nuxt-og-image 6.7.4 → 6.7.5

package/dist/chunks/tw4.cjs

@@ -4,7 +4,7 @@ const promises = require('node:fs/promises');
 const node_url = require('node:url');
 const exsolve = require('exsolve');
 const pathe = require('pathe');
-const module$1 = require('../shared/nuxt-og-image.BRBtdkUp.cjs');
+const module$1 = require('../shared/nuxt-og-image.Cctpuv4O.cjs');
 require('node:crypto');
 require('node:fs');
 require('@nuxt/kit');

package/dist/chunks/tw4.mjs

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { pathToFileURL } from 'node:url';
 import { resolveModulePath } from 'exsolve';
 import { dirname, join } from 'pathe';
-import { e as extractVariantBaseClasses, r as resolveVariantPrefixes, h as resolveExtractedVars, i as resolveVarsDeep, s as simplifyCss, p as postProcessStyles, l as loadLightningCss, a as extractCssVars, c as extractUniversalVars, d as extractPerClassVars, g as extractVarsFromCss, f as extractClassStyles } from '../shared/nuxt-og-image.Bv8VSGTj.mjs';
+import { e as extractVariantBaseClasses, r as resolveVariantPrefixes, h as resolveExtractedVars, i as resolveVarsDeep, s as simplifyCss, p as postProcessStyles, l as loadLightningCss, a as extractCssVars, c as extractUniversalVars, d as extractPerClassVars, g as extractVarsFromCss, f as extractClassStyles } from '../shared/nuxt-og-image.D3mV8OQ9.mjs';
 import 'node:crypto';
 import 'node:fs';
 import '@nuxt/kit';

package/dist/chunks/uno.cjs

@@ -3,7 +3,7 @@
 const promises = require('node:fs/promises');
 const defu = require('defu');
 const logger_js = require('../../dist/runtime/logger.js');
-const module$1 = require('../shared/nuxt-og-image.BRBtdkUp.cjs');
+const module$1 = require('../shared/nuxt-og-image.Cctpuv4O.cjs');
 require('node:crypto');
 require('node:fs');
 require('node:url');

package/dist/chunks/uno.mjs

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { defu } from 'defu';
 import { logger } from '../../dist/runtime/logger.js';
-import { e as extractVariantBaseClasses, s as simplifyCss, a as extractCssVars, b as extractPropertyInitialValues, c as extractUniversalVars, d as extractPerClassVars, f as extractClassStyles, p as postProcessStyles, r as resolveVariantPrefixes, g as extractVarsFromCss, h as resolveExtractedVars } from '../shared/nuxt-og-image.Bv8VSGTj.mjs';
+import { e as extractVariantBaseClasses, s as simplifyCss, a as extractCssVars, b as extractPropertyInitialValues, c as extractUniversalVars, d as extractPerClassVars, f as extractClassStyles, p as postProcessStyles, r as resolveVariantPrefixes, g as extractVarsFromCss, h as resolveExtractedVars } from '../shared/nuxt-og-image.D3mV8OQ9.mjs';
 import 'node:crypto';
 import 'node:fs';
 import 'node:url';

package/dist/cli.cjs

@@ -364,7 +364,10 @@ async function checkNuxtConfig(rootDir) {
     const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
     hasNuxtFontsInPkg = !!(pkg.dependencies?.["@nuxt/fonts"] || pkg.devDependencies?.["@nuxt/fonts"]);
   }
-  const config = await kit.loadNuxtConfig({ cwd: rootDir }).catch(() => null);
+  const config = await kit.loadNuxtConfig({ cwd: rootDir }).catch((error) => {
+    p__namespace.log.warn(`Could not inspect Nuxt config: ${error.message}`);
+    return null;
+  });
   if (!config)
     return { hasDeprecatedFonts: false, hasNuxtFonts: hasNuxtFontsInPkg, hasDefaultsComponent: false, defaultComponentName: null, nitroPreset: null, deprecatedConfigKeys: [] };
   const ogImageConfig = config.ogImage;
@@ -545,7 +548,10 @@ function migrateV6Components(componentsToRename, defaultRenderer, dryRun) {
   }
 }
 async function detectDeploymentTarget(rootDir) {
-  const config = await kit.loadNuxtConfig({ cwd: rootDir }).catch(() => null);
+  const config = await kit.loadNuxtConfig({ cwd: rootDir }).catch((error) => {
+    p__namespace.log.warn(`Could not detect deployment target: ${error.message}`);
+    return null;
+  });
   return config?.nitro?.preset || null;
 }
 async function installRendererDeps(renderers, isEdge) {

package/dist/cli.mjs

@@ -347,7 +347,10 @@ async function checkNuxtConfig(rootDir) {
     const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
     hasNuxtFontsInPkg = !!(pkg.dependencies?.["@nuxt/fonts"] || pkg.devDependencies?.["@nuxt/fonts"]);
   }
-  const config = await loadNuxtConfig({ cwd: rootDir }).catch(() => null);
+  const config = await loadNuxtConfig({ cwd: rootDir }).catch((error) => {
+    p.log.warn(`Could not inspect Nuxt config: ${error.message}`);
+    return null;
+  });
   if (!config)
     return { hasDeprecatedFonts: false, hasNuxtFonts: hasNuxtFontsInPkg, hasDefaultsComponent: false, defaultComponentName: null, nitroPreset: null, deprecatedConfigKeys: [] };
   const ogImageConfig = config.ogImage;
@@ -528,7 +531,10 @@ function migrateV6Components(componentsToRename, defaultRenderer, dryRun) {
   }
 }
 async function detectDeploymentTarget(rootDir) {
-  const config = await loadNuxtConfig({ cwd: rootDir }).catch(() => null);
+  const config = await loadNuxtConfig({ cwd: rootDir }).catch((error) => {
+    p.log.warn(`Could not detect deployment target: ${error.message}`);
+    return null;
+  });
   return config?.nitro?.preset || null;
 }
 async function installRendererDeps(renderers, isEdge) {

package/dist/devtools/lib/og-image/rpc.ts

@@ -17,7 +17,10 @@ export const isFallbackMode = computed(() => connectionState.value === 'fallback
 // Fallback fetch for localhost:3000
 async function tryFallbackConnection() {
   const fallbackUrl = 'http://localhost:3000'
-  const res = await fetch(`${fallbackUrl}/_og/debug.json`).catch(() => null)
+  const res = await fetch(`${fallbackUrl}/_og/debug.json`).catch(() => {
+    // An unreachable fallback host means the devtools connection has failed.
+    return null
+  })
   if (res?.ok) {
     appFetch.value = ((url: string, opts?: any) => fetch(`${fallbackUrl}${url}`, opts).then(r => r.json())) as any
     base.value = '/'

package/dist/module.cjs

@@ -11,7 +11,7 @@ require('nuxt-site-config/kit');
 require('pathe');
 require('pkg-types');
 require('std-env');
-const module$1 = require('./shared/nuxt-og-image.BRBtdkUp.cjs');
+const module$1 = require('./shared/nuxt-og-image.Cctpuv4O.cjs');
 require('nuxtseo-shared/kit');
 require('../dist/runtime/logger.js');
 require('oxc-walker');

package/dist/module.json

@@ -4,9 +4,9 @@
     "nuxt": ">=3.16.0"
   },
   "configKey": "ogImage",
-  "version": "6.7.4",
+  "version": "6.7.5",
   "builder": {
-    "@nuxt/module-builder": "1.0.2",
+    "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"
   }
 }

package/dist/module.mjs

@@ -9,7 +9,7 @@ import 'nuxt-site-config/kit';
 import 'pathe';
 import 'pkg-types';
 import 'std-env';
-export { m as default } from './shared/nuxt-og-image.Bv8VSGTj.mjs';
+export { m as default } from './shared/nuxt-og-image.D3mV8OQ9.mjs';
 import 'nuxtseo-shared/kit';
 import '../dist/runtime/logger.js';
 import 'oxc-walker';

package/dist/runtime/app/plugins/og-image-canonical-urls.server.d.ts

@@ -1 +1,2 @@
-export { ogImageCanonicalUrls as default } from '../utils/plugins.js';
+declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
+export default _default;

package/dist/runtime/app/plugins/og-image-canonical-urls.server.js

@@ -1 +1,3 @@
-export { ogImageCanonicalUrls as default } from "../utils/plugins.js";
+import { defineNuxtPlugin } from "#app";
+import { ogImageCanonicalUrls } from "../utils/plugins.js";
+export default defineNuxtPlugin((nuxtApp) => ogImageCanonicalUrls(nuxtApp));

package/dist/runtime/app/plugins/route-rule-og-image.server.d.ts

@@ -1 +1,2 @@
-export { routeRuleOgImage as default } from '../utils/plugins.js';
+declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
+export default _default;

package/dist/runtime/app/plugins/route-rule-og-image.server.js

@@ -1 +1,3 @@
-export { routeRuleOgImage as default } from "../utils/plugins.js";
+import { defineNuxtPlugin } from "#app";
+import { routeRuleOgImage } from "../utils/plugins.js";
+export default defineNuxtPlugin((nuxtApp) => routeRuleOgImage(nuxtApp));

package/dist/runtime/logger.js

@@ -1,8 +1,4 @@
-import { createConsola } from "consola";
 import { colorize } from "consola/utils";
-export const logger = createConsola({
-  defaults: {
-    tag: "@nuxtjs/og-image"
-  }
-});
+import { createModuleLogger } from "nuxtseo-shared/utils";
+export const logger = createModuleLogger("@nuxtjs/og-image");
 export const gray = (s) => colorize("gray", s);

package/dist/runtime/pure.d.ts

@@ -3,4 +3,3 @@ export declare function extractSocialPreviewTags(html: string): [Record<string,
 export declare function detectBase64MimeType(data: string): string;
 export declare function toBase64Image(data: string | ArrayBuffer): string;
 export declare function withoutQuery(path: string): string | undefined;
-export declare function getExtension(path: string): string;

package/dist/runtime/pure.js

@@ -65,8 +65,3 @@ export function toBase64Image(data) {
 export function withoutQuery(path) {
   return path.split("?")[0];
 }
-export function getExtension(path) {
-  path = withoutQuery(path);
-  const lastSegment = path.split("/").pop() || path;
-  return lastSegment.split(".").pop() || lastSegment;
-}

package/dist/runtime/server/og-image/bindings/browser/cloudflare.d.ts

@@ -6,5 +6,4 @@ interface Browser {
     on: (event: string, handler: () => void) => void;
 }
 export declare function createBrowser(event?: H3Event): Promise<Browser>;
-export declare function disposeBrowser(): Promise<void>;
 export {};

package/dist/runtime/server/og-image/bindings/browser/cloudflare.js

@@ -1,3 +1,4 @@
+import { getCloudflareEnv } from "../../../util/cloudflare.js";
 import { withTimeout } from "../../../util/withTimeout.js";
 import { useOgImageRuntimeConfig } from "../../../utils.js";
 let puppeteer;
@@ -20,7 +21,7 @@ export async function createBrowser(event) {
       "[Nuxt OG Image] Browser binding name not configured. Set `ogImage.browser.binding` in nuxt.config."
     );
   }
-  const binding = event?.context?.cloudflare?.env?.[bindingName];
+  const binding = getCloudflareEnv(event)?.[bindingName];
   if (!binding) {
     throw new Error(
       `[Nuxt OG Image] Cloudflare browser binding "${bindingName}" not found. Ensure it's configured in wrangler.toml and the request has cloudflare context.`
@@ -45,11 +46,3 @@ export async function createBrowser(event) {
   browserPromise = null;
   return browser;
 }
-export async function disposeBrowser() {
-  if (browser) {
-    await browser.close().catch((err) => {
-      void err;
-    });
-    browser = null;
-  }
-}

package/dist/runtime/server/og-image/bindings/font-assets/dev-prerender.js

@@ -10,11 +10,23 @@ import { fetchWithRedirectValidation } from "../../../util/ssrf.js";
 import { useOgImageRuntimeConfig } from "../../../utils.js";
 import { fetchSpecialFontUrl, isDataFontUrl, isExternalFontUrl } from "./external-url.js";
 let fontUrlMapping;
+async function readOptionalFile(path) {
+  return readFile(path).catch((error) => {
+    if (error.code === "ENOENT")
+      return null;
+    throw error;
+  });
+}
+async function fetchOptionalFont(url, timeout) {
+  return fetch(url, { signal: AbortSignal.timeout(timeout) }).catch(() => {
+    return null;
+  });
+}
 async function loadFontUrlMapping() {
   if (fontUrlMapping)
     return fontUrlMapping;
-  const content = await readFile(join(buildDir, "cache", "og-image", "font-urls.json"), "utf-8").catch(() => null);
-  fontUrlMapping = content ? JSON.parse(content) : {};
+  const content = await readOptionalFile(join(buildDir, "cache", "og-image", "font-urls.json"));
+  fontUrlMapping = content ? JSON.parse(content.toString("utf-8")) : {};
   return fontUrlMapping;
 }
 export async function resolve(event, font) {
@@ -22,7 +34,7 @@ export async function resolve(event, font) {
   const runtimeConfig = useOgImageRuntimeConfig();
   const timeout = getFetchTimeout(runtimeConfig);
   if (font.absolutePath) {
-    const data = await readFile(font.absolutePath).catch(() => null);
+    const data = await readOptionalFile(font.absolutePath);
     if (data?.length)
       return data;
   }
@@ -31,31 +43,31 @@ export async function resolve(event, font) {
   if (import.meta.prerender) {
     if (path.startsWith("/_og-static-fonts/")) {
       const filename2 = path.slice("/_og-static-fonts/".length);
-      const cached = await readFile(join(buildDir, "cache", "og-image", "fonts-ttf", filename2)).catch(() => null) || await readFile(join(rootDir, ".output", "public", "_og-static-fonts", filename2)).catch(() => null);
+      const cached = await readOptionalFile(join(buildDir, "cache", "og-image", "fonts-ttf", filename2)) || await readOptionalFile(join(rootDir, ".output", "public", "_og-static-fonts", filename2));
       if (cached?.length)
         return cached;
     }
     if (path.startsWith("/_fonts/")) {
       const filename2 = path.slice("/_fonts/".length);
-      const cached = await readFile(join(rootDir, ".output", "public", "_fonts", filename2)).catch(() => null);
+      const cached = await readOptionalFile(join(rootDir, ".output", "public", "_fonts", filename2));
       if (cached?.length)
         return cached;
       const mapping = await loadFontUrlMapping();
       if (mapping[filename2]) {
-        const res = await fetch(mapping[filename2], { signal: AbortSignal.timeout(timeout) }).catch(() => null);
+        const res = await fetchOptionalFont(mapping[filename2], timeout);
         if (res?.ok)
           return Buffer.from(await res.arrayBuffer());
       }
       throw new Error(`Font ${filename2} not found in mapping or cache`);
     }
     const filename = path.slice(1);
-    const data = await readFile(join(rootDir, "public", filename)).catch(() => null) || await readFile(join(rootDir, ".output", "public", filename)).catch(() => null);
+    const data = await readOptionalFile(join(rootDir, "public", filename)) || await readOptionalFile(join(rootDir, ".output", "public", filename));
     if (data?.length)
       return data;
   }
   if (path.startsWith("/_og-static-fonts/")) {
     const filename = path.slice("/_og-static-fonts/".length);
-    const cached = await readFile(join(buildDir, "cache", "og-image", "fonts-ttf", filename)).catch(() => null);
+    const cached = await readOptionalFile(join(buildDir, "cache", "og-image", "fonts-ttf", filename));
     if (cached?.length)
       return cached;
   }
@@ -63,14 +75,14 @@ export async function resolve(event, font) {
     const filename = path.slice("/_fonts/".length);
     const mapping = await loadFontUrlMapping();
     if (mapping[filename]) {
-      const res = await fetch(mapping[filename], { signal: AbortSignal.timeout(timeout) }).catch(() => null);
+      const res = await fetchOptionalFont(mapping[filename], timeout);
       if (res?.ok)
         return Buffer.from(await res.arrayBuffer());
     }
   }
   if (import.meta.dev) {
     const filename = path.slice(1);
-    const data = await readFile(join(rootDir, "public", filename)).catch(() => null);
+    const data = await readOptionalFile(join(rootDir, "public", filename));
     if (data?.length)
       return data;
   }
@@ -79,7 +91,9 @@ export async function resolve(event, font) {
     const reqUrl = getRequestURL(event);
     const origin = `${reqUrl.protocol}//${reqUrl.host}`;
     const target = new URL(withBase(path, app.baseURL), origin);
-    const ab = await fetchWithRedirectValidation(target.href, { timeout, trustedHost: target.host }).catch(() => null);
+    const ab = await fetchWithRedirectValidation(target.href, { timeout, trustedHost: target.host }).catch(() => {
+      return null;
+    });
     if (ab) {
       return Buffer.from(ab);
     }

package/dist/runtime/server/og-image/bindings/font-assets/external-url.js

@@ -32,7 +32,9 @@ export function resolveSameOriginFontUrl(path, siteUrl) {
 }
 export async function fetchSpecialFontUrl(path, siteUrl, timeout) {
   if (isDataFontUrl(path)) {
-    const res = await fetch(path.trimStart(), { signal: AbortSignal.timeout(timeout) }).catch(() => null);
+    const res = await fetch(path.trimStart(), { signal: AbortSignal.timeout(timeout) }).catch(() => {
+      return null;
+    });
     if (res?.ok)
       return Buffer.from(await res.arrayBuffer());
     throw new Error("[Nuxt OG Image] Invalid data: font URL.");

package/dist/runtime/server/og-image/bindings/font-assets/node.js

@@ -15,7 +15,9 @@ export async function resolve(event, font) {
   if (path && (isDataFontUrl(path) || isExternalFontUrl(path)))
     return fetchSpecialFontUrl(path, getSiteConfig(event).url, timeout);
   const target = new URL(fullPath, origin);
-  const ab = await fetchWithRedirectValidation(target.href, { timeout, trustedHost: target.host }).catch(() => null);
+  const ab = await fetchWithRedirectValidation(target.href, { timeout, trustedHost: target.host }).catch(() => {
+    return null;
+  });
   if (ab) {
     return Buffer.from(ab);
   }

package/dist/runtime/server/og-image/fonts.js

@@ -198,7 +198,9 @@ export async function loadDefinedFonts(event, fontDefs) {
     const weight = normalizeFontWeight(def.weight);
     const style = def.style === "italic" ? "italic" : "normal";
     const fontConfig = { family: name, weight, style, src: path, localPath: path };
-    const data = await resolve(event.e, fontConfig).catch(() => null);
+    const data = await resolve(event.e, fontConfig).catch(() => {
+      return null;
+    });
     if (data) {
       results.push({
         ...fontConfig,

package/dist/runtime/server/util/cloudflare.d.ts

@@ -0,0 +1,3 @@
+import type { H3Event } from 'h3';
+export type CloudflareEnv = Record<string, unknown>;
+export declare function getCloudflareEnv(event?: H3Event): CloudflareEnv | undefined;

package/dist/runtime/server/util/cloudflare.js

@@ -0,0 +1,17 @@
+function toRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+export function getCloudflareEnv(event) {
+  const runtime = event && "runtime" in event ? toRecord(event.runtime) : void 0;
+  const runtimeCloudflare = toRecord(runtime?.cloudflare);
+  const runtimeEnv = toRecord(runtimeCloudflare?.env);
+  if (runtimeEnv)
+    return runtimeEnv;
+  const contextCloudflare = toRecord(event?.context.cloudflare);
+  const contextEnv = toRecord(contextCloudflare?.env);
+  if (contextEnv)
+    return contextEnv;
+  const platform = toRecord(event?.context._platform);
+  const platformCloudflare = toRecord(platform?.cloudflare);
+  return toRecord(platformCloudflare?.env);
+}

package/dist/runtime/server/util/cloudflareAssets.js

@@ -1,15 +1,18 @@
-import { getRequestHost } from "h3";
+import { getRequestURL } from "h3";
+import { getCloudflareEnv } from "./cloudflare.js";
 export function getCloudflareAssets(event) {
-  const assets = event.context.cloudflare?.env?.ASSETS || event.context.ASSETS;
-  return assets && typeof assets.fetch === "function" ? assets : void 0;
+  const assets = getCloudflareEnv(event)?.ASSETS || event.context.ASSETS;
+  return typeof assets === "object" && assets !== null && "fetch" in assets && typeof assets.fetch === "function" ? assets : void 0;
 }
 export async function tryCloudflareAssetsFetch(event, path, signal) {
   const assets = getCloudflareAssets(event);
   if (!assets)
     return;
-  const origin = event.context.cloudflare?.request?.url || `https://${getRequestHost(event) || "localhost"}`;
+  const origin = getRequestURL(event).origin;
   const url = new URL(path, origin).href;
-  const res = await assets.fetch(url, signal ? { signal } : void 0).catch(() => null);
+  const res = await assets.fetch(url, signal ? { signal } : void 0).catch(() => {
+    return null;
+  });
   if (!res || !res.ok)
     return;
   return res.arrayBuffer();

package/dist/runtime/server/util/encoding.d.ts

@@ -1,3 +1,2 @@
 export declare function htmlDecodeQuotes(html: string): string;
 export declare function decodeHtml(html: string): string;
-export declare function decodeObjectHtmlEntities(obj: Record<string, string | any>): Record<string, any>;

package/dist/runtime/server/util/encoding.js

@@ -20,10 +20,3 @@ export function decodeHtml(html) {
     return String.fromCharCode(Number.parseInt(int));
   }).replace(RE_AMP, "&");
 }
-export function decodeObjectHtmlEntities(obj) {
-  Object.entries(obj).forEach(([key, value]) => {
-    if (typeof value === "string")
-      obj[key] = decodeHtml(value);
-  });
-  return obj;
-}

package/dist/runtime/server/util/kit.d.ts

@@ -1,6 +1,5 @@
 import type { H3Event } from 'h3';
 import type { NitroRouteRules } from 'nitropack';
 import type { NuxtIslandResponse } from 'nuxt/app';
-export { withoutQuery } from 'nuxtseo-shared/utils';
 export declare function fetchIsland(e: H3Event, component: string, props: Record<string, any>, timeout?: number): Promise<NuxtIslandResponse>;
 export declare function createNitroRouteRuleMatcher(): ((path: string) => NitroRouteRules);

package/dist/runtime/server/util/kit.js

@@ -3,7 +3,6 @@ import { useRuntimeConfig } from "nitropack/runtime";
 import { createRouter as createRadixRouter, toRouteMatcher } from "radix3";
 import { withoutBase, withoutTrailingSlash } from "ufo";
 import { getIslandHash } from "#og-image/island-hash";
-export { withoutQuery } from "nuxtseo-shared/utils";
 export function fetchIsland(e, component, props, timeout) {
   const hashId = getIslandHash({ name: component, props });
   const signal = timeout ? AbortSignal.timeout(timeout) : void 0;

package/dist/runtime/server/util/logger.js

@@ -1,6 +1,2 @@
-import { createConsola } from "consola";
-export const logger = createConsola({
-  defaults: {
-    tag: "Nuxt OG Image"
-  }
-});
+import { createModuleLogger } from "nuxtseo-shared/utils";
+export const logger = createModuleLogger("Nuxt OG Image");

package/dist/runtime/server/util/timings.d.ts

@@ -12,6 +12,3 @@ export interface Timings {
 }
 export declare function createTimings(): Timings;
 export declare const TIMING_CTX_KEY = "_ogImageTimings";
-export declare function getTimingsFromEvent(e: {
-    context: Record<string, any>;
-}): Timings | undefined;

package/dist/runtime/server/util/timings.js

@@ -70,6 +70,3 @@ export function createTimings() {
   return { start, record, measure, entries, header };
 }
 export const TIMING_CTX_KEY = "_ogImageTimings";
-export function getTimingsFromEvent(e) {
-  return e.context[TIMING_CTX_KEY];
-}

package/dist/runtime/server/utils.js

@@ -2,6 +2,7 @@ import { useRuntimeConfig } from "nitropack/runtime";
 import { joinURL } from "ufo";
 import { componentNames } from "#og-image-virtual/component-names.mjs";
 import { buildOgImageUrl } from "../shared.js";
+import { getCloudflareEnv } from "./util/cloudflare.js";
 export function getOgImagePath(_pagePath, _options) {
   const baseURL = useRuntimeConfig().app.baseURL;
   const { defaults, security } = useOgImageRuntimeConfig();
@@ -20,9 +21,11 @@ export function getOgImagePath(_pagePath, _options) {
 }
 export function useOgImageRuntimeConfig(e) {
   const c = useRuntimeConfig(e);
-  const moduleCfg = c["nuxt-og-image"] || {};
-  const cloudflareEnv = e?.context.cloudflare?.env || e?.context?._platform?.cloudflare?.env;
-  const overrideSecret = c.ogImage?.secret || cloudflareEnv?.NUXT_OG_IMAGE_SECRET;
+  const moduleCfg = c["nuxt-og-image"];
+  const cloudflareEnv = getCloudflareEnv(e);
+  const runtimeSecret = c.ogImage?.secret;
+  const cloudflareSecret = cloudflareEnv?.NUXT_OG_IMAGE_SECRET;
+  const overrideSecret = typeof runtimeSecret === "string" && runtimeSecret ? runtimeSecret : typeof cloudflareSecret === "string" ? cloudflareSecret : void 0;
   const security = overrideSecret ? { ...moduleCfg.security || {}, secret: overrideSecret } : moduleCfg.security;
   return {
     defaults: {},

package/dist/shared/{nuxt-og-image.BRBtdkUp.cjs → nuxt-og-image.Cctpuv4O.cjs}

@@ -62,7 +62,9 @@ function checkLocalChrome() {
   return hasChromeLocally;
 }
 async function hasResolvableDependency(dep) {
-  return await kit.resolvePath(dep, { fallbackToOriginal: true }).catch(() => null).then((r) => r && r !== dep);
+  return await kit.resolvePath(dep, { fallbackToOriginal: true }).catch(() => {
+    return null;
+  }).then((r) => r && r !== dep);
 }
 const VALID_RENDERER_SUFFIXES = ["satori", "browser", "takumi"];
 const RE_RENDERER_SUFFIX_CI = /\.?(satori|browser|takumi)$/i;
@@ -913,7 +915,6 @@ const RE_QUOTES = /^['"]|['"]$/g;
 const RE_WIDTH_VALUE = /width:([^;}]+)/;
 const RE_CALC_VAR_MULTIPLY = /calc\(var\((--[\w-]+)\)\s*\*\s*([\d.]+)\)/;
 const RE_NUMERIC_WITH_UNIT = /([\d.]+)(rem|px|em|%)/;
-const RE_EXTREME_VALUE = /^(-?[\d.]+e\+?\d+)(px|rem|em|%)$/;
 const RE_CSS_KEYWORD = /^(?:initial|inherit|unset|revert|revert-layer)$/;
 const RE_UNRESOLVED_VAR = /var\((--[\w-]+)/g;
 const RE_INVALID_CALC = /calc\(\s*[*/]/;
@@ -1523,18 +1524,6 @@ function convertLogicalProperties(styles) {
     }
   }
 }
-function clampExtremeValues(styles) {
-  for (const [prop, value] of Object.entries(styles)) {
-    if (!value.includes("e+") && !value.includes("e38"))
-      continue;
-    const match = value.match(RE_EXTREME_VALUE);
-    if (match?.[1] && match?.[2]) {
-      const num = Number.parseFloat(match[1]);
-      if (Math.abs(num) > 9999)
-        styles[prop] = `9999${match[2]}`;
-    }
-  }
-}
 function stripGradientColorSpace(value) {
   return value.replace(css_js.GRADIENT_COLOR_SPACE_RE, "");
 }
@@ -1582,7 +1571,6 @@ async function postProcessStyles(rawStyles, vars, resolveVar, context) {
   }
   convertIndividualTransforms(styles);
   convertLogicalProperties(styles);
-  clampExtremeValues(styles);
   return Object.keys(styles).length ? styles : null;
 }
 function walkTemplateAst(nodes, visitor) {
@@ -1985,7 +1973,9 @@ async function parseFontsFromTemplate(nuxt, options) {
 async function downloadFontFile(url, destPath) {
   if (fs.existsSync(destPath))
     return true;
-  const res = await fetch(url).catch(() => null);
+  const res = await fetch(url).catch(() => {
+    return null;
+  });
   if (!res?.ok)
     return false;
   await promises.writeFile(destPath, Buffer.from(await res.arrayBuffer()));
@@ -2626,7 +2616,7 @@ const TreeShakeComposablesPlugin = unplugin.createUnplugin(() => {
     },
     transform(code, id) {
       const s = new MagicString__default(code);
-      if (id.endsWith("components.islands.mjs")) ; else {
+      if (!id.endsWith("components.islands.mjs")) {
         const strippedCode = stripLiteral.stripLiteral(code);
         if (!COMPOSABLE_RE.test(code)) {
           return;
@@ -3223,7 +3213,9 @@ const iconCache = /* @__PURE__ */ new Map();
 async function loadIconSet(prefix) {
   if (iconCache.has(prefix))
     return iconCache.get(prefix);
-  const icons = await import(`@iconify-json/${prefix}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => null);
+  const icons = await import(`@iconify-json/${prefix}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => {
+    return null;
+  });
   iconCache.set(prefix, icons);
   if (iconCache.size > 20)
     iconCache.delete(iconCache.keys().next().value);
@@ -3407,7 +3399,9 @@ const AssetTransformPlugin = unplugin.createUnplugin((options) => {
       let hasChanges = false;
       if (options.emojiSet && emojiUtils_js.RE_MATCH_EMOJIS.test(template)) {
         if (!emojiIcons) {
-          emojiIcons = options.emojiIcons ?? await import(`@iconify-json/${options.emojiSet}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => null);
+          emojiIcons = options.emojiIcons ?? await import(`@iconify-json/${options.emojiSet}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => {
+            return null;
+          });
         }
         emojiUtils_js.RE_MATCH_EMOJIS.lastIndex = 0;
         const allEmojis = /* @__PURE__ */ new Set();
@@ -3697,7 +3691,9 @@ const AssetTransformPlugin = unplugin.createUnplugin((options) => {
             } else {
               continue;
             }
-            const fileBuffer = await promises.readFile(resolvedPath).catch(() => null);
+            const fileBuffer = await promises.readFile(resolvedPath).catch(() => {
+              return null;
+            });
             if (!fileBuffer)
               continue;
             const mimeType = getMimeType(ext);
@@ -4081,7 +4077,6 @@ ${importStatements}
 const warnings = [];
 const counts = {
   config: /* @__PURE__ */ new Map(),
-  composable: /* @__PURE__ */ new Map(),
   component: /* @__PURE__ */ new Map()
 };
 let hasEmitted = false;
@@ -4103,13 +4098,6 @@ const REMOVED_CONFIG = {
   "defaults.renderer": "Removed (renderer determined by component filename suffix)",
   "defaults.component": "Removed (rename component to OgImage/Default.{renderer}.vue)"
 };
-const DEPRECATED_COMPOSABLES$1 = {
-  defineOgImageComponent: "defineOgImage()",
-  defineOgImageStatic: "defineOgImage()",
-  defineOgImageDynamic: "defineOgImage()",
-  defineOgImageCached: "defineOgImage()",
-  defineOgImageWithoutCache: "defineOgImage()"
-};
 function addWarning(warning) {
   const countMap = counts[warning.type];
   const current = countMap.get(warning.code) || 0;
@@ -4139,13 +4127,13 @@ function addComponentWarning(componentPath) {
   });
 }
 function hasWarnings() {
-  return warnings.length > 0 || counts.config.size > 0 || counts.composable.size > 0 || counts.component.size > 0;
+  return warnings.length > 0 || counts.config.size > 0 || counts.component.size > 0;
 }
 function emitWarnings() {
   if (hasEmitted || !hasWarnings())
     return;
   hasEmitted = true;
-  const totalIssues = [...counts.config.values()].reduce((a, b) => a + b, 0) + [...counts.composable.values()].reduce((a, b) => a + b, 0) + [...counts.component.values()].reduce((a, b) => a + b, 0);
+  const totalIssues = [...counts.config.values()].reduce((a, b) => a + b, 0) + [...counts.component.values()].reduce((a, b) => a + b, 0);
   const body = [
     formatWarnings(),
     "",
@@ -4182,17 +4170,6 @@ function formatWarnings() {
     }
     lines.push("");
   }
-  if (counts.composable.size > 0) {
-    lines.push("Deprecated composables:");
-    for (const [name, count] of counts.composable) {
-      const replacement = DEPRECATED_COMPOSABLES$1[name];
-      const suffix = count > 1 ? ` (\xD7${count})` : "";
-      lines.push(`  \u2022 ${name}()${suffix}`);
-      if (replacement)
-        lines.push(`    \u2192 Use: ${replacement}`);
-    }
-    lines.push("");
-  }
   if (counts.component.size > 0) {
     const componentCount = [...counts.component.values()].reduce((a, b) => a + b, 0);
     lines.push(`Components missing renderer suffix: ${componentCount}`);
@@ -4669,6 +4646,12 @@ declare module '#og-image-cache' {
 import type { OgImageOptions, OgImageRenderEventContext, VNode } from '${typesPath}'
 
 declare module 'nitropack' {
+  interface NitroRuntimeConfig {
+    'nuxt-og-image': OgImageRuntimeConfig
+    ogImage?: {
+      secret?: string
+    }
+  }
   interface NitroRouteRules {
     ogImage?: false | OgImageOptions & Record<string, any>
   }
@@ -4682,6 +4665,12 @@ declare module 'nitropack' {
 }
 
 declare module 'nitropack/types' {
+  interface NitroRuntimeConfig {
+    'nuxt-og-image': OgImageRuntimeConfig
+    ogImage?: {
+      secret?: string
+    }
+  }
   interface NitroRouteRules {
     ogImage?: false | OgImageOptions & Record<string, any>
   }
@@ -4694,6 +4683,15 @@ declare module 'nitropack/types' {
   }
 }
 
+declare module 'h3' {
+  interface H3EventContext {
+    _nitro?: {
+      routeRules?: import('nitropack').NitroRouteRules
+    }
+    _ogImagePrerenderPaths?: Map<string, string>
+  }
+}
+
 export {}
 `;
     }
@@ -4705,14 +4703,16 @@ const RE_PASCAL_TO_KEBAB = /([a-z])([A-Z])/g;
 const RE_TILDE_PREFIX = /^~\//;
 const IS_MODULE_DEVELOPMENT = undefined.endsWith(".ts");
 async function findPackageVersionFromEntry(pkg, resolver) {
-  const entry = await resolver.resolvePath(pkg, { fallbackToOriginal: false }).catch(() => null);
+  const entry = await resolver.resolvePath(pkg, { fallbackToOriginal: false }).catch(() => {
+    return null;
+  });
   if (!entry || entry === pkg)
     return;
   let dir = pathe.dirname(entry);
   while (dir && dir !== pathe.dirname(dir)) {
     const pkgPath = pathe.join(dir, "package.json");
     if (fs.existsSync(pkgPath)) {
-      const pkgJson = await pkgTypes.readPackageJSON(pkgPath).catch(() => null);
+      const pkgJson = await pkgTypes.readPackageJSON(pkgPath);
       if (pkgJson?.name === pkg)
         return pkgJson.version;
     }
@@ -4790,7 +4790,7 @@ const module$1 = kit.defineNuxtModule({
     await onUpgrade(nuxt, options, previousVersion);
   },
   async setup(config, nuxt) {
-    const _resolver = kit.createResolver((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('shared/nuxt-og-image.BRBtdkUp.cjs', document.baseURI).href)));
+    const _resolver = kit.createResolver((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('shared/nuxt-og-image.Cctpuv4O.cjs', document.baseURI).href)));
     const fixSharedPath = (p) => {
       return p.replace(/\/shared\/runtime(\/|$)/, "/runtime$1").replace(/\/shared\/client(\/|$)/, "/client$1").replace(/\/shared\/devtools(\/|$)/, "/devtools$1");
     };
@@ -4835,7 +4835,13 @@ const module$1 = kit.defineNuxtModule({
       if (!nuxt.options.dev || config.zeroRuntime || !hasServerRuntime)
         return;
       if (signing.optOut) {
-        logger_js.logger.warn("OG image URL signing is disabled (`security.secret: false`). Anyone can craft arbitrary image generation requests.");
+        logger_js.logger.warn([
+          "OG image URL signing is disabled (`security.secret: false`).",
+          "Attackers can craft image requests and poison the cache so your real OG image URLs serve attacker-controlled content (content spoofing).",
+          "Signing will be required in v7 whenever runtime image generation is enabled. Leave signing on, or set an explicit secret:",
+          "  NUXT_OG_IMAGE_SECRET=<secret>",
+          "  Generate one with: npx nuxt-og-image generate-secret"
+        ].join("\n"));
       } else if (signing.generated) {
         logger_js.logger.warn([
           "OG image URLs are signed with an auto-generated secret that changes every build.",
@@ -4930,7 +4936,9 @@ Or pin to a specific version in package.json:
             const cssPath = typeof cssEntry === "string" ? cssEntry : cssEntry?.src;
             if (!cssPath || !cssPath.endsWith(".css"))
               continue;
-            const resolved = await resolver.resolvePath(cssPath).catch(() => null);
+            const resolved = await resolver.resolvePath(cssPath).catch(() => {
+              return null;
+            });
             if (!resolved || !fs.existsSync(resolved))
               continue;
             return resolved;
@@ -5019,7 +5027,9 @@ Or pin to a specific version in package.json:
             const cssPath = typeof cssEntry === "string" ? cssEntry : cssEntry?.src;
             if (!cssPath || !cssPath.endsWith(".css"))
               continue;
-            const resolved = await resolver.resolvePath(cssPath).catch(() => null);
+            const resolved = await resolver.resolvePath(cssPath).catch(() => {
+              return null;
+            });
             if (!resolved || !fs.existsSync(resolved))
               continue;
             const content = await promises.readFile(resolved, "utf-8");

package/dist/shared/{nuxt-og-image.Bv8VSGTj.mjs → nuxt-og-image.D3mV8OQ9.mjs}

@@ -42,7 +42,9 @@ function checkLocalChrome() {
   return hasChromeLocally;
 }
 async function hasResolvableDependency(dep) {
-  return await resolvePath(dep, { fallbackToOriginal: true }).catch(() => null).then((r) => r && r !== dep);
+  return await resolvePath(dep, { fallbackToOriginal: true }).catch(() => {
+    return null;
+  }).then((r) => r && r !== dep);
 }
 const VALID_RENDERER_SUFFIXES = ["satori", "browser", "takumi"];
 const RE_RENDERER_SUFFIX_CI = /\.?(satori|browser|takumi)$/i;
@@ -893,7 +895,6 @@ const RE_QUOTES = /^['"]|['"]$/g;
 const RE_WIDTH_VALUE = /width:([^;}]+)/;
 const RE_CALC_VAR_MULTIPLY = /calc\(var\((--[\w-]+)\)\s*\*\s*([\d.]+)\)/;
 const RE_NUMERIC_WITH_UNIT = /([\d.]+)(rem|px|em|%)/;
-const RE_EXTREME_VALUE = /^(-?[\d.]+e\+?\d+)(px|rem|em|%)$/;
 const RE_CSS_KEYWORD = /^(?:initial|inherit|unset|revert|revert-layer)$/;
 const RE_UNRESOLVED_VAR = /var\((--[\w-]+)/g;
 const RE_INVALID_CALC = /calc\(\s*[*/]/;
@@ -1503,18 +1504,6 @@ function convertLogicalProperties(styles) {
     }
   }
 }
-function clampExtremeValues(styles) {
-  for (const [prop, value] of Object.entries(styles)) {
-    if (!value.includes("e+") && !value.includes("e38"))
-      continue;
-    const match = value.match(RE_EXTREME_VALUE);
-    if (match?.[1] && match?.[2]) {
-      const num = Number.parseFloat(match[1]);
-      if (Math.abs(num) > 9999)
-        styles[prop] = `9999${match[2]}`;
-    }
-  }
-}
 function stripGradientColorSpace(value) {
   return value.replace(GRADIENT_COLOR_SPACE_RE, "");
 }
@@ -1562,7 +1551,6 @@ async function postProcessStyles(rawStyles, vars, resolveVar, context) {
   }
   convertIndividualTransforms(styles);
   convertLogicalProperties(styles);
-  clampExtremeValues(styles);
   return Object.keys(styles).length ? styles : null;
 }
 function walkTemplateAst(nodes, visitor) {
@@ -1965,7 +1953,9 @@ async function parseFontsFromTemplate(nuxt, options) {
 async function downloadFontFile(url, destPath) {
   if (existsSync(destPath))
     return true;
-  const res = await fetch(url).catch(() => null);
+  const res = await fetch(url).catch(() => {
+    return null;
+  });
   if (!res?.ok)
     return false;
   await writeFile(destPath, Buffer.from(await res.arrayBuffer()));
@@ -2606,7 +2596,7 @@ const TreeShakeComposablesPlugin = createUnplugin(() => {
     },
     transform(code, id) {
       const s = new MagicString(code);
-      if (id.endsWith("components.islands.mjs")) ; else {
+      if (!id.endsWith("components.islands.mjs")) {
         const strippedCode = stripLiteral(code);
         if (!COMPOSABLE_RE.test(code)) {
           return;
@@ -3203,7 +3193,9 @@ const iconCache = /* @__PURE__ */ new Map();
 async function loadIconSet(prefix) {
   if (iconCache.has(prefix))
     return iconCache.get(prefix);
-  const icons = await import(`@iconify-json/${prefix}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => null);
+  const icons = await import(`@iconify-json/${prefix}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => {
+    return null;
+  });
   iconCache.set(prefix, icons);
   if (iconCache.size > 20)
     iconCache.delete(iconCache.keys().next().value);
@@ -3387,7 +3379,9 @@ const AssetTransformPlugin = createUnplugin((options) => {
       let hasChanges = false;
       if (options.emojiSet && RE_MATCH_EMOJIS.test(template)) {
         if (!emojiIcons) {
-          emojiIcons = options.emojiIcons ?? await import(`@iconify-json/${options.emojiSet}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => null);
+          emojiIcons = options.emojiIcons ?? await import(`@iconify-json/${options.emojiSet}/icons.json`, { with: { type: 'json' } }).then((m) => m.default).catch(() => {
+            return null;
+          });
         }
         RE_MATCH_EMOJIS.lastIndex = 0;
         const allEmojis = /* @__PURE__ */ new Set();
@@ -3677,7 +3671,9 @@ const AssetTransformPlugin = createUnplugin((options) => {
             } else {
               continue;
             }
-            const fileBuffer = await readFile(resolvedPath).catch(() => null);
+            const fileBuffer = await readFile(resolvedPath).catch(() => {
+              return null;
+            });
             if (!fileBuffer)
               continue;
             const mimeType = getMimeType(ext);
@@ -4061,7 +4057,6 @@ ${importStatements}
 const warnings = [];
 const counts = {
   config: /* @__PURE__ */ new Map(),
-  composable: /* @__PURE__ */ new Map(),
   component: /* @__PURE__ */ new Map()
 };
 let hasEmitted = false;
@@ -4083,13 +4078,6 @@ const REMOVED_CONFIG = {
   "defaults.renderer": "Removed (renderer determined by component filename suffix)",
   "defaults.component": "Removed (rename component to OgImage/Default.{renderer}.vue)"
 };
-const DEPRECATED_COMPOSABLES$1 = {
-  defineOgImageComponent: "defineOgImage()",
-  defineOgImageStatic: "defineOgImage()",
-  defineOgImageDynamic: "defineOgImage()",
-  defineOgImageCached: "defineOgImage()",
-  defineOgImageWithoutCache: "defineOgImage()"
-};
 function addWarning(warning) {
   const countMap = counts[warning.type];
   const current = countMap.get(warning.code) || 0;
@@ -4119,13 +4107,13 @@ function addComponentWarning(componentPath) {
   });
 }
 function hasWarnings() {
-  return warnings.length > 0 || counts.config.size > 0 || counts.composable.size > 0 || counts.component.size > 0;
+  return warnings.length > 0 || counts.config.size > 0 || counts.component.size > 0;
 }
 function emitWarnings() {
   if (hasEmitted || !hasWarnings())
     return;
   hasEmitted = true;
-  const totalIssues = [...counts.config.values()].reduce((a, b) => a + b, 0) + [...counts.composable.values()].reduce((a, b) => a + b, 0) + [...counts.component.values()].reduce((a, b) => a + b, 0);
+  const totalIssues = [...counts.config.values()].reduce((a, b) => a + b, 0) + [...counts.component.values()].reduce((a, b) => a + b, 0);
   const body = [
     formatWarnings(),
     "",
@@ -4162,17 +4150,6 @@ function formatWarnings() {
     }
     lines.push("");
   }
-  if (counts.composable.size > 0) {
-    lines.push("Deprecated composables:");
-    for (const [name, count] of counts.composable) {
-      const replacement = DEPRECATED_COMPOSABLES$1[name];
-      const suffix = count > 1 ? ` (\xD7${count})` : "";
-      lines.push(`  \u2022 ${name}()${suffix}`);
-      if (replacement)
-        lines.push(`    \u2192 Use: ${replacement}`);
-    }
-    lines.push("");
-  }
   if (counts.component.size > 0) {
     const componentCount = [...counts.component.values()].reduce((a, b) => a + b, 0);
     lines.push(`Components missing renderer suffix: ${componentCount}`);
@@ -4649,6 +4626,12 @@ declare module '#og-image-cache' {
 import type { OgImageOptions, OgImageRenderEventContext, VNode } from '${typesPath}'
 
 declare module 'nitropack' {
+  interface NitroRuntimeConfig {
+    'nuxt-og-image': OgImageRuntimeConfig
+    ogImage?: {
+      secret?: string
+    }
+  }
   interface NitroRouteRules {
     ogImage?: false | OgImageOptions & Record<string, any>
   }
@@ -4662,6 +4645,12 @@ declare module 'nitropack' {
 }
 
 declare module 'nitropack/types' {
+  interface NitroRuntimeConfig {
+    'nuxt-og-image': OgImageRuntimeConfig
+    ogImage?: {
+      secret?: string
+    }
+  }
   interface NitroRouteRules {
     ogImage?: false | OgImageOptions & Record<string, any>
   }
@@ -4674,6 +4663,15 @@ declare module 'nitropack/types' {
   }
 }
 
+declare module 'h3' {
+  interface H3EventContext {
+    _nitro?: {
+      routeRules?: import('nitropack').NitroRouteRules
+    }
+    _ogImagePrerenderPaths?: Map<string, string>
+  }
+}
+
 export {}
 `;
     }
@@ -4685,14 +4683,16 @@ const RE_PASCAL_TO_KEBAB = /([a-z])([A-Z])/g;
 const RE_TILDE_PREFIX = /^~\//;
 const IS_MODULE_DEVELOPMENT = import.meta.filename.endsWith(".ts");
 async function findPackageVersionFromEntry(pkg, resolver) {
-  const entry = await resolver.resolvePath(pkg, { fallbackToOriginal: false }).catch(() => null);
+  const entry = await resolver.resolvePath(pkg, { fallbackToOriginal: false }).catch(() => {
+    return null;
+  });
   if (!entry || entry === pkg)
     return;
   let dir = dirname(entry);
   while (dir && dir !== dirname(dir)) {
     const pkgPath = join(dir, "package.json");
     if (existsSync(pkgPath)) {
-      const pkgJson = await readPackageJSON(pkgPath).catch(() => null);
+      const pkgJson = await readPackageJSON(pkgPath);
       if (pkgJson?.name === pkg)
         return pkgJson.version;
     }
@@ -4815,7 +4815,13 @@ const module$1 = defineNuxtModule({
       if (!nuxt.options.dev || config.zeroRuntime || !hasServerRuntime)
         return;
       if (signing.optOut) {
-        logger.warn("OG image URL signing is disabled (`security.secret: false`). Anyone can craft arbitrary image generation requests.");
+        logger.warn([
+          "OG image URL signing is disabled (`security.secret: false`).",
+          "Attackers can craft image requests and poison the cache so your real OG image URLs serve attacker-controlled content (content spoofing).",
+          "Signing will be required in v7 whenever runtime image generation is enabled. Leave signing on, or set an explicit secret:",
+          "  NUXT_OG_IMAGE_SECRET=<secret>",
+          "  Generate one with: npx nuxt-og-image generate-secret"
+        ].join("\n"));
       } else if (signing.generated) {
         logger.warn([
           "OG image URLs are signed with an auto-generated secret that changes every build.",
@@ -4910,7 +4916,9 @@ Or pin to a specific version in package.json:
             const cssPath = typeof cssEntry === "string" ? cssEntry : cssEntry?.src;
             if (!cssPath || !cssPath.endsWith(".css"))
               continue;
-            const resolved = await resolver.resolvePath(cssPath).catch(() => null);
+            const resolved = await resolver.resolvePath(cssPath).catch(() => {
+              return null;
+            });
             if (!resolved || !existsSync(resolved))
               continue;
             return resolved;
@@ -4999,7 +5007,9 @@ Or pin to a specific version in package.json:
             const cssPath = typeof cssEntry === "string" ? cssEntry : cssEntry?.src;
             if (!cssPath || !cssPath.endsWith(".css"))
               continue;
-            const resolved = await resolver.resolvePath(cssPath).catch(() => null);
+            const resolved = await resolver.resolvePath(cssPath).catch(() => {
+              return null;
+            });
             if (!resolved || !existsSync(resolved))
               continue;
             const content = await readFile(resolved, "utf-8");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-og-image",
   "type": "module",
-  "version": "6.7.4",
+  "version": "6.7.5",
   "description": "Enlightened OG Image generation for Nuxt.",
   "author": {
     "website": "https://harlanzw.com",
@@ -103,28 +103,27 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.7.0",
-    "@nuxt/kit": "^4.5.0",
+    "@nuxt/kit": "^4.5.1",
     "@unocss/config": "^66.7.5",
     "@unocss/core": "^66.7.5",
     "@vue/compiler-sfc": "^3.5.40",
     "chrome-launcher": "^1.2.1",
     "consola": "^3.4.2",
-    "culori": "^4.0.2",
     "defu": "^6.1.7",
-    "devalue": "^5.8.1",
-    "exsolve": "^1.1.0",
-    "fnv1a-64": "^0.1.1",
-    "lightningcss": "^1.32.0",
-    "magic-string": "^1.0.0",
+    "devalue": "^5.8.2",
+    "exsolve": "^1.1.1",
+    "fnv1a-64": "^0.1.2",
+    "lightningcss": "^1.33.0",
+    "magic-string": "^1.1.0",
     "magicast": "^0.5.3",
     "mocked-exports": "^0.1.1",
     "nuxt-site-config": "^4.1.2",
-    "nuxtseo-shared": "^5.3.3",
+    "nuxtseo-shared": "^5.3.6",
     "nypm": "^0.6.8",
     "object-identity": "^0.2.3",
     "ofetch": "^1.5.1",
     "ohash": "^2.0.11",
-    "oxc-parser": "^0.140.0",
+    "oxc-parser": "^0.142.0",
     "oxc-walker": "^1.0.0",
     "pathe": "^2.0.3",
     "pkg-types": "^2.3.1",
@@ -132,42 +131,41 @@
     "std-env": "^4.2.0",
     "strip-literal": "^3.1.0",
     "tinyexec": "^1.2.4",
-    "tinyglobby": "^0.2.17",
     "ufo": "^1.6.4",
     "ultrahtml": "^1.7.0",
     "unplugin": "^3.3.0"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^9.1.0",
+    "@antfu/eslint-config": "^9.2.0",
     "@fontsource/noto-sans-sc": "^5.3.0",
     "@iconify-json/carbon": "^1.2.24",
     "@iconify-json/logos": "^1.2.11",
     "@iconify-json/noto": "^1.2.7",
     "@iconify-json/ri": "^1.2.10",
-    "@iconify-json/tabler": "^1.2.36",
+    "@iconify-json/tabler": "^1.2.37",
     "@iconify/types": "^2.0.0",
     "@img/sharp-linux-x64": "^0.35.3",
-    "@nuxt/content": "^3.15.0",
-    "@nuxt/devtools": "4.0.0-alpha.7",
-    "@nuxt/devtools-kit": "4.0.0-alpha.7",
+    "@nuxt/content": "^3.15.2",
+    "@nuxt/devtools": "4.0.0-alpha.9",
+    "@nuxt/devtools-kit": "4.0.0-alpha.9",
     "@nuxt/fonts": "^0.14.0",
     "@nuxt/icon": "^2.3.1",
     "@nuxt/image": "^2.0.0",
-    "@nuxt/module-builder": "^1.0.2",
-    "@nuxt/test-utils": "^4.0.3",
+    "@nuxt/module-builder": "^1.0.3",
+    "@nuxt/test-utils": "^4.1.0",
     "@nuxt/ui": "^4.10.0",
     "@nuxtjs/color-mode": "^4.0.1",
     "@nuxtjs/eslint-config-typescript": "^12.1.0",
-    "@nuxtjs/i18n": "^10.4.1",
+    "@nuxtjs/i18n": "^10.5.0",
     "@nuxtjs/tailwindcss": "7.0.0-beta.1",
     "@resvg/resvg-js": "^2.6.2",
     "@resvg/resvg-wasm": "^2.6.2",
     "@tailwindcss/vite": "^4.3.3",
-    "@takumi-rs/core": "^2.3.2",
+    "@takumi-rs/core": "^2.5.2",
     "@takumi-rs/core-v1": "npm:@takumi-rs/core@1.8.7",
-    "@takumi-rs/helpers": "^2.3.2",
+    "@takumi-rs/helpers": "^2.5.2",
     "@takumi-rs/helpers-v1": "npm:@takumi-rs/helpers@1.8.7",
-    "@takumi-rs/wasm": "^2.3.2",
+    "@takumi-rs/wasm": "^2.5.2",
     "@takumi-rs/wasm-v1": "npm:@takumi-rs/wasm@1.8.7",
     "@unocss/nuxt": "^66.7.5",
     "@unocss/preset-icons": "^66.7.5",
@@ -177,23 +175,23 @@
     "@vue/compiler-core": "^3.5.40",
     "@vueuse/nuxt": "^14.3.0",
     "birpc": "^4.0.0",
-    "bumpp": "^11.1.0",
-    "eslint": "^10.7.0",
-    "eslint-plugin-harlanzw": "^0.17.0",
+    "bumpp": "^12.0.0",
+    "eslint": "^10.8.0",
+    "eslint-plugin-harlanzw": "^0.17.1",
     "fontless": "^0.2.1",
     "get-image-colors": "^4.0.1",
     "globby": "^16.2.2",
-    "happy-dom": "^20.11.0",
+    "happy-dom": "^20.11.1",
     "hookable": "^6.1.1",
     "jest-image-snapshot": "^6.5.2",
-    "lightningcss": "^1.32.0",
+    "lightningcss": "^1.33.0",
     "nitropack": "^2.13.4",
-    "nuxt": "^4.5.0",
-    "nuxtseo-layer-devtools": "^5.3.3",
-    "playwright": "^1.61.1",
-    "playwright-core": "^1.61.1",
-    "sass": "^1.101.0",
-    "satori": "^0.28.0",
+    "nuxt": "^4.5.1",
+    "nuxtseo-layer-devtools": "^5.3.6",
+    "playwright": "^1.62.0",
+    "playwright-core": "^1.62.0",
+    "sass": "^1.102.0",
+    "satori": "^0.29.0",
     "sharp": "^0.35.3",
     "sirv": "^3.0.2",
     "tailwindcss": "^4.3.3",
@@ -203,8 +201,8 @@
     "unocss": "^66.7.5",
     "vitest": "^4.1.10",
     "vue": "^3.5.40",
-    "vue-tsc": "^3.3.7",
-    "wrangler": "^4.112.0",
+    "vue-tsc": "^3.3.8",
+    "wrangler": "^4.114.0",
     "yoga-wasm-web": "^0.3.3",
     "zod": "^4.4.3"
   },