Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 24, 2025

Bumps @nuxtjs/mdc to 0.17.4 and updates ancestor dependency @nuxt/content. These dependencies need to be updated together.

Updates @nuxtjs/mdc from 0.8.3 to 0.17.4

Release notes

Sourced from @​nuxtjs/mdc's releases.

v0.17.4

  • chore: rename repository (d37dfc3)
  • chore(deps): update actions/setup-node action to v5 (#420) (28013c5)
  • chore: upgrade lock file (d92ff99)
  • chore: upgrade deps (ab386cb)
  • fix: merge highlight options with defu (#409) (babd9f1)
  • fix: use @shikijs/core instead of shiki/core for better tracing (#421) (1498b7f)
  • chore(deps): update nuxt framework to ^4.1.0 (#405) (79bb45d)
  • fix(docs): remark and rehype plugin syntax (#416) (bac973e)

v0.17.3

  • chore: upgrade deps (fa7a21d)
  • chore(deps): update actions/checkout action to v5 (#408) (3c911ea)
  • security: fix XSS vulnerabilities (#415) (3124323)
  • chore: upgrade deps (e65e97b)
  • Fix Nuxt V4 upgrade Fix (#411) (4575221)

v0.17.2

[!IMPORTANT] This patch release contains a fix for Security Advisory GHSA-cj6r-rrr9-fg82, Special thanks to @​Vozec for the report.

Changelog:

  • Merge commit from fork (3657a5b)
  • chore: update "debug" version (f555abf)
  • chore(deps): lock file maintenance (#386) (287a1d5)
  • test: binding component spacing (ec49505)
  • chore: upgrade parse5 (e22f0c0)

v0.17.1

  • chore: upgrade deps (22bbe93)
  • fix: also check for nuxt-nightly path (#401) (2a48b7b)
  • fix: detect mdcUnwrap on slots too (#388) (44fef67)

v0.17.0

🎉 Highlights

  • Introduce MDCCached component, an efficient makdown parser and renderer for streaming texts.

[!NOTE] Markdown stringifier adds spaces around inline components. This is due to #371 fix.

🚀 Enhancements

  • Introduce MDCCached component (#382)

🩹 Fixes

  • Vue server renderer does not render \r causes hydration issue (b722c4a)
  • Dynamic load parser in MDC component (#363)
  • parser: Simplify filename regex in parseThematicBlock function (#367)

... (truncated)

Changelog

Sourced from @​nuxtjs/mdc's changelog.

v0.17.4

compare changes

🩹 Fixes

  • docs: Remark and rehype plugin syntax (#416)
  • Use @shikijs/core instead of shiki/core for better tracing (#421)
  • Merge highlight options with defu (#409)

🏡 Chore

❤️ Contributors

v0.17.3

compare changes

🏡 Chore

❤️ Contributors

v0.17.2

compare changes

🏡 Chore

✅ Tests

  • Binding component spacing (ec49505)

❤️ Contributors

... (truncated)

Commits
  • ee88f6b chore(release): release v0.17.4
  • d37dfc3 chore: rename repository
  • 28013c5 chore(deps): update actions/setup-node action to v5 (#420)
  • d92ff99 chore: upgrade lock file
  • ab386cb chore: upgrade deps
  • babd9f1 fix: merge highlight options with defu (#409)
  • 1498b7f fix: use @shikijs/core instead of shiki/core for better tracing (#421)
  • 79bb45d chore(deps): update nuxt framework to ^4.1.0 (#405)
  • bac973e fix(docs): remark and rehype plugin syntax (#416)
  • 291c43e chore(release): release v0.17.3
  • Additional commits viewable in compare view

Updates @nuxt/content from 2.13.2 to 3.7.1

Changelog

Sourced from @​nuxt/content's changelog.

3.7.1 (2025-09-16)

Bug Fixes

  • remove zod and zod-to-json-schema from optional deps (#3541) (8e038f0)

3.7.0 (2025-09-12)

Features

  • adopt standard schema spec and support different validators (#3524) (46a1004)
  • inherit component prop types in content collection (#3451) (a620a2c)

Bug Fixes

  • ProseCode preview syntax highlighting (#3491) (4a725bd)
  • add dependency at Nuxt root dir (#3525) (71f2989)
  • block experimental sqlite warning on node (5ac31da)
  • deprecate nitro export in favor of server (ec97064)
  • do not register close hook if websocket is disabled (#3474) (9edcc8f)
  • ignore .DS_Store files in all subdirectories (c7a9af3)
  • ignore OSX meta file .DS_Store (fe5d7f9)
  • improve websocket and watcher cleanup handling (#3478) (8041807)
  • inherit: cache component meta (e9658de)
  • inherit: issue with property definition in arrays (873b768)
  • inherit: try resolve component from root directory (b0073f1)
  • inherit: type generation (63500f3)
  • normalize source cwd (#3532) (0a34742)
  • nuxthub: missing line separator in database migrations (#3464) (4983443)
  • use listhen's publicUrl if available (#3500) (fb0f022)

3.6.3 (2025-07-04)

Bug Fixes

3.6.2 (2025-07-02)

Features

  • schema: set navigation.icon of page as icon for preview (eff825d)

Bug Fixes

  • check sqlite connector only if database type is sqlite (#3425) (9166169)
  • dev: dont ignore subfolders (#3421) (78f461d)
  • docs: update query method to use first() for consistency (#3430) (5fed4ea)
  • fallback to api call if webassembly is not supported (#3399) (cf5ca24)

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@nuxtjs/mdc](https://github.com/nuxt-content/mdc) to 0.17.4 and updates ancestor dependency [@nuxt/content](https://github.com/nuxt/content). These dependencies need to be updated together.


Updates `@nuxtjs/mdc` from 0.8.3 to 0.17.4
- [Release notes](https://github.com/nuxt-content/mdc/releases)
- [Changelog](https://github.com/nuxt-content/mdc/blob/main/CHANGELOG.md)
- [Commits](nuxt-content/mdc@v0.8.3...v0.17.4)

Updates `@nuxt/content` from 2.13.2 to 3.7.1
- [Release notes](https://github.com/nuxt/content/releases)
- [Changelog](https://github.com/nuxt/content/blob/main/CHANGELOG.md)
- [Commits](nuxt/content@v2.13.2...v3.7.1)

---
updated-dependencies:
- dependency-name: "@nuxtjs/mdc"
  dependency-version: 0.17.4
  dependency-type: indirect
- dependency-name: "@nuxt/content"
  dependency-version: 3.7.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant