configurable features
    - #6297 Function watchQuery
  - general
    - #6432 Support setting (non-essential) vue-meta options by user
  - utils
    - #6277 Export sort routes
  - builder, router
    - #6331 Enforce uniform trailing slash handling
  💅 Refactors
  - cli
    - #6353 Call setup hook in run command with more args
  - builder
    - #6352 Await build.createRoutes to allow async functions inside it
  - babel-preset-app
    - #6087 Simplify babel preset config
  📝 Examples
  - with-sockets
    - #6396 Create server inside the export function
  🏡 Chore
  - general
    - Fix example in babel-preset-app readme
    - #6390 Lint vue-app templates
    - #6363 Rename setup hook to run:before
  💖 Thanks to
  - Louis-Marie Michelin (@lmichelin)
  - Daniel Roe (@danielroe)
  - Snir Shechter (@SnirShechter)
  - @radimhornicek
  - @xxRockOnxx
- 2.9.2 - 2019-08-28
  🐛 Bug Fixes
  - general
    - #6257 Improve watching experience for generated files
  - builder
    - #6283 fix(builder): apply overrides from app dir only
  - server
    - #6265 Treat https: null as https: undefined
  - nuxt-start
    - #6267 Add missing vue-client-only dependency
  - vue-app
    - #6264 Only overwrite leave listener when none provided or without done arg
    - #6255 Enforce default css when used with frameworks
  - config
    - #6258 Provide typescript backward compatibility
  💅 Refactors
  - core
    - #6271 Use hable
- 2.9.1 - 2019-08-20
  🐛 Bug Fixes
  - vue-app
    - #6252 Provide typescript backward compatibility
  - loading-screen
    - nuxt/loading-screen#38 set Content-Type for index page
  📝 Examples
  - CoffeeScript
    - #6248 Update module for using additionalExtensions
  💖 Thanks to
  - Artyom Bogomolov (@DevArtyom)
  - Rafał Chłodnicki (@rchl)
- 2.9.0 - 2019-08-20
  ⚠️ Important Notes
  - 👉 Minimum required node version is 8.9.0
  - 👉 Typescript support is now externalized. Refer to official docs and migration guide.
  - 👉 vue-meta upgraded to 2.0.0. Please refer to the changelog to review notable changes.
  - 👉 scrollBehavior option is deprecated in favor of app/router.scrollBehavior.js (#6055)
  - 👉 devModules option is deprecated in favor of buildModules (#6203)
  🐛 Bug Fixes
  - general
    - #6118 Fix modulepreload warnings
    - #6075 Throw error when building failed in quiet mode
    - #6070 Support babel corejs config for modern mode
    - #6021 Babel polyfill can not be disabled
  - renderer
    - #6033 Correctly load nomodule scripts in safari 10
  - cli
    - #6020 Prevent both nuxt & nuxt-edge being installed
  - vue-app
    - #6012 Emit triggerScroll to support hash navigation
    - #5920 Fix font-size and make width bigger
    - #5891 Always finish transition.leave asynchronously
    - #5890 Fix position of the build indicator when page scrolled
  - vue-renderer
    - #6223 Call render:resourcesLoaded hook before createRenderer
    - #5964 Clone SPA meta to prevent cache modification
  - webpack
    - #5906 Extract css breaks hmr and source-maps
  🚀 Features
  - cli
    - #6206 Export options
  - server
    - #6178 Allow passing loadingTimeout and other arguments to renderAndGetWindow
  - webpack
    - #6120 Allow function entries for build.transpile
  - vue-app
    - #6194 Add $nuxt.refresh
    - #6186 Use EventSource instead of WebSocket for build indicator
    - #6055 Support app/router.scrollBehavior.js and deprecate scrollBehavior
    - #5941 Add <client-only> alias for <no-ssr>
    - #5844 Allow customizing loading indicator
    - #6194 Add $nuxt.refresh() method or refresh the actual page asyncData and fetch
    - #6231 Export router options
    - #6222 Support functional watchQuery
  - vue-renderer
    - #5975 Add csp option for csp v1 compatibility
    - #6134 Support prepend/append body tags during ssr for all allowed tag types
  - typescript
    - #5858 Externalize typescript support
  💅 Refactors
  - config
    - #6203 Rename devModules to buildModules
  - babel-preset-app
    - #6197 Remove babel-plugin-dynamic-import-node
  - webpack
    - #6179 Simplify transpile normalization
  - general
    - Refactor to adhere to @nuxt/eslint-config v1
  🏡 Chore
  - general
    - #6065 Fix typo
    - #5990 Inverse wording of error message
    - #5910 Update opencollective infos
    - #5869 Rename backers -> nuxters
  - babel-preset-app
    - #5897 Fix typo in babel-preset readme
  ⚓ Dependency Upgrades
  - file-loader@4
  - url-loader@2
  - cache-loader@4
  - css-loader@3
  - vue-meta@2
  - fs-extra@8
  💖 Thanks to
  - 719media (@719media)
  - Anthony Fu (@antfu)
  - Farzad Soltani (@farzadso)
  - François Hodierne (@znarf)
  - Josh Deltener (@hecktarzuli)
  - Rafał Chłodnicki (@rchl)
  - Ricardo Gobbo de Souza (@ricardogobbosouza)
  - Ustun Ozgur (@ustun)
  - William Chong (@williamchong007)
  - bluelovers (@bluelovers)
  - orblazer (@orblazer)
  - yutanoma (@yutanoma)
  - Dzmitry Bachko (@dbachko)
- 2.8.1 - 2019-06-04
  🐛 Bug Fixes
  - vue-renderer
    - #5867 Fix exception on property access of undefined object
    - #5863 Prevent "can't set headers after they are sent" error in modern server mode
  - vue-app
    - #5864 Reduce consola direct access and don't override browser console.log
  - cli
    - #5865 Don't mutate options export to prevent ESM regression with nuxt.config in mixed (cjs + esm) mode (TIP: never mix them as is non-standard and may be unsupported in any future version)
  💅 Refactors
  - typescript
    - #5854 Prepare for external typescript support
  💖 Thanks to
  - Rafał Chłodnicki (@rchl)
- 2.8.0 - 2019-05-30
  😎 Developer Experience
  - #5770 Add a group for SSR logs to avoid polluting the browser console
  - #5810 Fancier browser logs with consola
  - #5820, #5832, #5834 Show build indicator in the browser when rebuilding code:
  - #5753 Watch for pages/ creation when default page displayed
  - #5812 Only listen for file changes for supported extensions
  - #5753 Re-use the same port when randomly assigned when restarting in dev mode
  🐛 Bug Fixes
  - vue-renderer
    - #5807 Add User-Agent‍ to Vary header in modern server mode
    - #5764 Safe format SSR logs
  - server
    - #5793 Preserve random port when restarting
    - Return listener when calling listen
  - builder
    - #5753 Watch for pages/ creation when default page displayed
    - #2812 Only listen for file changes for supported extensions
  - generator
    - #5791 Minify spa fallback
  - types
    - #5785 Add type definition for functional babel.presets
  - vue-app
    - #5757 Reuse page component with watchQuery
    - #5746 Remove trailing slash in vue-router non-strict mode
    - #5752 Don't attach catch handler to already loaded component
    - #5824 fixPrepatch in-out transition fix (issue #5797)
  - utils
    - #5754 Handle serializeFunction edge case
  🚀 Features
  - vue-renderer
    - #5745 Add render.injectScripts option
    - #5784 Support render.ssrLog for controlling SSR logs
  💅 Refactors
  - core
    - #5796 Use require.resolve instead of Module internals
  - builder
    - #5792 Pass nuxt options to template as nuxtOptions
  - vue-app
    - #5770 Add a group for SSR logs
    - #5826 simplify mount error log
  - general
    - #5748 Small readability improvements
  📝 Examples
  - auth-jwt
    - #5775 Use named store export to prevent warning
  - typescript
    - #5742 Add missing ts-node dependency
  🏡 Chore
  - ci
    - #5802 Upload test report to CircleCI and Azure
    - Add flags for codecov
    - Enable audit
  - general
    - Remove unused dependency cross-env
    - Add FUNDING.md
    - Improve links in readme
  ♻️ Tests
  - general
    - #5790 Add unit tests for core/resolver.js
    - #5782 Remove duplicate unit tests in packages/core/test/resolver
  ⚓ Dependency upgrades
  - consola v2.7.0
  - connect v3.7.0
  - webpack v4.32
  - babel v7.4.5
  - thread-loader v2.1.2
  💖 Thanks to
  - @aaronransley
  - @alexandreDavid
  - @Elevista
  - @utatti
  - @rchl
  - @maunier
  - @cuixiaorui
  - @Globegitter
- 2.7.1 - 2019-05-14
  Fixes
  - builder: use warn only for mismatched dependencies (#5723)
  - webpack: correctly resolve consola for the client bundle (#5729)
  Dependency Upgrades
  - postcss-import-resolver: prefer style property when resolving (jsless/postcss-import-resolver#2)
  Thanks to
  - Blake Kostner (@btkostner)
- 2.7.0 - 2019-05-14
  DX Improvements 💅
  
  SSR logs in your browser 🖥️
  
  We all know the console.log debugging method, but when working with universal applications, you have to remember that sometimes, your logs are in your terminal and not in your browser console.
  
  This can be really annoying when developing a Nuxt.js application, starting with this version and running nuxt dev, the ssr logs are now reported to your browser console:
  
  Detecting store/ creation 👀
  
  Nuxt.js now detects when you created a store/ directory and will reload himself auto-magically so you don't have to restart it anymore.
  
  PS: We also improved the serverMiddleware watch to restart Nuxt.js and clean their cache
  
  Fixes ✔️
  - builder: corretly detect mode of hashed plugins (#5695)
  - builder: call watch:restart after watch:fileChanged hook (#5620)
  - utils: node v8 not support dotAll in regex (#5608)
  - vue-app: properly catch component loading error (#5687) (#5688) (#5690)
  - vue-app: consider watchQuery option in routerViewKey (#5516)
  - vue-renderer: await on spa:templateParams hook (#5619)
  - webpack: set log level to warn for HardSourcePlugin (#5653)
  - vue-app: properly catch loading error in component prefetching (#5688) (#5690)
  - vue-app: avoid using aliases in templates (#5656)
  - builder: watch store dir and serverMiddleware paths (#5681)
  Features 🚀
  - vue-app: rename transition to pageTransition and deprecate it (#5558)
  - vue-renderer/vue-app: report SSR console logs to the browser with consola (#5673)
  - webpack: suppress not found typescript warnings (#5635)
  - webpack: extendable babel.presets and babel envName (#5637)
  - configurable aliases (#5655)
  Refactors 🧹
  - server: exclude dist files request from browser detection (#5571)
  - vue-renderer: remove chalk in renderer (#5609)
  - vue-renderer: split renderer into ssr, spa and modern (#5559)
  - move modern detection from server to utils (#5584)
  Examples 📚
  - auth-routes: fix typo (#5651)
  - babel-preset-app: add core-js@3 example in the readme (#5633)
  - docker: fix Dockerfile casing (#5705)
  Typescript 👷
  
  Only for typescript users, Nuxt.js v2.7 dropped support for node < 8.6 relate to ts-loader v6
  - add babel config types (#5666)
  - upgrade ts-loader to v6 (#5691)
  - fix context.app type (#5701)
  - fix extendRoutes method type (#5700)
  - prevent ts-node to register twice (#5699)
  Thanks to 🙏
  - Christian Lehr (@clehr)
  - Hyunje Jun (@utatti)
  - Rafał Chłodnicki (@rchl)
  - Yama-Tomo (@Yama-Tomo)
  - René Stalder (@renestalder)
  - Kohei Ota (@inductor)
- 2.6.3 - 2019-04-25
- 2.6.2 - 2019-04-15
- 2.6.1 - 2019-04-04
- 2.6.0 - 2019-04-04
- 2.5.1 - 2019-03-21
- 2.5.0 - 2019-03-21
- 2.4.5 - 2019-02-26
- 2.4.3 - 2019-02-06
- 2.4.2 - 2019-01-30
- 2.4.1 - 2019-01-30
- 2.4.0 - 2019-01-28
- 2.3.4 - 2018-11-26
- 2.3.3 - 2018-11-26
- 2.3.2 - 2018-11-20
- 2.3.1 - 2018-11-16
- 2.3.0 - 2018-11-16
- 2.2.0 - 2018-10-13
- 2.1.0 - 2018-09-30
- 2.0.0 - 2018-09-21
- 1.4.5 - 2018-11-27
- 1.4.4 - 2018-10-19
- 1.4.2 - 2018-08-01
- 1.4.1 - 2018-06-06
- 1.4.0 - 2018-03-01
- 1.3.0 - 2018-01-31
- 1.2.1 - 2018-01-26
- 1.2.0 - 2018-01-26
- 1.1.1 - 2018-01-13
- 1.1.0 - 2018-01-12
- 1.0.0 - 2018-01-08
- 1.0.0-rc9 - 2017-09-06
- 1.0.0-rc8 - 2017-08-30
- 1.0.0-rc7 - 2017-08-29
- 1.0.0-rc6 - 2017-08-21
- 1.0.0-rc5 - 2017-08-21
- 1.0.0-rc4 - 2017-08-09
- 1.0.0-rc3 - 2017-07-28
- 1.0.0-rc2 - 2017-07-27
- 1.0.0-rc11 - 2017-09-07

nuxt GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade nuxt from 1.0.0-rc11 to 2.10.2. See this package in NPM: https://www.npmjs.com/package/nuxt See this project in Snyk: https://app.snyk.io/org/ajesse11x/project/d81e0b3e-907c-490c-967e-1d6a129cd6dc?utm_source=github&utm_medium=upgrade-pr

[Snyk] Upgrade nuxt from 1.0.0-rc11 to 2.10.2 #8

Are you sure you want to change the base?

[Snyk] Upgrade nuxt from 1.0.0-rc11 to 2.10.2 #8

Conversation

snyk-bot commented Nov 25, 2019

Snyk has created this PR to upgrade nuxt from 1.0.0-rc11 to 2.10.2.

🐛 Bug Fixes

📝 Examples

💖 Thanks to

🐞 Fixes

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🌟Highlights

🐛 Bug Fixes

🚀 Features

💅 Refactors

📝 Examples

🏡 Chore

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

🐛 Bug Fixes

📝 Examples

💖 Thanks to

⚠️ Important Notes

🐛 Bug Fixes

🚀 Features

💅 Refactors

🏡 Chore

⚓ Dependency Upgrades

💖 Thanks to

🐛 Bug Fixes

💅 Refactors

💖 Thanks to

😎 Developer Experience

🐛 Bug Fixes

🚀 Features

💅 Refactors

📝 Examples

🏡 Chore

♻️ Tests

⚓ Dependency upgrades

💖 Thanks to

Fixes

Dependency Upgrades

Thanks to

DX Improvements 💅

SSR logs in your browser 🖥️

Detecting store/ creation 👀

Fixes ✔️

Features 🚀

Refactors 🧹

Examples 📚

Typescript 👷

Thanks to 🙏

Detecting `store/` creation 👀