nuxt-og-image 6.4.2 → 6.4.4

package/dist/runtime/server/og-image/takumi/renderer.js

@@ -1,7 +1,8 @@
-import { getNitroOrigin } from "#site-config/server/composables";
 import { defu } from "defu";
 import { withBase } from "ufo";
 import { logger } from "../../../logger.js";
+import { fetchLocalAsset } from "../../util/fetchLocalAsset.js";
+import { getFetchTimeout } from "../../util/fetchTimeout.js";
 import { buildSubsetFamilyChain, extractCodepoints, getDefaultFontFamily, loadFontsForRenderer, resolveSubsetChain } from "../fonts.js";
 import { getExtractResourceUrls, getTakumi } from "./instances.js";
 import { createTakumiNodes } from "./nodes.js";
@@ -77,11 +78,11 @@ function rewriteFontFamilies(node, loadedFamilies, subsetChains) {
   }
 }
 async function createImage(event, format) {
-  const { options } = event;
+  const { options, timings } = event;
   const { fontFamilyOverride, defaultFont } = getDefaultFontFamily(options);
   const nodes = await createTakumiNodes(event);
   const codepoints = extractCodepoints(nodes);
-  const fonts = await loadFontsForRenderer(event, { supportedFormats: /* @__PURE__ */ new Set(["ttf", "woff2"]), component: options.component, fontFamilyOverride: fontFamilyOverride || defaultFont, codepoints });
+  const fonts = await timings.measure("font-load", () => loadFontsForRenderer(event, { supportedFormats: /* @__PURE__ */ new Set(["ttf", "woff2"]), component: options.component, fontFamilyOverride: fontFamilyOverride || defaultFont, codepoints }));
   await event._nitro.hooks.callHook("nuxt-og-image:takumi:nodes", nodes, event);
   const subsetChains = buildSubsetFamilyChain(fonts);
   const state = await getTakumiState(event);
@@ -99,25 +100,32 @@ async function createImage(event, format) {
   rewriteFontFamilies(nodes, state.loadedFamilies, subsetChains);
   const extractResourceUrls = await getExtractResourceUrls();
   const resourceUrls = await extractResourceUrls(nodes);
-  const origin = getNitroOrigin(event.e);
   const baseURL = event.runtimeConfig.app.baseURL;
   const fetchedResources = [];
-  await Promise.all(resourceUrls.map(async (src) => {
-    const urlsToTry = [src];
-    if (src.startsWith("/")) {
-      urlsToTry.push(withBase(src, origin));
-      if (baseURL && baseURL !== "/" && !src.startsWith(baseURL)) {
-        urlsToTry.push(withBase(withBase(src, baseURL), origin));
+  if (resourceUrls.length) {
+    const fetchTimeout = getFetchTimeout(event.runtimeConfig);
+    const headers = { "x-nuxt-og-image": "1" };
+    await timings.measure("resource-fetch", () => Promise.all(resourceUrls.map(async (src) => {
+      let data;
+      if (src.startsWith("/")) {
+        const path = withBase(src, baseURL);
+        data = await fetchLocalAsset(event.e, path, {
+          fetchTimeout,
+          headers,
+          includeExternalFallback: true
+        });
+      } else {
+        data = await $fetch(src, {
+          responseType: "arrayBuffer",
+          signal: AbortSignal.timeout(fetchTimeout),
+          timeout: fetchTimeout,
+          headers
+        }).catch(() => void 0);
       }
-    }
-    for (const url of urlsToTry) {
-      const data = await $fetch(url, { responseType: "arrayBuffer" }).catch(() => null);
-      if (data) {
+      if (data)
         fetchedResources.push({ src, data: new Uint8Array(data) });
-        break;
-      }
-    }
-  }));
+    })));
+  }
   const maxDpr = event.runtimeConfig.security?.maxDpr || 2;
   const maxDim = event.runtimeConfig.security?.maxDimension || 2048;
   const dpr = Math.min(Math.max(1, options.takumi?.devicePixelRatio ?? 1), maxDpr);
@@ -128,7 +136,7 @@ async function createImage(event, format) {
     fetchedResources,
     devicePixelRatio: dpr
   });
-  return await state.renderer.render(nodes, renderOptions);
+  return await timings.measure("render-takumi", () => state.renderer.render(nodes, renderOptions));
 }
 const TakumiRenderer = {
   name: "takumi",

package/dist/runtime/server/util/cloudflareAssets.d.ts

@@ -0,0 +1,24 @@
+import type { H3Event } from 'h3';
+interface AssetsBinding {
+    fetch: (request: string | Request, init?: RequestInit) => Promise<Response>;
+}
+/**
+ * Access the Cloudflare Workers ASSETS binding if available.
+ *
+ * Requires either:
+ * - `nitro.cloudflare.deployConfig: true` (generates wrangler.json with ASSETS)
+ * - A wrangler.toml/json with `[assets]` configured
+ */
+export declare function getCloudflareAssets(event: H3Event): AssetsBinding | undefined;
+/**
+ * Fetch a path directly from the CF Workers ASSETS binding.
+ *
+ * Prefer this over same-origin subrequests on Workers: it hits the static asset
+ * handler without billing a subrequest and without re-running the Worker's
+ * middleware chain.
+ *
+ * Returns `undefined` when no ASSETS binding is available or the asset doesn't
+ * exist (letting callers fall through to other resolution strategies).
+ */
+export declare function tryCloudflareAssetsFetch(event: H3Event, path: string, signal?: AbortSignal): Promise<ArrayBuffer | undefined>;
+export {};

package/dist/runtime/server/util/cloudflareAssets.js

@@ -0,0 +1,16 @@
+import { getRequestHost } from "h3";
+export function getCloudflareAssets(event) {
+  const assets = event.context.cloudflare?.env?.ASSETS || event.context.ASSETS;
+  return assets && typeof assets.fetch === "function" ? assets : void 0;
+}
+export async function tryCloudflareAssetsFetch(event, path, signal) {
+  const assets = getCloudflareAssets(event);
+  if (!assets)
+    return;
+  const origin = event.context.cloudflare?.request?.url || `https://${getRequestHost(event) || "localhost"}`;
+  const url = new URL(path, origin).href;
+  const res = await assets.fetch(url, signal ? { signal } : void 0).catch(() => null);
+  if (!res || !res.ok)
+    return;
+  return res.arrayBuffer();
+}

package/dist/runtime/server/util/eventHandlers.js

@@ -8,12 +8,25 @@ import { html } from "../og-image/templates/html.js";
 import { useOgImageRuntimeConfig } from "../utils.js";
 import { useOgImageBufferCache } from "./cache.js";
 export async function imageEventHandler(e) {
+  const reqStart = performance.now();
   const ctx = await resolveContext(e).catch((err) => {
     logger.error(`resolveContext error for ${e.path}:`, err?.message || err);
     throw err;
   });
   if (ctx instanceof H3Error)
     return ctx;
+  const timings = ctx.timings;
+  try {
+    return await renderOgImage(e, ctx);
+  } finally {
+    timings.record("total", performance.now() - reqStart);
+    const header = timings.header();
+    if (header)
+      setHeader(e, "Server-Timing", header);
+  }
+}
+async function renderOgImage(e, ctx) {
+  const timings = ctx.timings;
   const { isDevToolsContextRequest, extension, renderer } = ctx;
   const { debug, baseCacheKey, security } = useOgImageRuntimeConfig();
   if (!import.meta.prerender && !import.meta.dev && security?.restrictRuntimeImagesToOrigin) {
@@ -99,21 +112,29 @@ export async function imageEventHandler(e) {
   }
   const buildCachedImage = import.meta.prerender ? getBuildCachedImage(ctx.options, extension) : null;
   if (buildCachedImage) {
+    timings.record("cache-hit", 0);
     return buildCachedImage;
   }
+  const endCacheLookup = timings.start("cache-lookup");
   const cacheApi = await useOgImageBufferCache(ctx, {
     cacheMaxAgeSeconds: ctx.options.cacheMaxAgeSeconds,
     baseCacheKey,
     secret: security?.secret
-  });
-  if (typeof cacheApi === "undefined")
+  }).finally(endCacheLookup);
+  if (typeof cacheApi === "undefined") {
     return;
-  if (cacheApi instanceof H3Error)
+  }
+  if (cacheApi instanceof H3Error) {
     return cacheApi;
+  }
   let image = cacheApi.cachedItem;
+  if (image) {
+    timings.record("cache-hit", 0);
+  }
   if (!image) {
-    const timeout = security?.renderTimeout || 15e3;
+    const timeout = security?.renderTimeout ?? 15e3;
     let timer;
+    const endRender = timings.start("render-total");
     image = await Promise.race([
       renderer.createImage(ctx),
       new Promise((_, reject) => {
@@ -128,9 +149,11 @@ export async function imageEventHandler(e) {
       throw err;
     }).finally(() => {
       clearTimeout(timer);
+      endRender();
     });
-    if (image instanceof H3Error)
+    if (image instanceof H3Error) {
       return image;
+    }
     if (!image) {
       return createError({
         statusCode: 500,

package/dist/runtime/server/util/fetchLocalAsset.d.ts

@@ -0,0 +1,25 @@
+import type { H3Event } from 'h3';
+export interface FetchLocalAssetOptions {
+    fetchTimeout: number;
+    headers?: Record<string, string>;
+    /**
+     * Also attempt an external HTTP fetch to `getNitroOrigin(event) + path` when
+     * ASSETS and Nitro localFetch both miss. Enable for platforms where static
+     * files are served by edge routing that never reaches the Nitro handler
+     * (Vercel, Netlify). Disable for CF Workers where no ASSETS means no assets.
+     */
+    includeExternalFallback?: boolean;
+    onStepFailure?: (url: string, err: unknown) => void;
+}
+/**
+ * Resolve a same-origin asset path to bytes, trying (in order):
+ *   1. Cloudflare Workers ASSETS binding
+ *   2. Nitro localFetch (`event.$fetch`) — resolves dynamic routes too
+ *   3. External `$fetch` to the Nitro origin (opt-in)
+ *
+ * All steps share a single `AbortSignal.timeout(fetchTimeout)` so a broken
+ * URL can't burn N× the configured budget.
+ *
+ * Returns `undefined` when every step fails or times out.
+ */
+export declare function fetchLocalAsset(event: H3Event, path: string, options: FetchLocalAssetOptions): Promise<ArrayBuffer | undefined>;

package/dist/runtime/server/util/fetchLocalAsset.js

@@ -0,0 +1,34 @@
+import { getNitroOrigin } from "#site-config/server/composables";
+import { $fetch } from "ofetch";
+import { tryCloudflareAssetsFetch } from "./cloudflareAssets.js";
+export async function fetchLocalAsset(event, path, options) {
+  const { fetchTimeout, headers, includeExternalFallback = false, onStepFailure } = options;
+  const deadline = AbortSignal.timeout(fetchTimeout);
+  let result = await tryCloudflareAssetsFetch(event, path, deadline).catch((err) => {
+    onStepFailure?.(path, err);
+    return void 0;
+  });
+  if (result || deadline.aborted)
+    return result;
+  result = await event.$fetch(path, {
+    responseType: "arrayBuffer",
+    signal: deadline,
+    timeout: fetchTimeout,
+    headers
+  }).catch((err) => {
+    onStepFailure?.(path, err);
+    return void 0;
+  });
+  if (result || deadline.aborted || !includeExternalFallback)
+    return result;
+  const absolute = `${getNitroOrigin(event)}${path}`;
+  return await $fetch(absolute, {
+    responseType: "arrayBuffer",
+    signal: deadline,
+    timeout: fetchTimeout,
+    headers
+  }).catch((err) => {
+    onStepFailure?.(absolute, err);
+    return void 0;
+  });
+}

package/dist/runtime/server/util/fetchTimeout.d.ts

@@ -0,0 +1,2 @@
+import type { OgImageRuntimeConfig } from '../../types.js';
+export declare function getFetchTimeout(runtimeConfig: OgImageRuntimeConfig): number;

package/dist/runtime/server/util/fetchTimeout.js

@@ -0,0 +1,7 @@
+const MIN_TIMEOUT_MS = 100;
+export function getFetchTimeout(runtimeConfig) {
+  const value = runtimeConfig.security?.imageFetchTimeout ?? 3e3;
+  if (!Number.isFinite(value) || value < MIN_TIMEOUT_MS)
+    return MIN_TIMEOUT_MS;
+  return value;
+}

package/dist/runtime/server/util/timings.d.ts

@@ -0,0 +1,17 @@
+export interface TimingEntry {
+    name: string;
+    dur: number;
+    count?: number;
+}
+export interface Timings {
+    start: (name: string) => () => number;
+    record: (name: string, ms: number) => void;
+    measure: <T>(name: string, fn: () => Promise<T> | T) => Promise<T>;
+    entries: () => TimingEntry[];
+    header: () => string;
+}
+export declare function createTimings(): Timings;
+export declare const TIMING_CTX_KEY = "_ogImageTimings";
+export declare function getTimingsFromEvent(e: {
+    context: Record<string, any>;
+}): Timings | undefined;

package/dist/runtime/server/util/timings.js

@@ -0,0 +1,75 @@
+const RE_TOKEN = /[^\w-]/g;
+function sanitizeName(name) {
+  return name.replace(RE_TOKEN, "_");
+}
+export function createTimings() {
+  const totals = /* @__PURE__ */ new Map();
+  const spans = /* @__PURE__ */ new Map();
+  const record = (name, ms) => {
+    const key = sanitizeName(name);
+    const existing = totals.get(key);
+    if (existing) {
+      existing.dur += ms;
+      existing.count += 1;
+    } else {
+      totals.set(key, { dur: ms, count: 1 });
+    }
+  };
+  const start = (name) => {
+    const key = sanitizeName(name);
+    const t0 = performance.now();
+    const span = spans.get(key) ?? { open: 0, windowStart: 0, wall: 0 };
+    if (span.open === 0)
+      span.windowStart = t0;
+    span.open += 1;
+    spans.set(key, span);
+    let ended = false;
+    return () => {
+      if (ended)
+        return 0;
+      ended = true;
+      const t1 = performance.now();
+      const ms = t1 - t0;
+      span.open -= 1;
+      if (span.open === 0) {
+        span.wall += t1 - span.windowStart;
+        const existing = totals.get(key);
+        if (existing) {
+          existing.dur = span.wall;
+          existing.count += 1;
+        } else {
+          totals.set(key, { dur: span.wall, count: 1 });
+        }
+      } else {
+        const existing = totals.get(key);
+        if (existing)
+          existing.count += 1;
+        else
+          totals.set(key, { dur: 0, count: 1 });
+      }
+      return ms;
+    };
+  };
+  const measure = async (name, fn) => {
+    const end = start(name);
+    try {
+      return await fn();
+    } finally {
+      end();
+    }
+  };
+  const entries = () => Array.from(totals.entries()).map(([name, v]) => ({
+    name,
+    dur: Math.round(v.dur * 1e3) / 1e3,
+    count: v.count > 1 ? v.count : void 0
+  }));
+  const header = () => entries().map(({ name, dur, count }) => {
+    const desc = count ? `;desc="n=${count}"` : "";
+    return `${name}${desc};dur=${dur}`;
+  }).join(", ");
+  return { start, record, measure, entries, header };
+}
+export const TIMING_CTX_KEY = "_ogImageTimings";
+export function getTimingsFromEvent(e) {
+  return e.context[TIMING_CTX_KEY];
+}

package/dist/runtime/types.d.ts

@@ -6,6 +6,7 @@ import type { NitroRuntimeHooks } from 'nitropack/types';
 import type { SatoriOptions } from 'satori';
 import type { JpegOptions, SharpOptions } from 'sharp';
 import type { MaybeRefOrGetter, Ref } from 'vue';
+import type { Timings } from './server/util/timings.js';
 interface NitroApp {
     hooks: Hookable<NitroRuntimeHooks>;
     [key: string]: any;
@@ -20,6 +21,7 @@ export interface OgImageRenderEventContext {
     isDevToolsContextRequest: boolean;
     publicStoragePath: string;
     runtimeConfig: OgImageRuntimeConfig;
+    timings: Timings;
     _nitro: NitroApp;
 }
 export type IconifyEmojiIconSets = 'twemoji' | 'noto' | 'fluent-emoji' | 'fluent-emoji-flat' | 'fluent-emoji-high-contrast' | 'noto-v1' | 'emojione' | 'emojione-monotone' | 'emojione-v1' | 'streamline-emojis' | 'openmoji';
@@ -57,6 +59,7 @@ export interface OgImageRuntimeConfig {
         maxDimension: number;
         maxDpr: number;
         renderTimeout: number;
+        imageFetchTimeout: number;
         maxQueryParamSize: number | null;
         restrictRuntimeImagesToOrigin: false | string[];
         secret: string;

package/dist/shared/{nuxt-og-image.BK0-aZom.mjs → nuxt-og-image.Cr3WHMk1.mjs}

@@ -805,6 +805,15 @@ ${content}`, "utf-8");
       return insertDefineOgImage(componentName, pageFile);
     }
   }, nuxt).then((rpc) => {
+    const safeBroadcast = (fn) => {
+      try {
+        const result = fn();
+        if (result && typeof result.then === "function")
+          result.catch(() => {
+          });
+      } catch {
+      }
+    };
     let cssRefreshTimer;
     nuxt.hook("builder:watch", (e, watchPath) => {
       if (!e || !watchPath)
@@ -818,23 +827,18 @@ ${content}`, "utf-8");
       if (isCssChange || normalizedPath.includes("uno.config")) {
         clearTimeout(cssRefreshTimer);
         cssRefreshTimer = setTimeout(() => {
-          rpc.broadcast.refresh().catch(() => {
-          });
+          safeBroadcast(() => rpc.broadcast.refresh());
         }, 200);
         return;
       }
       if ((e === "change" || e.includes("link")) && (normalizedPath.startsWith("pages") || normalizedPath.startsWith("content"))) {
-        rpc.broadcast.refreshRouteData(normalizedPath).catch(() => {
-        });
+        safeBroadcast(() => rpc.broadcast.refreshRouteData(normalizedPath));
       }
       if (options.componentDirs.some((dir) => normalizedPath.includes(dir))) {
-        if (e === "change") {
-          rpc.broadcast.refresh().catch(() => {
-          });
-        } else {
-          rpc.broadcast.refreshGlobalData().catch(() => {
-          });
-        }
+        if (e === "change")
+          safeBroadcast(() => rpc.broadcast.refresh());
+        else
+          safeBroadcast(() => rpc.broadcast.refreshGlobalData());
       }
     });
   });
@@ -5222,6 +5226,7 @@ export const rootDir = ${JSON.stringify(nuxt.options.rootDir)}`;
           maxDimension: config.security?.maxDimension ?? 2048,
           maxDpr: config.security?.maxDpr ?? 2,
           renderTimeout: config.security?.renderTimeout ?? 15e3,
+          imageFetchTimeout: config.security?.imageFetchTimeout ?? 3e3,
           maxQueryParamSize: config.security?.maxQueryParamSize ?? (config.security?.strict ? 2048 : null),
           restrictRuntimeImagesToOrigin: config.security?.restrictRuntimeImagesToOrigin === true || config.security?.strict && config.security?.restrictRuntimeImagesToOrigin == null ? [] : config.security?.restrictRuntimeImagesToOrigin || false,
           secret: config.security?.secret || process.env.NUXT_OG_IMAGE_SECRET || ""

package/dist/shared/{nuxt-og-image.C2oXAHiT.cjs → nuxt-og-image.TJuh6pW5.cjs}

@@ -825,6 +825,15 @@ ${content}`, "utf-8");
       return insertDefineOgImage(componentName, pageFile);
     }
   }, nuxt).then((rpc) => {
+    const safeBroadcast = (fn) => {
+      try {
+        const result = fn();
+        if (result && typeof result.then === "function")
+          result.catch(() => {
+          });
+      } catch {
+      }
+    };
     let cssRefreshTimer;
     nuxt.hook("builder:watch", (e, watchPath) => {
       if (!e || !watchPath)
@@ -838,23 +847,18 @@ ${content}`, "utf-8");
       if (isCssChange || normalizedPath.includes("uno.config")) {
         clearTimeout(cssRefreshTimer);
         cssRefreshTimer = setTimeout(() => {
-          rpc.broadcast.refresh().catch(() => {
-          });
+          safeBroadcast(() => rpc.broadcast.refresh());
         }, 200);
         return;
       }
       if ((e === "change" || e.includes("link")) && (normalizedPath.startsWith("pages") || normalizedPath.startsWith("content"))) {
-        rpc.broadcast.refreshRouteData(normalizedPath).catch(() => {
-        });
+        safeBroadcast(() => rpc.broadcast.refreshRouteData(normalizedPath));
       }
       if (options.componentDirs.some((dir) => normalizedPath.includes(dir))) {
-        if (e === "change") {
-          rpc.broadcast.refresh().catch(() => {
-          });
-        } else {
-          rpc.broadcast.refreshGlobalData().catch(() => {
-          });
-        }
+        if (e === "change")
+          safeBroadcast(() => rpc.broadcast.refresh());
+        else
+          safeBroadcast(() => rpc.broadcast.refreshGlobalData());
       }
     });
   });
@@ -4316,7 +4320,7 @@ const module$1 = kit.defineNuxtModule({
     await onUpgrade(nuxt, options, previousVersion);
   },
   async setup(config, nuxt) {
-    const _resolver = kit.createResolver((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('shared/nuxt-og-image.C2oXAHiT.cjs', document.baseURI).href)));
+    const _resolver = kit.createResolver((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('shared/nuxt-og-image.TJuh6pW5.cjs', document.baseURI).href)));
     const fixSharedPath = (p) => {
       if (p.includes("/shared/runtime/"))
         return p.replace("/shared/runtime/", "/runtime/");
@@ -5242,6 +5246,7 @@ export const rootDir = ${JSON.stringify(nuxt.options.rootDir)}`;
           maxDimension: config.security?.maxDimension ?? 2048,
           maxDpr: config.security?.maxDpr ?? 2,
           renderTimeout: config.security?.renderTimeout ?? 15e3,
+          imageFetchTimeout: config.security?.imageFetchTimeout ?? 3e3,
           maxQueryParamSize: config.security?.maxQueryParamSize ?? (config.security?.strict ? 2048 : null),
           restrictRuntimeImagesToOrigin: config.security?.restrictRuntimeImagesToOrigin === true || config.security?.strict && config.security?.restrictRuntimeImagesToOrigin == null ? [] : config.security?.restrictRuntimeImagesToOrigin || false,
           secret: config.security?.secret || process.env.NUXT_OG_IMAGE_SECRET || ""

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-og-image",
   "type": "module",
-  "version": "6.4.2",
+  "version": "6.4.4",
   "description": "Enlightened OG Image generation for Nuxt.",
   "author": {
     "website": "https://harlanzw.com",
@@ -112,12 +112,12 @@
     "nypm": "^0.6.5",
     "ofetch": "^1.5.1",
     "ohash": "^2.0.11",
-    "oxc-parser": "^0.125.0",
+    "oxc-parser": "^0.126.0",
     "oxc-walker": "^0.7.0",
     "pathe": "^2.0.3",
     "pkg-types": "^2.3.0",
     "radix3": "^1.1.2",
-    "std-env": "^4.0.0",
+    "std-env": "^4.1.0",
     "strip-literal": "^3.1.0",
     "tinyexec": "^1.1.1",
     "tinyglobby": "^0.2.16",
@@ -152,14 +152,14 @@
     "@shikijs/langs": "^4.0.2",
     "@shikijs/themes": "^4.0.2",
     "@tailwindcss/vite": "^4.2.2",
-    "@takumi-rs/core": "^1.0.9",
-    "@takumi-rs/wasm": "^1.0.9",
+    "@takumi-rs/core": "^1.0.14",
+    "@takumi-rs/wasm": "^1.0.14",
     "@unocss/nuxt": "^66.6.8",
     "@vitejs/plugin-vue": "^6.0.6",
     "@vueuse/nuxt": "^14.2.1",
     "birpc": "^4.0.0",
     "bumpp": "^11.0.1",
-    "eslint": "^10.2.0",
+    "eslint": "^10.2.1",
     "eslint-plugin-harlanzw": "^0.12.1",
     "fontless": "^0.2.1",
     "get-image-colors": "^4.0.1",
@@ -176,12 +176,12 @@
     "sharp": "^0.34.5",
     "sirv": "^3.0.2",
     "tailwindcss": "^4.2.2",
-    "typescript": "^6.0.2",
+    "typescript": "^6.0.3",
     "unifont": "^0.7.4",
     "unocss": "^66.6.8",
     "vitest": "^4.1.4",
-    "vue-tsc": "^3.2.6",
-    "wrangler": "^4.82.2",
+    "vue-tsc": "^3.2.7",
+    "wrangler": "^4.83.0",
     "yoga-wasm-web": "^0.3.3"
   },
   "scripts": {