[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/kit (source)	^4.6.2 → ^4.6.3
nuxt (source)	^4.6.2 → ^4.6.3

---

Release Notes

nuxt/nuxt (@​nuxt/kit)

v4.6.3

Compare Source

v4.6.3 is the next patch release.

👉 Changelog

compare changes

🚨 Security fixes

• vite: do not read files named in client error reports (63299e13c) - GHSA-x287-wcfc-q46c
• vite: deny dev server access to nitro dev output (c7e204ec6) - GHSA-648h-gw55-m2g7
• vite: deny serving generated app secret in dev (16dfdc2a9) - GHSA-3xf4-9g3c-4h4w
• nitro,nuxt: handle dot segments in request paths (440250d97) - GHSA-9v7c-q64q-vv33
• nuxt: apply redirect route rules to page islands (b20372dbe) - GHSA-2fxj-c3j7-rr69

🔥 Performance

• vite: skip compiling plain style blocks in the server build (#​36711)
• nitro,nuxt,rspack,webpack: bundle esm vue + reuse caches (#​36710)
• vite: avoid quadratic nested dir check for fs.allow (#​36702)
• nuxt: server render internal custom links without RouterLink (#​36707)
• nuxt: skip unneeded typed routes generation (#​36645)

🩹 Fixes

• nitro: don't share prerender hints with self-fetched requests (#​36705)
• nuxt: defer app scope cleanup on external navigation (#​36713)
• nuxt: prevent useCookie CookieStore sync from rewriting with refresh (#​36673)
• nuxt: only return redirects from navigateTo while middleware runs (#​36650)
• nuxt: remove purged entries from _asyncData (#​36709)
• vite: skip quoted import.meta keys + limit replace to client dev (#​36703)
• nuxt: hide RouteLocationRaw from navigateTo's public return type (#​36691)
• nuxt: tree-shake auto-imported #app composables (#​36696)
• nuxt: don't treat constrained route rules as covering dynamic pages (#​36701)
• nuxt: include shared/ in build cache hash (#​36704)
• nuxt: hash keyed function ids + page import names relative to rootDir (#​36697)
• nuxt: encode page paths before matching route rule keys (#​36683)
• nuxt: handle rejected updateCallbackDone of aborted view transition (#​36639)
• ui-templates: keep loading shader proportions on narrow screens (#​36654)
• nuxt: reject case-dependent route rule constraints w/ sensitive: false (#​36708)
• nuxt: don't case-fold regex constraints in route rule keys (#​36694)
• nuxt: normalise page prefix when finding route rule exceptions (#​36685)
• vite: mirror ssr invalidations for created and deleted files (634cba64c)
• nitro: keep noScripts wildcard patterns single-segment (fa323db7d)
• deps: update unrouting to v0.3.1 (#​36663)
• nuxt: avoid self-referencing nuxt/schema augmentation (#​36633)
• nuxt: let nightly runtime resolve its own nuxt/* imports (#​36632)
• nuxt: don't warn for vite+ vite.config files (#​36628)
• kit: keep generated declaration first in tsconfig include (#​36627)
• nuxt: clamp numeric v-for sources in island renders at render time (#​36623)
• rspack,webpack: register vue-loader plugin only once per config (#​36622)
• nitro: abort the portable request when the client disconnects (#​36652)
• deps: update nitropack to 2.13.5 + drop obsolete workarounds (#​36649)

📖 Documentation

• note provide/inject limit in server components (#​35837)
• use American spelling in a few guides (#​36706)
• document controlling prefetch hints via build:manifest hook (#​36695)
• update StackBlitz link to point to version 4 (#​36674)
• link to the 2.x docs (#​36640)
• clarify that island props must be validated before iteration (4b12d15c9)

✅ Tests

• list NUXT_B4023 as main-only (4fd54ff9a)
• wait for leave transition before each scroll behaviour test (453406999)
• vite: assert spa server bundle does not ship the app (#​36699)
• nuxt: cover route rule coverage under a base url (#​36682)
• list NUXT_B9006 as main-only (e107e0f40)

🤖 CI

• only run full checks for the last merge queue entry (132698a46)
• run a reduced matrix in the merge queue (7d228ba4b)
• compare merge queue changes against the base branch (bad8c3637)
• notify resolved issues after publishing a release (9d47884f3)
• remove broken ai-moderator and ecosystem-ci trigger workflows (1d89ad434)

🎉 New Contributors

• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Volkan Akyel (@​volkanakyel)
• Gareth (@​0xgdr)

❤️ Contributors

• Daniel Roe (@​danielroe)
• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Max (@​onmax)
• Volkan Akyel (@​volkanakyel)
• Bochkarev Ivan (@​Ibochkarev)
• Gareth (@​0xgdr)
• Hugo (@​HugoRCD)
• Sébastien Chopin (@​atinux)
• Eduardo San Martin Morote (@​posva)
• Baptiste Leproux (@​larbish)
• Benjamin Canac (@​benjamincanac)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
comark-docs-layer	Ready	Preview	Oct 28, 2026 6:32am UTC

[coldtea-pr-lens]

Note

renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 92c640b3-6288-4cca-a1c3-6cb7729f6cec

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

npm i https://pkg.pr.new/comarkdown/comark-docs@75

commit: f561036

[github-actions]

Production bundle

Comparing dc241102 with f561036d. Compressed sizes are calculated from the emitted production assets.

Initial page load

Page	Base JS (Brotli)	PR JS (Brotli)	Δ JS	Δ CSS	Δ files
/	417.9 KiB	417.8 KiB	-83 B (-0.0%)	—	-1
/getting-started/introduction	785.3 KiB	785.2 KiB	-87 B (-0.0%)	—	-1
/writing/components	785.3 KiB	785.2 KiB	-87 B (-0.0%)	—	-1

Entry script, modulepreload chunks and stylesheets referenced by the server-rendered HTML. Lazy and prefetched chunks are excluded.

All client assets

Metric	Base (Brotli)	PR (Brotli)	Δ Brotli	Δ gzip
Client JavaScript	1001.4 KiB	1001.5 KiB	+35 B (+0.0%)	-127 B (-0.0%)
Client CSS	28.2 KiB	28.2 KiB	—	—
Other client assets	340.8 KiB	340.8 KiB	+3 B (+0.0%)	-1 B (-0.0%)
Total client assets	1.34 MiB	1.34 MiB	+38 B (+0.0%)	-128 B (-0.0%)

Largest module increases

Module	Base (Brotli)	PR (Brotli)	Δ Brotli
virtual:nuxt:.nuxt%2Froute-rules.mjs	989 B	1.2 KiB	+269 B (+27.2%)
node_modules/nuxt/dist/app/composables/cookie.js	2.0 KiB	2.1 KiB	+89 B (+4.4%)
node_modules/nuxt/dist/pages/runtime/plugins/router.js	2.5 KiB	2.6 KiB	+83 B (+3.2%)
node_modules/nuxt/dist/app/composables/router.js	1.3 KiB	1.3 KiB	+41 B (+3.1%)
node_modules/markdown-exit/dist/index.js	17.4 KiB	17.4 KiB	+37 B (+0.2%)
node_modules/nuxt/dist/app/composables/asyncData.js	3.5 KiB	3.6 KiB	+29 B (+0.8%)
node_modules/@nuxt/ui/dist/runtime/components/prose/Prompt.vue	1.1 KiB	1.1 KiB	+24 B (+2.1%)
node_modules/@nuxt/ui/dist/runtime/components/PageGrid.vue	439 B	462 B	+23 B (+5.2%)
node_modules/@nuxt/ui/dist/runtime/components/Tabs.vue	1.5 KiB	1.5 KiB	+22 B (+1.4%)
node_modules/nuxt/dist/app/composables/state.js	486 B	507 B	+21 B (+4.3%)

Module values come from Nuxt’s analyzer and are attribution estimates. This workflow is currently report-only.

Workflow run