chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/anthropic (source)	^3.0.63 → ^3.0.64
@ai-sdk/gateway (source)	^3.0.77 → ^3.0.83
@ai-sdk/vue (source)	^3.0.134 → ^3.0.141
@iconify-json/logos	^1.2.10 → ^1.2.11
@iconify-json/lucide	^1.2.98 → ^1.2.100
@modelcontextprotocol/sdk (source)	^1.27.1 → ^1.28.0
@nuxtjs/mcp-toolkit (source)	^0.7.0 → ^0.13.0
@nuxtjs/mdc	^0.20.2 → ^0.21.0
@regle/core (source)	^1.20.4 → ^1.21.2
@regle/rules (source)	^1.20.4 → ^1.21.2
ai (source)	^6.0.134 → ^6.0.141
happy-dom	^20.8.4 → ^20.8.9
joi	^18.0.2 → ^18.1.1
pnpm (source)	10.32.1 → 10.33.0
vitest (source)	^4.1.0 → ^4.1.2

---

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v3.0.64

Compare Source

Patch Changes

• 05b8ca2: feat (provider/anthropic): support passing metadata.user_id

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.28.0

Compare Source

What's Changed

• feat: use scopes_supported from resource metadata by default (fixes #​580) by @​antogyn in #​757
• [v1.x backport] Default to client_secret_basic when server omits token_endpoint_auth_methods_supported by @​pcarleton in #​1611
• fix: reject plain JSON Schema objects passed as inputSchema by @​tiluckdave in #​1596
• fix: clear _timeoutInfo in _onclose() and scope .finally() abort controller cleanup by @​pcarleton in #​1462
• fix(server/auth): RFC 8252 loopback port relaxation by @​poteat in #​1738
• chore: bump version to 1.28.0 by @​felixweinberger in #​1746

New Contributors

• @​antogyn made their first contribution in #​757
• @​tiluckdave made their first contribution in #​1596
• @​poteat made their first contribution in #​1738

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

nuxt-modules/mcp-toolkit (@​nuxtjs/mcp-toolkit)

v0.13.0

Compare Source

What's Changed

Features 🚀

• feat(module): align MCP types with sdk and improve DX by @​HugoRCD in #​182

Bug Fixes 🐞

• fix(module): widen h3 peer and avoid static toWebRequest import by @​HugoRCD in #​183
• fix: avoid secure-exec bundle error on cloudflare workers by @​HugoRCD in #​192

Documentation 📚

• docs: add copy-paste AI prompts to documentation pages by @​HugoRCD in #​177

Dependency Updates 📦

• chore(deps): update pnpm/action-setup action to v5 by @​renovate[bot] in #​179
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​178
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​180
• chore(deps): lock file maintenance by @​renovate[bot] in #​181
• chore(deps): update peerdependency h3 to >=1.15.10 by @​renovate[bot] in #​185
• chore(deps): update devdependency typescript to v6 by @​renovate[bot] in #​188
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​186
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​190

Full Changelog: https://github.com/nuxt-modules/mcp-toolkit/compare/@nuxtjs/mcp-toolkit@0.12.0...@​nuxtjs/mcp-toolkit@0.13.0

v0.12.0

Compare Source

What's Changed

Features 🚀

• feat: allow tools to return primitives and throw errors natively by @​HugoRCD in #​164
• feat: allow prompt handlers to return a simple string by @​HugoRCD in #​167
• feat: re-export completable from MCP SDK by @​HugoRCD in #​169
• feat: add extractToolNames utility for middleware logging by @​HugoRCD in #​170
• feat: add instructions support for MCP server metadata by @​HugoRCD in #​171
• feat: support MCP server metadata fields by @​HugoRCD in #​172
• feat: export McpToolExtra type alias / add autoImports option by @​HugoRCD in #​173
• feat(module): add optional role field to prompt definitions by @​HugoRCD in #​174
• feat(module): add group and tags support by @​HugoRCD in #​176

Bug Fixes 🐞

• fix: deliver results via rpc to prevent silent truncation by @​HugoRCD in #​163
• fix(deps): external secure-exec to avoid warnings by @​larbish in #​175

Continuous Integration 🔄

• ci: replace tag-based releases with changesets by @​HugoRCD in #​165

New Contributors

• @​larbish made their first contribution in #​175
• @​github-actions[bot] made their first contribution in #​168

Full Changelog: https://github.com/nuxt-modules/mcp-toolkit/compare/v0.11.0...@​nuxtjs/mcp-toolkit@0.12.0

v0.11.0

Compare Source

What's Changed

Features 🚀

• feat: add experimental code mode with secure-exec v8 isolates by @​HugoRCD in #​162

Full Changelog: nuxt-modules/mcp-toolkit@v0.10.0...v0.11.0

v0.10.0

Compare Source

What's Changed

Features 🚀

• feat: add useMcpSession utils by @​HugoRCD in #​158
• feat: allow dynamic definitions and conditional setup by @​HugoRCD in #​159
• feat: add mid-session dynamic registration via useMcpServer() by @​HugoRCD in #​160

Bug Fixes 🐞

• fix: ensure next() returns Response instead of undefined by @​HugoRCD in #​161

Full Changelog: nuxt-modules/mcp-toolkit@v0.9.0...v0.10.0

v0.8.0

Compare Source

What's Changed

Features 🚀

• feat: add MCP session management with stateful transport by @​HugoRCD in #​156

Bug Fixes 🐞

• fix(docs): derive MCP page URLs from request origin by @​onmax in #​143
• fix: declare h3 as peer dependency for strict package managers by @​clawtom in #​153
• fix(module): return empty discovery responses by @​onmax in #​145

Documentation 📚

• docs: make landing page studio compatible by @​HugoRCD in #​139

New Contributors

• @​clawtom made their first contribution in #​153

Full Changelog: nuxt-modules/mcp-toolkit@v0.7.0...v0.8.0

nuxt-content/mdc (@​nuxtjs/mdc)

v0.21.0

Compare Source

compare changes

🩹 Fixes

• Don't memoise configs, and allow external modules to call mdc:configSources (#​471)
• Normalize lang (#​459)
• cache: Fix issue where value watch could get out of sync (#​385)

🏡 Chore

• Upgrade deps (930318c)
• Remove mkdist resolution (344ee69)
• Keep mkdist@​2.3.0 (8881f62)

❤️ Contributors

• Farnabaz farnabaz@gmail.com
• Chris Towles chris.towles@gmail.com
• Juls0730 (@​juls0730)
• Daniel Roe (@​danielroe)

victorgarciaesgi/regle (@​regle/core)

v1.21.2

Compare Source

   🐞 Bug Fixes

• schemas: Fix generic types of RegleSchema root type  -  by @​victorgarciaesgi (aa921)

    View changes on GitHub

v1.21.1

Compare Source

   🚀 Features

• Add $setExternalErrors helper method #​316  -  by @​victorgarciaesgi in #​316 (e94cd)

   🐞 Bug Fixes

• Improve RegleStatus and RegleRoot types generic usage #​314  -  by @​victorgarciaesgi in #​314 (de1dd)
• Variants narrowing types not working for collections #​317  -  by @​victorgarciaesgi in #​317 (905bf)
• Fixed $edited comparing Dates day of week instead of time  -  by @​victorgarciaesgi (4804f)

    View changes on GitHub

v1.21.0

Compare Source

   🚀 Features

• Add $setExternalErrors helper method #​316  -  by @​victorgarciaesgi in #​316 (30c01)

   🐞 Bug Fixes

• Improve RegleStatus and RegleRoot types generic usage #​314  -  by @​victorgarciaesgi in #​314 (07470)
• Variants narrowing types not working for collections #​317  -  by @​victorgarciaesgi in #​317 (627a9)

    View changes on GitHub

capricorn86/happy-dom (happy-dom)

v20.8.9

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By @​capricorn86 in task #​2117
  • A security advisory (GHSA-w4gp-fjgq-3q4g) was reported for this security vulnerability. Big thanks to @​r74tech for reporting this!

v20.8.8

Compare Source

👷‍♂️ Patch fixes

• Fixes issue where export names can be interpolated as executable code in ESM - By @​capricorn86 in task #​2113
  • A security advisory (GHSA-6q6h-j7hj-3r64) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to @​tndud042713 for reporting this!

v20.8.7

Compare Source

👷‍♂️ Patch fixes

• Replace implementing Node.js Console with common IConsole interface to support latest version of Bun - By @​YevheniiKotyrlo in task #​1845

v20.8.6

Compare Source

👷‍♂️ Patch fixes

• Request.formData() should honor "Content-Type" header - By @​brianhelba in task #​2106

v20.8.5

Compare Source

👷‍♂️ Patch fixes

• Fixes error thrown when modifying DOM structure in connectedCallback() - By @​capricorn86 in task #​2110

hapijs/joi (joi)

v18.1.1

Compare Source

v18.1.0

Compare Source

pnpm/pnpm (pnpm)

v10.33.0

Compare Source

vitest-dev/vitest (vitest)

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features

• experimental:
  • Expose matchesTagsFilter to test if the current filter matches tags  -  by @​sheremet-va in #​9913 (eec53)
  • Introduce experimental.vcsProvider  -  by @​sheremet-va in #​9928 (56115)

   🐞 Bug Fixes

• Mark TestProject.testFilesList internal properly  -  by @​sapphi-red in #​9867 (54f26)
• Detect fixture that returns without calling use  -  by @​oilater in #​9831 and #​9861 (633ae)
• Drop vite 8.beta support  -  by @​AriPerkkio in #​9862 (b78f5)
• Type regression in vi.mocked() static class methods  -  by @​purepear and @​hi-ogawa in #​9857 (90926)
• Properly re-evaluate actual modules of mocked external  -  by @​hi-ogawa in #​9898 (ae5ec)
• Preserve coverage report when html reporter overlaps  -  by @​hi-ogawa in #​9889 (2d81a)
• Provide vi.advanceTimers to the preview provider  -  by @​sheremet-va in #​9891 (1bc3e)
• Don't leak event listener in playwright provider  -  by @​sheremet-va in #​9910 (d9355)
• Open browser in --standalone mode without running tests  -  by @​sheremet-va in #​9911 (e78ad)
• Guard disposable and optional body  -  by @​sheremet-va in #​9912 (6fdb2)
• Resolve retry.condition RegExp serialization issue  -  by @​nstepien and @​hi-ogawa in #​9942 (7b605)
• collect:
  • Don't treat extra props on test return as tests  -  by @​sheremet-va in #​9871 (141e7)
• coverage:
  • Simplify provider types  -  by @​AriPerkkio in #​9931 (aaf9f)
  • Load built-in provider without module runner  -  by @​AriPerkkio in #​9939 (bf892)
• expect:
  • Soft assertions continue after .resolves/.rejects promise errors  -  by @​mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @​hi-ogawa in #​9843 (6d74b)
  • Fix sinon-chai style API  -  by @​hi-ogawa in #​9943 (0f08d)
• pretty-format:
  • Limit output for large object  -  by @​hi-ogawa and Claude Opus 4.6 (1M context) in #​9949 (0d5f9)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 06:00 AM and 09:59 AM, only on Monday ( * 6-9 * * 1 ) in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

npm i https://pkg.pr.new/@nuxt/ui@6262

commit: feb7086