create-nuxt-base 2.3.0 → 2.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,8 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
|
|
4
4
|
|
|
5
|
+
### [2.3.1](https://github.com/lenneTech/nuxt-base-starter/compare/v2.3.0...v2.3.1) (2026-03-15)
|
|
6
|
+
|
|
5
7
|
## [2.3.0](https://github.com/lenneTech/nuxt-base-starter/compare/v2.2.8...v2.3.0) (2026-03-09)
|
|
6
8
|
|
|
7
9
|
### [2.2.8](https://github.com/lenneTech/nuxt-base-starter/compare/v2.2.7...v2.2.8) (2026-03-08)
|
|
@@ -1,35 +1,42 @@
|
|
|
1
1
|
# NPM Package Maintainer Memory - nuxt-base-template
|
|
2
2
|
|
|
3
3
|
## Project Basics
|
|
4
|
+
|
|
4
5
|
- Package manager: pnpm (pnpm-lock.yaml present)
|
|
5
6
|
- Type: Private Nuxt 4 template (not a library)
|
|
6
7
|
- Test command: `pnpm run test:unit` (vitest, 43 tests in 2 files)
|
|
7
8
|
- Build command: `pnpm run build` (nuxt build)
|
|
8
9
|
|
|
9
10
|
## Key Dependency Patterns
|
|
11
|
+
|
|
10
12
|
- `better-auth`, `@better-auth/passkey`, `tus-js-client` are peer dependencies of `@lenne.tech/nuxt-extensions` - keep in `dependencies`
|
|
11
13
|
- `@nuxt/ui` and `@vueuse/nuxt` belong in `dependencies` (used in app/ source files with type imports)
|
|
12
14
|
- pnpm sometimes auto-moves packages to devDependencies during `-D` updates - watch and fix
|
|
13
15
|
|
|
14
16
|
## Security Overrides
|
|
17
|
+
|
|
15
18
|
- Overrides are in `pnpm.overrides` (inside the `pnpm` key), NOT a top-level `overrides` key
|
|
16
19
|
- `pnpm audit --fix` outputs proposed overrides as JSON (does not apply automatically)
|
|
17
20
|
- `pnpm install` must be run after adding/updating overrides to re-resolve lockfile
|
|
18
21
|
- `nanotar` vulnerability from nuxt has NO patched version (`<0.0.0`) - cannot be fixed
|
|
19
22
|
|
|
20
23
|
## Deprecated Package Notes
|
|
24
|
+
|
|
21
25
|
- `@hey-api/client-fetch`: deprecated ("bundled in @hey-api/openapi-ts since v0.73.0") but still a valid runtime HTTP client for generated API SDKs - KEEP in dependencies
|
|
22
26
|
- `openapi-ts.config.ts` uses deprecated `lint`/`format` options; use `postProcess: ['eslint', 'prettier']` instead
|
|
23
27
|
- `@nuxtjs/color-mode`: do NOT add to devDeps - @nuxt/ui brings its own 3.x internally; 4.0.0 would conflict
|
|
24
28
|
|
|
25
29
|
## Override Cleanup Notes (2026-03-09)
|
|
30
|
+
|
|
26
31
|
Removed as no longer needed:
|
|
32
|
+
|
|
27
33
|
- `devalue@<=5.6.2` - nuxt requires ^5.6.2, latest is 5.6.3 (always picked)
|
|
28
34
|
- `fast-xml-parser@>=5.0.0 <5.3.8` - @nuxtjs/sitemap requires ^5.3.3, latest is 5.4.2 (always safe)
|
|
29
35
|
- `markdown-it@>=13.0.0 <14.1.1` - prosemirror-markdown requires ^14.0.0, latest is 14.1.1 (always picked)
|
|
30
36
|
- `minimatch@>=5.0.0 <5.1.8` - readdir-glob installs minimatch 5.1.9 which is already >=5.1.8 (safe)
|
|
31
37
|
|
|
32
38
|
Still required (keep these overrides):
|
|
39
|
+
|
|
33
40
|
- `@hono/node-server@<1.19.10` - @prisma/dev requires 1.19.9 exactly
|
|
34
41
|
- `hono@<4.12.4` - @prisma/dev requires 4.11.4 exactly
|
|
35
42
|
- `lodash@>=4.0.0 <=4.17.22` - @chevrotain/gast requires 4.17.21 exactly (vulnerable)
|
|
@@ -40,7 +47,9 @@ Still required (keep these overrides):
|
|
|
40
47
|
- `tar@<=7.5.9` - @mapbox/node-pre-gyp requires ^7.4.0 (7.4.x is vulnerable)
|
|
41
48
|
|
|
42
49
|
## Version History (2026-03-09)
|
|
50
|
+
|
|
43
51
|
After maintenance, all packages at latest:
|
|
52
|
+
|
|
44
53
|
- `@lenne.tech/nuxt-extensions`: 1.3.0
|
|
45
54
|
- `nuxt`: 4.3.1
|
|
46
55
|
- `vitest`: 4.0.18 (major from 3.x)
|
|
@@ -65,9 +65,10 @@ export default defineNuxtConfig({
|
|
|
65
65
|
// Icon Configuration
|
|
66
66
|
// ============================================================================
|
|
67
67
|
icon: {
|
|
68
|
-
//
|
|
68
|
+
// Icons used in v-for loops or dynamic rendering must be in the client bundle
|
|
69
|
+
// Dynamic icons can set via icons, e.g. icons: ['lucide:trash', 'lucide:key', 'lucide:copy', 'lucide:loader-circle'],
|
|
69
70
|
clientBundle: {
|
|
70
|
-
|
|
71
|
+
scan: true,
|
|
71
72
|
},
|
|
72
73
|
},
|
|
73
74
|
|
package/package.json
CHANGED