create-nuxt-base 2.3.0 → 2.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,15 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
|
|
4
4
|
|
|
5
|
+
## [2.4.0](https://github.com/lenneTech/nuxt-base-starter/compare/v2.3.1...v2.4.0) (2026-03-16)
|
|
6
|
+
|
|
7
|
+
|
|
8
|
+
### Features
|
|
9
|
+
|
|
10
|
+
* add production default dockerfile ([e338c93](https://github.com/lenneTech/nuxt-base-starter/commit/e338c9363a348c1a63d40a71301240c8e8478835))
|
|
11
|
+
|
|
12
|
+
### [2.3.1](https://github.com/lenneTech/nuxt-base-starter/compare/v2.3.0...v2.3.1) (2026-03-15)
|
|
13
|
+
|
|
5
14
|
## [2.3.0](https://github.com/lenneTech/nuxt-base-starter/compare/v2.2.8...v2.3.0) (2026-03-09)
|
|
6
15
|
|
|
7
16
|
### [2.2.8](https://github.com/lenneTech/nuxt-base-starter/compare/v2.2.7...v2.2.8) (2026-03-08)
|
|
@@ -1,35 +1,42 @@
|
|
|
1
1
|
# NPM Package Maintainer Memory - nuxt-base-template
|
|
2
2
|
|
|
3
3
|
## Project Basics
|
|
4
|
+
|
|
4
5
|
- Package manager: pnpm (pnpm-lock.yaml present)
|
|
5
6
|
- Type: Private Nuxt 4 template (not a library)
|
|
6
7
|
- Test command: `pnpm run test:unit` (vitest, 43 tests in 2 files)
|
|
7
8
|
- Build command: `pnpm run build` (nuxt build)
|
|
8
9
|
|
|
9
10
|
## Key Dependency Patterns
|
|
11
|
+
|
|
10
12
|
- `better-auth`, `@better-auth/passkey`, `tus-js-client` are peer dependencies of `@lenne.tech/nuxt-extensions` - keep in `dependencies`
|
|
11
13
|
- `@nuxt/ui` and `@vueuse/nuxt` belong in `dependencies` (used in app/ source files with type imports)
|
|
12
14
|
- pnpm sometimes auto-moves packages to devDependencies during `-D` updates - watch and fix
|
|
13
15
|
|
|
14
16
|
## Security Overrides
|
|
17
|
+
|
|
15
18
|
- Overrides are in `pnpm.overrides` (inside the `pnpm` key), NOT a top-level `overrides` key
|
|
16
19
|
- `pnpm audit --fix` outputs proposed overrides as JSON (does not apply automatically)
|
|
17
20
|
- `pnpm install` must be run after adding/updating overrides to re-resolve lockfile
|
|
18
21
|
- `nanotar` vulnerability from nuxt has NO patched version (`<0.0.0`) - cannot be fixed
|
|
19
22
|
|
|
20
23
|
## Deprecated Package Notes
|
|
24
|
+
|
|
21
25
|
- `@hey-api/client-fetch`: deprecated ("bundled in @hey-api/openapi-ts since v0.73.0") but still a valid runtime HTTP client for generated API SDKs - KEEP in dependencies
|
|
22
26
|
- `openapi-ts.config.ts` uses deprecated `lint`/`format` options; use `postProcess: ['eslint', 'prettier']` instead
|
|
23
27
|
- `@nuxtjs/color-mode`: do NOT add to devDeps - @nuxt/ui brings its own 3.x internally; 4.0.0 would conflict
|
|
24
28
|
|
|
25
29
|
## Override Cleanup Notes (2026-03-09)
|
|
30
|
+
|
|
26
31
|
Removed as no longer needed:
|
|
32
|
+
|
|
27
33
|
- `devalue@<=5.6.2` - nuxt requires ^5.6.2, latest is 5.6.3 (always picked)
|
|
28
34
|
- `fast-xml-parser@>=5.0.0 <5.3.8` - @nuxtjs/sitemap requires ^5.3.3, latest is 5.4.2 (always safe)
|
|
29
35
|
- `markdown-it@>=13.0.0 <14.1.1` - prosemirror-markdown requires ^14.0.0, latest is 14.1.1 (always picked)
|
|
30
36
|
- `minimatch@>=5.0.0 <5.1.8` - readdir-glob installs minimatch 5.1.9 which is already >=5.1.8 (safe)
|
|
31
37
|
|
|
32
38
|
Still required (keep these overrides):
|
|
39
|
+
|
|
33
40
|
- `@hono/node-server@<1.19.10` - @prisma/dev requires 1.19.9 exactly
|
|
34
41
|
- `hono@<4.12.4` - @prisma/dev requires 4.11.4 exactly
|
|
35
42
|
- `lodash@>=4.0.0 <=4.17.22` - @chevrotain/gast requires 4.17.21 exactly (vulnerable)
|
|
@@ -40,7 +47,9 @@ Still required (keep these overrides):
|
|
|
40
47
|
- `tar@<=7.5.9` - @mapbox/node-pre-gyp requires ^7.4.0 (7.4.x is vulnerable)
|
|
41
48
|
|
|
42
49
|
## Version History (2026-03-09)
|
|
50
|
+
|
|
43
51
|
After maintenance, all packages at latest:
|
|
52
|
+
|
|
44
53
|
- `@lenne.tech/nuxt-extensions`: 1.3.0
|
|
45
54
|
- `nuxt`: 4.3.1
|
|
46
55
|
- `vitest`: 4.0.18 (major from 3.x)
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
# Stage 1: Install dependencies
|
|
2
|
+
FROM node:22-alpine@sha256:8094c002d08262dba12645a3b4a15cd6cd627d30bc782f53229a2ec13ee22a00 AS deps
|
|
3
|
+
WORKDIR /app
|
|
4
|
+
RUN corepack enable
|
|
5
|
+
|
|
6
|
+
# Copy workspace configuration
|
|
7
|
+
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
|
|
8
|
+
|
|
9
|
+
# Copy all project manifests (required for pnpm workspace resolution)
|
|
10
|
+
COPY projects/api/package.json ./projects/api/
|
|
11
|
+
COPY projects/app/package.json ./projects/app/
|
|
12
|
+
|
|
13
|
+
# Install dependencies (--ignore-scripts prevents husky/simple-git-hooks errors in Docker)
|
|
14
|
+
RUN pnpm install --frozen-lockfile --ignore-scripts
|
|
15
|
+
|
|
16
|
+
# Stage 2: Build
|
|
17
|
+
FROM node:22-alpine@sha256:8094c002d08262dba12645a3b4a15cd6cd627d30bc782f53229a2ec13ee22a00 AS builder
|
|
18
|
+
WORKDIR /app
|
|
19
|
+
RUN corepack enable
|
|
20
|
+
|
|
21
|
+
COPY --from=deps /app ./
|
|
22
|
+
COPY projects/app/ ./projects/app/
|
|
23
|
+
|
|
24
|
+
RUN pnpm --filter app run build
|
|
25
|
+
|
|
26
|
+
# Stage 3: Production runner
|
|
27
|
+
FROM node:22-alpine@sha256:8094c002d08262dba12645a3b4a15cd6cd627d30bc782f53229a2ec13ee22a00 AS runner
|
|
28
|
+
WORKDIR /app
|
|
29
|
+
ENV NODE_ENV=production
|
|
30
|
+
|
|
31
|
+
# Non-root user
|
|
32
|
+
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
|
|
33
|
+
|
|
34
|
+
# Nuxt output is self-contained (Nitro bundles all dependencies)
|
|
35
|
+
COPY --from=builder --chown=nodejs:nodejs /app/projects/app/.output ./.output
|
|
36
|
+
|
|
37
|
+
USER nodejs
|
|
38
|
+
EXPOSE 3000
|
|
39
|
+
CMD ["node", ".output/server/index.mjs"]
|
|
@@ -65,9 +65,10 @@ export default defineNuxtConfig({
|
|
|
65
65
|
// Icon Configuration
|
|
66
66
|
// ============================================================================
|
|
67
67
|
icon: {
|
|
68
|
-
//
|
|
68
|
+
// Icons used in v-for loops or dynamic rendering must be in the client bundle
|
|
69
|
+
// Dynamic icons can set via icons, e.g. icons: ['lucide:trash', 'lucide:key', 'lucide:copy', 'lucide:loader-circle'],
|
|
69
70
|
clientBundle: {
|
|
70
|
-
|
|
71
|
+
scan: true,
|
|
71
72
|
},
|
|
72
73
|
},
|
|
73
74
|
|
package/package.json
CHANGED