build(deps): bump the regular-updates group with 4 updates

[dependabot]

Bumps the regular-updates group with 4 updates: @iconify-json/simple-icons, @nuxt/eslint, @nuxt/icon and nuxt.

Updates @iconify-json/simple-icons from 1.2.91 to 1.2.92

Commits

• See full diff in compare view

Updates @nuxt/eslint from 1.12.1 to 1.16.0

Commits

• de61df2 chore: release v1.16.0
• 74c56cc chore(deps): upgrade dependencies and fix resulting type/CI issues (#682)
• f852ae5 chore: release v1.15.2
• 69aa40e fix: prevent race condition of running checker module before eslint config is...
• 8961807 chore: release v1.15.1
• b554991 chore: release v1.15.0
• 305a9bb feat: relax peer deps range to support ESLint v10, fix #642
• 997aa95 chore: release v1.14.0
• bc637da chore: release v1.13.0
• See full diff in compare view

Updates @nuxt/icon from 2.1.1 to 2.4.1

Release notes

Sourced from @​nuxt/icon's releases.

v2.4.1

No significant changes

    View changes on GitHub

v2.4.0

   🐞 Bug Fixes

• fix(client-bundle): don't warn end users about dropped integration icons by @​benjamincanac in nuxt/icon#517
• fix: support Nitro 3 runtime imports by @​onmax in nuxt/icon#516
• fix: avoid relying on global fetch by @​KazariAI in nuxt/icon#514

    View changes on GitHub

v2.3.1

   🐞 Bug Fixes

• Include Nuxt layers in icon scanner context.  -  by @​oyedejioyewole and Anthony Fu (via agent) in nuxt/icon#505 (1345d)

    View changes on GitHub

v2.3.0

   🚀 Features

• Standalone Vite plugin and reusable utils for client icon bundling  -  by @​antfubot in nuxt/icon#506 (b386f)

    View changes on GitHub

v2.2.5

   🐞 Bug Fixes

• Don't hard-fail on unresolvable hook-contributed client bundle icons  -  by @​benjamincanac in nuxt/icon#504 (c4f79)

    View changes on GitHub

v2.2.4

   🐞 Bug Fixes

• Resolve client bundle collections from rootDir/workspaceDir  -  by @​benjamincanac in nuxt/icon#502 (a744c)

   🏎 Performance

• server-bundle: Discover collections via directory listing  -  by @​TheAlexLichter and @​atinux in nuxt/icon#501 (c1770)

    View changes on GitHub

v2.2.3

   🐞 Bug Fixes

• Scope per-instance customize to unique CSS selector  -  by @​mukundshah and Sébastien Chopin in nuxt/icon#483 (17d93)

... (truncated)

Commits

• e062607 chore: release v2.4.1
• d9fbffe chore: update deps
• f9547a9 chore: release v2.4.0
• cd2c95a fix: avoid relying on global fetch (#514)
• fe6d83c fix: support Nitro 3 runtime imports (#516)
• f5c5787 fix(client-bundle): don't warn end users about dropped integration icons (#517)
• fe6a78a chore: release v2.3.1
• 1345dc9 fix: include Nuxt layers in icon scanner context. (#505)
• c56ee64 chore: release v2.3.0
• b386fbb feat: standalone Vite plugin and reusable utils for client icon bundling (#506)
• Additional commits viewable in compare view

Updates nuxt from 4.5.0 to 4.5.1

Release notes

Sourced from nuxt's releases.

v4.5.1

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

• nitro: Replace island teleports in a single html pass (#35515)
• nuxt: Add vue.optionsApi and disable it for v5+ (#35791)
• nuxt: Without pages, skip client plugins that require routing (#35794)
• nuxt: Skip payload revival plugin when ssr: false (#35782)

🩹 Fixes

• nitro: Read rspack dev output fs lazily for server entry (#35740)
• rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#35568)
• nuxt: Return global route for useRoute in detached effect scope (#35659)
• nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#35661)
• nuxt: Render client components in nested server components (#35669)
• nuxt: Preserve explicit useFetch method inference (#35671)
• nuxt: Revalidate cached route payloads instead of using force-cache (#35672)
• nuxt: Correct default export detection in plugin metadata (#35676)
• nuxt: Clear hide/reset timeouts in set() (#35534)
• kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#33845)
• nuxt: Preserve trailing slash in NuxtLink href when unset (#35501)
• nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#35656)
• nuxt: Filter plugin dependencies by build target (#35682)
• nuxt: Reload real page module on HMR of JSX render-function pages (#35678)
• nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#35690)
• kit: Surface module load errors instead of masking as missing (#35497)
• nuxt: Type auto-imported $fetch with nitro's $Fetch (#35704)
• nuxt: Don't reference app config sources in shared and node tsconfigs (#35673)
• vite: Resolve SSR inlined CSS module class name mismatch (#35610)
• nuxt: Generate layout types even when pages module is disabled (#35717)
• nitro: Skip resource hints for stylesheets already rendered as blocking links (#35691)
• kit: Dedupe layers that are both auto-scanned and explicitly extended (#35712)
• nuxt: Don't apply scroll behaviour after a subsequent nav (#35719)
• vite: Ensure server sourcemap-preserver plugin actually runs (#35680)
• vite: Preserve css suffix when extracting ssr inline styles (#35714)
• nuxt: Watch external component directories in development (#35652)
• nuxt: Don't exclude client entry module from style extraction (#35720)
• nuxt: Amend cleanup command in NUXT_B7014 error message (#35735)
• nuxt: Only pull in vue-router when there are island pages (#35739)
• vite: Suppress external warnings for internal vite-node paths (#35744)

... (truncated)

Commits

• 452dd50 v4.5.1
• 581651f fix(nuxt): reject top-level as prop for islands
• ee6c846 fix(nuxt): reject reserved template island prop under runtime compiler
• ad624a7 fix(nuxt): case-fold route rule keys to match folded lookups
• 4e35ae9 fix(nitro): bound island props and v-for to prevent unauthenticated DoS
• 352135f fix(nuxt): remove dev error overlay when error is cleared (#35821)
• b1a8e93 fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (#35834)
• df55902 fix(nuxt): convert inline route rules exactly or drop with a warning (#35455)
• 083b750 fix(nuxt): warn when an imports preset from cannot be resolved (#35799)
• 61eb637 perf(nuxt): skip payload revival plugin when ssr: false (#35782)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions