Bump braces, nuxt and webpack

[dependabot]

Bumps braces to 3.0.3 and updates ancestor dependencies braces, nuxt and webpack. These dependencies need to be updated together.

Updates braces from 3.0.2 to 3.0.3

Commits

• 74b2db2 3.0.3
• 88f1429 update eslint. lint, fix unit tests.
• 415d660 Snyk js braces 6838727 (#40)
• 190510f fix tests, skip 1 test in test/braces.expand
• 716eb9f readme bump
• a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
• 2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
• 9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
• 98414f9 remove funding file
• 665ab5d update keepEscaping doc (#27)
• Additional commits viewable in compare view

Updates nuxt from 2.17.2 to 3.14.159

Release notes

Sourced from nuxt's releases.

v3.14.159

3.14.159 is a hotfix release to address regressions in v3.14.

We're leaning into the π theme - future patch releases of this minor version will just continue adding digits. (Sorry for any inconvenience! 😆)

👉 Changelog

compare changes

🩹 Fixes

• nuxt: Update nitropack preset directory (#29780)
• kit: Fall back to meta version if there's no module.json (#29793)
• kit: Use mlly to resolve module paths to avoid cjs fallback (#29799)
• webpack,rspack: Add adapter for webpack-dev-middleware (#29806)
• nuxt: Remove null-byte prefix for virtual files (#29809)
• kit: Convert module path to file url before reading meta (fb833ac64)

📖 Documentation

• Capitalize titles (#29768)
• Fix rou3 link in nitro.js (#29775)
• Fix tip formatting (#29792)
• Add link to h3 blogpost (#29794)
• Remove outdated cloudflare tip (auto minify deprecated) (#29812)

🏡 Chore

• nuxt: Remove redundant type (#29810)

❤️ Contributors

• Daniel Roe (@​danielroe)
• xjccc (@​xjccc)
• Efraim (@​EfraimGENC)
• Aurion SARL (@​Aurion72)
• Erik Lilja (@​Lilja)
• Markus Oberlehner (@​maoberlehner)
• Lukas Bauer (@​luxterful)
• @​beer (@​iiio2)

v3.14.0

3.14.0 is the next minor release.

👀 Highlights

Behind the scenes, a lot has been going on in preparation for the release of Nuxt v4 (particularly on the unjs side with preparations for Nitro v3!)

⚡️ Faster starts powered by jiti

Loading the nuxt config file, as well as modules and other build-time code, is now powered by jiti v2. You can see more about the release in the jiti v2 release notes, but one of the most important pieces is native node esm import (where possible), which should mean a faster start. ✨

📂 Shared folder for code and types shared with client/server

You should never import Vue app code in your nitro code (or the other way around). But this has meant a friction point when it comes to sharing types or utilities that don't rely on the nitro/vue contexts.

For this, we have a new shared/ folder (#28682). You can't import Vue or nitro code into files in this folder, but it produces auto-imports you can consume throughout the rest of your app.

... (truncated)

Commits

• 6256890 v3.14.159
• 7936158 chore(nuxt): remove redundant type (#29810)
• 4b08844 fix(nuxt): remove null-byte prefix for virtual files (#29809)
• bbb52e3 chore(deps): update devdependency nitropack to v2.10.3 (3.x) (#29805)
• ea5481e fix(nuxt): update nitropack preset directory (#29780)
• 4242052 v3.14.0
• 89d73db chore(deps): update all non-major dependencies (3.x) (#29763)
• 738e2ee fix(nuxt): respect existing props value in definePageMeta (#29683)
• 0767742 chore: update nitropack to 2.10.2 (#29766)
• 59c28d5 feat(nuxt): add useRuntimeHook composable (#29741)
• Additional commits viewable in compare view

Updates webpack from 4.47.0 to 5.96.1

Release notes

Sourced from webpack's releases.

v5.96.1

Bug Fixes

• [Types] Add @types/eslint-scope to dependencieS
• [Types] Fixed regression in validate

v5.96.0

Bug Fixes

• Fixed Module Federation should track all referenced chunks
• Handle Data URI without base64 word
• HotUpdateChunk have correct runtime when modified with new runtime
• Order of chunks ids in generated chunk code
• No extra Javascript chunks when using asset module as an entrypoint
• Use optimistically logic for output.environment.dynamicImport to determine chunk format when no browserslist or target
• Collision with global variables for optimization.avoidEntryIife
• Avoid through variables in inlined module
• Allow chunk template strings in output.devtoolNamespace
• No extra runtime for get javascript/css chunk filename
• No extra runtime for prefetch and preload in JS runtime when it was unsed in CSS
• Avoid cache invalidation using ProgressPlugin
• Increase parallelism when using importModule on the execution stage
• Correctly parsing string in export and import
• Typescript types
• [CSS] css/auto considers a module depending on its filename as css (pure CSS) or css/local, before it was css/global and css/local
• [CSS] Always interpolate classes even if they are not involved in export
• [CSS] No extra runtime in Javascript runtime chunks for asset modules used in CSS
• [CSS] No extra runtime in Javascript runtime chunks for external asset modules used in CSS
• [CSS] No extra runtime for the node target
• [CSS] Fixed url()s and @import parsing
• [CSS] Fixed - emit a warning on broken :local and :global

New Features

• Export CSS and ESM runtime modules
• Single Runtime Chunk and Federation eager module hoisting
• [CSS] Support /* webpackIgnore: true */ for CSS files
• [CSS] Support src() support
• [CSS] CSS nesting in CSS modules

v5.95.0

Bug Fixes

• Fixed hanging when attempting to read a symlink-like file that it can't read
• Handle default for import context element dependency
• Merge duplicate chunks call after split chunks
• Generate correctly code for dynamically importing the same file twice and destructuring
• Use content hash as [base] and [name] for extracted DataURI's
• Distinguish module and import in module-import for externals import's

... (truncated)

Commits

• d4ced73 chore(release): 5.96.1
• 7d6dbea fix: types regression in validate
• 5c556e3 fix: types regression in validate
• 2420eae fix: add @types/eslint-scope to dependencies due types regression
• ec45d2d fix: add @types/eslint-scope to dependencies
• aff0c3e chore(release): 5.96.0
• 6f11ec1 refactor: module source types code
• b07142f refactor: module source types code
• 7d98b3c fix: Module Federation should track all referenced chunks
• 6d09769 chore: linting
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.