This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| @nuxt/kit (source) | 3.21.8 -> 4.6.3 |
Release Notes
nuxt/nuxt (@nuxt/kit)
3.21.8 -> 4.6.3
v4.6.3
v4.6.3 is the next patch release.
👉 Changelog
🚨 Security fixes
- vite: do not read files named in client error reports (
63299e13c) - GHSA-x287-wcfc-q46c - vite: deny dev server access to nitro dev output (
c7e204ec6) - GHSA-648h-gw55-m2g7 - vite: deny serving generated app secret in dev (
16dfdc2a9) - GHSA-3xf4-9g3c-4h4w - nitro,nuxt: handle dot segments in request paths (
440250d97) - [GHSA-9v7c-q64q-vv33](https://github.com/nuxt/nuxt/security/advisories/GHSA-9v7c-q64q-vv3...
[View full release notes]
Released by github-actions[bot] on 10/27/2026
v4.6.2
v4.6.2 is the next patch release.
👉 Changelog
🩹 Fixes
- nitro: apply
useHeadSaferules to server island head (493565e99) - nitro-server: read router params from the path h3 matched (
010f6b43d) - nitro: match server route rules case-insensitively unless routing is sensitive (
f6cfee52c) - nuxt: resolve rooted paths through the URL parser (
#36617) - nuxt: resolve empty route types in shared context (
#36576) - nitro: preserve server tsconfig with relocated build dir (
#36494) - nuxt: fix scroll offset for IDs starting with numbers (
#36524) - kit: do not exclude module directories with a dot in their name from app tsconfig (
#36331) - nuxt: detect vapor slots with
rawVaporSlotKeyfrom vue (#36614) - **nuxt...
[View full release notes]
Released by github-actions[bot] on 10/16/2026
v4.6.1
v4.6.1 is the next patch release.
👉 Changelog
🔥 Performance
- nitro: build the portable event's web view on first access (
cffb182d6)
🩹 Fixes
- vite: match vite 8.1+ optimizer messages for deps hint (
#36525) - nuxt: accept any
baseURLwhen fetch response type is named (#36523) - nitro: resolve
nitropack/typesdeclarations under nodenext (242e1971e) - nuxt: allow
falseinsetPageLayouttypes (#36506) - nuxt: align
Serializeobject types with JSON (#36503) - vite: don't abort dep scan on virtual imports in installed packages (
#36477) - nuxt: update
publishConfigconfig export extension (64fa191cb) - kit: install the package a missing subpath belongs to (
#36507) - vite-server: use the...
[View full release notes]
Released by github-actions[bot] on 10/9/2026
📊 Package Statistics
- @nuxt/kit: 5,668,798 weekly downloads
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖
{"schemaVersion":1,"updates":[{"name":"@nuxt/kit","current":"3.21.8","target":"4.6.3","type":"major","file":"package.json","dependencyType":"dependencies"}],"group":"Major Update - @nuxt/kit","generatedAt":"2026-10-27T04:20:37.657Z"} -->