[Snyk] Upgrade @nuxt/ui from 2.17.0 to 4.0.1 #273
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @nuxt/ui from 2.17.0 to 4.0.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 58 versions ahead of your current version.
The recommended version was released 23 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-VITE-9653016
SNYK-JS-CROSSSPAWN-8303230
SNYK-JS-NUXT-9486043
SNYK-JS-VITE-9685035
SNYK-JS-VITE-9919777
SNYK-JS-BABELHELPERS-9397697
SNYK-JS-INFLIGHT-6095116
SNYK-JS-KOA-10944994
SNYK-JS-KOA-12143256
SNYK-JS-NUXTVITEBUILDER-8663232
SNYK-JS-PATHTOREGEXP-7925106
SNYK-JS-BRACEEXPANSION-9789073
SNYK-JS-BRACEEXPANSION-9789073
SNYK-JS-DEVALUE-12205530
SNYK-JS-KOA-8720152
SNYK-JS-UNDICI-8641354
SNYK-JS-VITE-9512410
SNYK-JS-MICROMATCH-6838728
SNYK-JS-NANOID-8492085
SNYK-JS-NANOID-8492085
SNYK-JS-PARSEGITCONFIG-9403763
SNYK-JS-ROLLUP-8073097
SNYK-JS-VITE-8023174
SNYK-JS-VITE-8648411
SNYK-JS-VITE-9576207
SNYK-JS-KOA-9679272
SNYK-JS-NUXT-12878602
SNYK-JS-SEND-7926862
SNYK-JS-SERVESTATIC-7926865
SNYK-JS-SIRV-12558119
SNYK-JS-UNDICI-10176064
SNYK-JS-VITE-12558116
SNYK-JS-VITE-8022916
Release notes
Package name: @nuxt/ui
-
4.0.1 - 2025-10-02
- App: allow global portal disabling (#5111) (7659fa1)
- AuthForm: export type with proper inference for field-specific props (#5106) (344f269)
- Avatar: remove redundant
- Carousel: ensure plugins init after client-side navigation (#5117) (21fbe63)
- Carousel: invert arrow keys in RTL direction (#5072) (fde53ee)
- ChatMessages: ensure content is render before scrolling (0db622a)
- ChatMessages: watch deep to handle streaming with
- components: add missing
- ContentNavigation: improve path matching and recursion with
- ContentSearch/DashboardSearch: proxy modal props to support fullscreen (095a0c1)
- DashboardPanel/DashboardSidebar: handle RTL mode (#5109) (fface35)
- Drawer: prevent unwanted close when dismissible is false (#5085) (2abdc21)
- Drawer: use full height/width for snapPoints (#5041) (b145768)
- locale: improve
- locale: improve typography with ellipsis (#5052) (391f9f5)
- Pagination: make ellipsis non-interactive (#5081) (62f64cc)
- Table: empty cell value causing hydration errors (#5069) (44a38ea)
- unplugin: handle components resolution with subpath (31db8d9)
- useKbd: update escape key from
- vue: align
- @ theoriginalstove made their first contribution in #5053
- @ drevantonder made their first contribution in #5063
- @ paulbarre made their first contribution in #5072
- @ swarakaka made their first contribution in #5079
- @ devzom made their first contribution in #5085
- @ kendalled made their first contribution in #5122
-
4.0.0 - 2025-09-23
- 100+ components: Complete access to all components, including those previously exclusive to Pro
- Figma Kit: Professional design resources now available to everyone
- Single package: Everything unified under
- Starter: A minimal template to get started with Nuxt UI
- Landing: A modern landing page template powered by Nuxt Content
- Docs: A documentation template powered by Nuxt Content
- SaaS: A SaaS template with landing, pricing, docs and blog powered by Nuxt Content
- Dashboard: A dashboard template with multi-column layout for building sophisticated admin interfaces
- Chat: An AI chatbot template to build your own chatbot powered by Nuxt MDC and Vercel AI SDK
- Portfolio: A sleek portfolio template to showcase your work, skills and blog powered by Nuxt Content
- Changelog: A changelog template to display your repository releases notes from GitHub powered by Nuxt MDC
- Unified location: All documentation now lives under
- Dedicated sections: Theme and Typography now have their own organized sections
- AI-ready features: LLMs.txt endpoints and MCP Server integration for AI tools like Cursor, Windsurf, and GitHub Copilot
- Update to
- Replace
- Update module registration from
- Change configuration key from
- Update CSS imports from
- Update any import statements to reference
-
4.0.0-beta.0 - 2025-09-22
- ChatMessages: wrap indicator with slot (#5036) (c00bf30)
- CheckboxGroup: proxy generic to emits (ffa5b23)
- Form: improve nested form validation handling (#5024) (77a554e)
- Form: remove
- InputMenu: ensure to pass a string to items when multiple (9beccbb), closes #5018
- InputTags: add blur and focus event handlers on input (#5007) (3fd2614)
- locale: improve translations in
- module: only inject tailwindcss vite plugin once (#5008) (c2e39dd)
- ProseImg: add
- Tabs: use nullish coalescing on item value (340fc48), closes #4804
- Tree: remove
- types: allow arbitrary keys in tv config (#4992) (ae77b69)
- @ jd-solanki made their first contribution in #4872
- @ JoniDS made their first contribution in #5003
-
4.0.0-alpha.2 - 2025-09-17
- Theme: rewritten and split into three sections - Design system, CSS variables and Component theming (#4939)
- Typography: moved to own section with headers, text formatting, lists, tables, images, embeds, and code blocks (#4742)
- MCP server: Model Context Protocol integration with tools, prompts and resources for AI assistants (#4878)
- Form: don't mutate the form's state if transformations are enabled (#4902)
- ContentNavigation: handle collapsible false with type multiple (c42c2ab)
- Banner: ensure
- CodeTree/Tree: improve accessibility (#4945) (117b4b3)
- components: dot notation type support for
- components: proxySlots reactivity (#4969) (3173bee)
- components: standardize naming for type interfaces (#4990) (788d2de)
- FileUpload: add missing
- Form: don't mutate the form's state if transformations are enabled (#4902) (99dbe81)
- Form: handling race condition on
- InputMenu/Select/SelectMenu: show falsy value when model value is falsy (#4882) (073dd14)
- locale: improve
- Marquee: handle RTL mode (#4887) (1846079)
- Progress: improve
- types: export missing tv types (#4971) (2bf273c)
- types: resolve ambient declaration error in
- module: do not block setup by importing plugin (#4923) (695d9f7)
- locale: add Georgian language (#4973) (996478f)
- locale: add Swiss German language (#4962) (dcf17bb)
- @ reinacchi made their first contribution in #4890
- @ USLTD made their first contribution in #4973
- @ vitpetricak made their first contribution in #4991
-
4.0.0-alpha.1 - 2025-09-01
- components: rename
- module: update compatibility to nuxt 4
- Icon: allow passing a component instead of a name (#4766) (61b603f)
- AuthForm: use
- BlogPost: ensure date slot renders (#4743) (4514880)
- ChangelogVersion/ChangelogVersions: handle RTL mode (#4777) (f91c408)
- ContentSearch/DashboardSearch: make
- module: add
- PageCard: improve keyboard accessibility (#4733) (3029568)
- ProseImg: ensure unique motion layout id for images (#4720) (9480a0b)
- unplugin: handle components overrides in subdirectories (#4781) (69ee75e)
- @ cco3 made their first contribution in #4808
- @ fabianmerino made their first contribution in #4826
-
4.0.0-alpha.0 - 2025-08-15
-
3.3.7 - 2025-10-23
-
3.3.6 - 2025-10-03
-
3.3.5 - 2025-09-23
- InputMenu: ensure to pass a string to items when multiple (0031a75), closes #5018
- InputTags: add blur and focus event handlers on input (#5007) (5db2708)
- Progress: improve
- Tabs: use nullish coalescing on item value (a4ab796), closes #4804
- types: allow arbitrary keys in tv config (#4992) (8d859ea)
- types: resolve ambient declaration error in
- @ ronannnn made their first contribution in #4795
-
3.3.4 - 2025-09-15
- FileUpload: add missing
- Form: handling race condition on
- InputMenu/Select/SelectMenu: show falsy value when model value is falsy (#4882) (5b9d9d8)
- locale: improve
-
3.3.3 - 2025-09-01
- useFormField: export form errors injection key (#4808) (ec2bc0a)
- components: broken types for
- Form: default slot types (#4758) (a32cc37)
- Form: update
- InputMenu/Select/SelectMenu: show placeholder when model value is falsy (#4825) (90b5daf)
- InputMenu: prevent
- Link: ensure target
- Table: ensure
- @ cco3 made their first contribution in #4808
- @ fabianmerino made their first contribution in #4826
-
3.3.2 - 2025-08-14
-
3.3.1 - 2025-08-14
-
3.3.0 - 2025-07-24
-
3.2.0 - 2025-06-25
-
3.1.3 - 2025-05-26
-
3.1.2 - 2025-05-15
-
3.1.1 - 2025-05-02
-
3.1.0 - 2025-04-24
-
3.0.2 - 2025-03-28
-
3.0.1 - 2025-03-21
-
3.0.0 - 2025-03-12
-
3.0.0-beta.4 - 2025-03-12
-
3.0.0-beta.3 - 2025-03-07
-
3.0.0-beta.2 - 2025-02-28
-
3.0.0-beta.1 - 2025-02-28
-
3.0.0-alpha.13 - 2025-02-17
-
3.0.0-alpha.12 - 2025-01-27
-
3.0.0-alpha.11 - 2025-01-13
-
3.0.0-alpha.10 - 2024-12-09
-
3.0.0-alpha.9 - 2024-11-19
-
3.0.0-alpha.8 - 2024-11-07
-
3.0.0-alpha.7 - 2024-10-23
-
3.0.0-alpha.6 - 2024-10-09
-
3.0.0-alpha.5 - 2024-10-02
-
3.0.0-alpha.4 - 2024-10-01
-
3.0.0-alpha.3 - 2024-09-18
-
3.0.0-alpha.2 - 2024-09-18
-
3.0.0-alpha.1 - 2024-09-11
-
3.0.0-alpha.0 - 2024-09-05
-
2.22.3 - 2025-09-01
-
2.22.2 - 2025-09-01
- Meter: correct vertical alignment of progress bar (#4735) (875be4b)
- SelectMenu/InputMenu: ensure object compare with
- @ DanielPagani made their first contribution in #4735
-
2.22.1 - 2025-07-16
-
2.22.0 - 2025-04-22
-
2.21.1 - 2025-03-08
-
2.21.0 - 2025-01-14
-
2.20.0 - 2024-12-09
-
2.19.2 - 2024-11-05
-
2.19.1 - 2024-11-05
-
2.19.0 - 2024-11-05
-
2.18.7 - 2024-10-09
-
2.18.6 - 2024-09-23
-
2.18.5 - 2024-09-18
-
2.18.4 - 2024-08-05
-
2.18.3 - 2024-07-30
-
2.18.2 - 2024-07-25
-
2.18.1 - 2024-07-25
-
2.18.0 - 2024-07-25
-
2.17.0 - 2024-06-13
from @nuxt/ui GitHub release notes🐛 Bug Fixes
imgrole (066b8a1), closes #5044parts(ff67fa3)data-orientationfor consistency (a9fe7c6)default-open(22ee075), closes #5112ckbtranslations (#5079) (3ee3a5e)⎋toEsc(#5076) (64d1589)useCookiestub with nuxt's default value handling (#5089) (f531807)👋 New Contributors
Full Changelog: v4.0.0...v4.0.1
We are excited to announce Nuxt UI v4, a major milestone that unifies Nuxt UI and Nuxt UI Pro into a single, fully open-source library. Following NuxtLabs joining Vercel in July, we're now able to offer 100+ production-ready components and a complete Figma Kit available for free to everyone.
Read the blog post announcement: https://nuxt.com/blog/nuxt-ui-v4
Get started with Nuxt UI v4 →
✨ Highlights
🌐 Unified and Open Source
Nuxt UI v4 marks a significant milestone by merging Nuxt UI and Nuxt UI Pro into one cohesive, fully open-source library:
@ nuxt/ui🖥️ Templates
All our previously exclusive templates for Nuxt and Vue are now available to everyone and updated to Nuxt UI v4:
📚 Documentation
We've made extensive improvements to the documentation in v4 to provide a better developer experience:
/docs/with automatic redirects from legacy paths🌱 Migration from v3
The migration from v3 to v4 is designed to be smoother than previous major version transitions.
We recommend reading the migration guide for step-by-step instructions.
For Nuxt UI users
@ nuxt/ui@latestFor Nuxt UI Pro users
@ nuxt/ui-prowith@ nuxt/uiin your dependencies@ nuxt/ui-proto@ nuxt/uiin your Nuxt configuiProtouiin your app config@ nuxt/ui-proto@ nuxt/ui@ nuxt/ui🙏 Acknowledgements
We want to extend a special thanks to everyone who supported Nuxt UI Pro. Your early adoption and feedback were instrumental in shaping Nuxt UI. You helped us fund, maintain, and improve the project, allowing us to reach this milestone where we can now offer these powerful tools to the entire community.
A huge thanks to the dedicated team behind Nuxt UI and our incredible community of 250+ contributors. Your hard work, creativity, and passion have been the driving force behind this project's success.
Thank you for being part of this journey 💚
🐛 Bug Fixes
joiandyupin favor of @ standard-schema/spec (#5035) (723cf36)ptlocale (#5003) (725ef9b)w-fullby default (#4997) (de47add)value-keyin favor ofget-key(#4999) (240ff42)New Contributors
Full Changelog: v4.0.0-alpha.2...v4.0.0-beta.0
This
4.0.0-alpha.2release focused mostly on stability and documentation.📚 Documentation
We've made significant improvements to the documentation in this release.
🚨 Breaking Changes
🚀 Features
🐛 Bug Fixes
actionsslot renders (#4946) (5d6e1fc)labelKeyandvalueKey(#4933) (11a0320)buttontype (f33e43c), closes #4935clearfunction (#4843) (2269b48)idname (#4890) (1b5d741)status-positionwhen 0 (#4994) (0e1e44c)iconstype (#4991) (6ddf899)🔥 Performances
🌐 Locales
👋 New Contributors
Full Changelog: v4.0.0-alpha.1...v4.0.0-alpha.2
📚 Documentation
You can check out the new docs for v4 on https://ui4.nuxt.com while in alpha.
🚨 Breaking Changes
nullifymodifier tonullableand addoptional(#4838)🚀 Features
🐛 Bug Fixes
errorfrom form field (#4738) (00dfb6b)ui.modalwork (946c2ec)@ sourceon components (a16465f), closes #4773New Contributors
Full Changelog: v4.0.0-alpha.0...v4.0.0-alpha.1
🐛 Bug Fixes
status-positionwhen 0 (#4994) (e0891ea)iconstype (#4991) (526cb81)New Contributors
Full Changelog: v3.3.4...v3.3.5
🐛 Bug Fixes
buttontype (91f86d9), closes #4935clearfunction (#4843) (0a8ead7)idname (#4890) (e5cb55b)Full Changelog: v3.3.3...v3.3.4
🚀 Features
🐛 Bug Fixes
update:model-valueevent (#4853) (7133f50)Forminterface to accept RegExp (#4821) (0c2d390)focus-outsideevent on content (77b6b9a)_blankis flagged as external for Inertia (#4746) (520b277)colspancalc forloadingandemptystates (#4826) (bdcc8c4)New Contributors
Full Changelog: v3.3.2...v3.3.3
Release 2.22.3
🐛 Bug Fixes
byprop (#4791) (44382cd)New Contributors
Full Changelog: v2.22.1...v2.22.2
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
[//]: # 'snyk:metadata:{"breakingChangeRiskLevel":null,"FF_showPullRequestBreakingChanges":null,"FF_showPullRequestBreakingChangesWebSearch":null,"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@nuxt/ui","from":"2.17.0","to":"4.0.1"}],"env":"prod","hasFixes":true,"isBreakingChange":true,"isMajorUpgrade":true,"issuesToFix":["SNYK-JS-VITE-9653016","SNYK-JS-CROSSSPAWN-8303230","SNYK-JS-NUXT-9486043","SNYK-JS-VITE-9685035","SNYK-JS-VITE-9919777","SNYK-JS-BABELHELPERS-9397697","SNYK-JS-INFLIGHT-6095116","SNYK-JS-KOA-10944994","SNYK-JS-KOA-12143256","SNYK-JS-NUXTVITEBUILDER-8663232","SNYK-JS-PATHTOREGEXP-7925106","SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-DEVALUE-12205530","SNYK-JS-KOA-8720152","SNYK-JS-UNDICI-8641354","SNYK-JS-VITE-9512410","SNYK-JS-MICROMATCH-6838728","SNYK-JS-NANOID-8492085","SNYK-JS-NANOID-8492085","SNYK-JS-PARSEGITCONFIG-9403763","SNYK-JS-ROLLUP-8073097","SNYK-JS-VITE-8023174","SNYK-JS-VITE-8648411","SNYK-JS-VITE-9576207","SNYK-JS-KOA-9679272","SNYK-JS-NUXT-12878602","SNYK-JS-SEND-7926862","SNYK-JS-SERVESTATIC-7926865","SNYK-JS-SIRV-12558119","SNYK-JS-UNDICI-10176064","SNYK-JS-VITE-12558116","SNYK-JS-VITE-8022916"],"prId":"274a3653-b285-4e3d-bf12-1e218e1681e1","prPublicId":"274a3653-b285-4e3d-bf12-1e218e1681e1","packageManager":"npm","priorityScoreList":[155,169,165,129,129,140,131,52,69,118,63,57,284,138,185,340,45,44,67,100,108,142,179,134,68,69,69,52,57,51,127],"projectPublicId":"8b4160ff-3510-4d06-a27b-7930a5e75719","projectUrl":"https://app.snyk.io/org/nerds-github/project/8b4160ff-3510-4d06-a27b-7930a5e75719?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-VITE-9653016","SNYK-JS-CROSSSPAWN-8303230","SNYK-JS-NUXT-9486043","SNYK-JS-VITE-9685035","SNYK-JS-VITE-9919777","SNYK-JS-BABELHELPERS-9397697","SNYK-JS-INFLIGHT-6095116","SNYK-JS-KOA-10944994","SNYK-JS-KOA-12143256","SNYK-JS-NUXTVITEBUILDER-8663232","SNYK-JS-PATHTOREGEXP-7925106","SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-DEVALUE-12205530","SNYK-JS-KOA-8720152","SNYK-JS-UNDICI-8641354","SNYK-JS-VITE-9512410","SNYK-JS-MICROMATCH-6838728","SNYK-JS-NANOID-849...