chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@types/bun (source)	1.1.18 -> 1.2.0					devDependencies	minor
@vueuse/core (source)	12.4.0 -> 12.5.0					dependencies	minor
@vueuse/nuxt (source)	12.4.0 -> 12.5.0					dependencies	minor
node	22.13.0-alpine -> 22.13.1-alpine					final	patch
node	22.13.0-alpine -> 22.13.1-alpine					stage	patch
nuxt-auth-utils	0.5.8 -> 0.5.9					dependencies	patch

---

Release Notes

vueuse/vueuse (@​vueuse/core)

v12.5.0

Compare Source

   🚀 Features

• More passive event handlers  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4484 (eddbf)
• Use useEventListener where it was not being used  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4479 (c6c6e)
• useClipboard: Should fall back to legacy clipboard when read/write fails  -  by @​OrbisK in https://github.com/vueuse/vueuse/issues/4512 (01acd)
• useCountdown: New function  -  by @​rtugeek, @​huang-julien, Anthony Fu and @​antfu in https://github.com/vueuse/vueuse/issues/4125 (69ced)
• useEventListener: Make all parameters arrayable and reactive  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4486 (caf08)
• useFetch: Add parameters to the afterFetch and onFetchError  -  by @​tolking and Anthony Fu in https://github.com/vueuse/vueuse/issues/4499 (98a83)
• useFileDialog: Add initialFiles option  -  by @​EvgenyWas in https://github.com/vueuse/vueuse/issues/4509 (8a8d6)

   🐞 Bug Fixes

• debounceFilter: Invoke on maxWait with the latest invoker  -  by @​43081j and @​OrbisK in https://github.com/vueuse/vueuse/issues/4497 (48e0a)
• useMagicKeys: Fix key order issue on first use  -  by @​babu-ch in https://github.com/vueuse/vueuse/issues/4505 (b6947)
• useVirtualList: Allow readonly arrays as input  -  by @​RebeccaStevens in https://github.com/vueuse/vueuse/issues/4504 (f3cc7)

    View changes on GitHub

nodejs/node (node)

v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
• CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
• CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

• CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Commits

• [520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#662
• [99f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555
• [984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650
• [2446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651

atinux/nuxt-auth-utils (nuxt-auth-utils)

v0.5.9

Compare Source

compare changes

🚀 Enhancements

• Add support for websocket handler (#​327)

❤️ Contributors

• Sébastien Chopin (@​atinux)

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
shelve	❌ Failed (Inspect)			Jan 23, 2025 3:20pm

[pkg-pr-new]

Open in Stackblitz

npm i https://pkg.pr.new/HugoRCD/shelve/@shelve/cli@441

commit: cc0fb0d