v3.20.0

[github-actions]

3.20.0 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements

• runtime-utils: Automatic ref unwrapping for wrapper.vm (#1405)
• runtime: Allow registerEndpoint to work with native fetch (#1415)
• runtime: Add scoped option to cleanup components (#1389)

🩹 Fixes

• runtime-utils: Capture events emitted before the first render (#1353)
• runtime-utils: Add missing import (#1372)
• e2e: Detect nuxt config files in .config folder (#1381)
• e2e: Bump windows teardown timeout to 60s (9f1f712da)
• runtime: Allow registerEndpoint to work with $fetch.create (#1403)
• Handle optional chaining for imports in setupImportMocking function (#1433)
• vitest: Support virtualConsole.forwardTo in jsdom (6b4076a04)
• vitest: Call window.close on jsdom teardown (25b87eef3)
• vitest: Stub IntersectionObserver in teardown (230dd240a)

📖 Documentation

• Use jsdoc standard @default formatting (#1379)
• Fix typo in setup hook deprecation text (#1380)

🏡 Chore

• Switch to npm trusted publishing (3a1f194fb)
• deps-dev: Bump happy-dom from 19.0.2 to 20.0.0 (#1441)
• Relax upper peerDependency ranges (4676f4bf3)
• Add test script (3126fa243)

✅ Tests

• Add example tests for nuxt ui (#1396)

🤖 CI

• Do not fail matrix if one os fails (7d2969e29)
• Add read contents permission (782119685)
• Run release tasks on latest node version (fb2007b33)
• Add provenance action to check for downgrades in provenance (10288633c)

❤️ Contributors

• Daniel Roe (@danielroe)
• Mike Laumann Bellika (@MikeBellika)
• yamachi4416 (@yamachi4416)
• Vasily Kuzin (@ExEr7um)
• dependabot[bot] (@dependabot[bot])
• Toshiki Yoshioka (@ytoshiki)
• Jess (@JessicaSachs)
• Yizack Rangel (@Yizack)
• Ingo Renner (@irnnr)
• Tomina (@Thomaash)

[ekawas-vrify]

What's the ETA on this? Will it also include the critical and high CVE updates for dependencies?

[danielroe]

We do not pin dependency versions - simply refresh your lockfile to pull in any bug fixes in dependencies.

[darrinmn9]

This library pins happy-dom peer dependency to v18 https://github.com/nuxt/test-utils/blob/v3.19.2/package.json#L133 so a simple npm install will install v18 with the critical vulnerability

[danielroe]

no, it is optional:

https://github.com/nuxt/test-utils/blob/v3.19.2/package.json#L157-L159