Bump devalue and nuxt in /nuxt-supabase-auth

[dependabot]

Bumps devalue to 6.0.2 and updates ancestor dependency nuxt. These dependencies need to be updated together.

Updates devalue from 2.0.1 to 6.0.2

Release notes

Sourced from devalue's releases.

v6.0.2

Patch Changes

• 12ad9d6: chore: remove dts-buddy

v6.0.1

Patch Changes

• c13cf6a: fix: populate error.path for values reached through a promise in stringifyAsync
• 6156b2e: perf: stringify and uneval skip per-character escaping for strings with nothing to escape
• e7a9a73: fix: throw Invalid input instead of a raw TypeError for malformed typed array and boxed primitive payloads
• 6156b2e: perf: only format path when an error is raised
• 6156b2e: perf: cache quoted property names
• 9e44253: Fix uneval for typed array views whose backing buffer ends with a partial element

v6.0.0

Major Changes

• afb3cb4: breaking: use tagged template js for uneval replacers instead of nested uneval
• 3100507: breaking: require Node 22.17 or newer

Minor Changes

• afb3cb4: feat: support cyclic custom objects

Patch Changes

• ac295fb: fix: escape unpaired surrogates so uneval/stringify output survives UTF-8 transport

v5.9.4

Patch Changes

• 067b125: perf: annotate module-level Object.freeze calls as pure so unused operation tables tree-shake

v5.9.3

Patch Changes

• 6861dbb: fix: avoid scanning sparse array holes in uneval traversal and shared-array population
• 9ec5130: fix: reject non-string null-prototype object keys in parse and unflatten to prevent bypassing the __proto__ check
• dae8153: fix: prevent unhandled internal rejections in stringifyAsync when serializing multiple promises
• 84f6f67: fix: prevent quadratic uneval output expansion for repeated strings and bigints
• 6861dbb: fix: avoid eager allocation when evaluating sparse arrays emitted by uneval
• 8f8d78e: fix: validate revived backing buffers before constructing typed arrays
• 46dc877: fix: serialize only the visible bytes of Node Buffers in stringify, stringifyAsync and uneval, preventing disclosure of unrelated data from their shared allocation pool

v5.9.2

Patch Changes

• 8b2a456: fix: reject out-of-bounds indices

... (truncated)

Changelog

Sourced from devalue's changelog.

6.0.2

Patch Changes

• 12ad9d6: chore: remove dts-buddy

6.0.1

Patch Changes

• c13cf6a: fix: populate error.path for values reached through a promise in stringifyAsync
• 6156b2e: perf: stringify and uneval skip per-character escaping for strings with nothing to escape
• e7a9a73: fix: throw Invalid input instead of a raw TypeError for malformed typed array and boxed primitive payloads
• 6156b2e: perf: only format path when an error is raised
• 6156b2e: perf: cache quoted property names
• 9e44253: Fix uneval for typed array views whose backing buffer ends with a partial element

6.0.0

Major Changes

• afb3cb4: breaking: use tagged template js for uneval replacers instead of nested uneval
• 3100507: breaking: require Node 22.17 or newer

Minor Changes

• afb3cb4: feat: support cyclic custom objects

Patch Changes

• ac295fb: fix: escape unpaired surrogates so uneval/stringify output survives UTF-8 transport

5.9.4

Patch Changes

• 067b125: perf: annotate module-level Object.freeze calls as pure so unused operation tables tree-shake

5.9.3

Patch Changes

• 6861dbb: fix: avoid scanning sparse array holes in uneval traversal and shared-array population
• 9ec5130: fix: reject non-string null-prototype object keys in parse and unflatten to prevent bypassing the __proto__ check
• dae8153: fix: prevent unhandled internal rejections in stringifyAsync when serializing multiple promises
• 84f6f67: fix: prevent quadratic uneval output expansion for repeated strings and bigints
• 6861dbb: fix: avoid eager allocation when evaluating sparse arrays emitted by uneval
• 8f8d78e: fix: validate revived backing buffers before constructing typed arrays
• 46dc877: fix: serialize only the visible bytes of Node Buffers in stringify, stringifyAsync and uneval, preventing disclosure of unrelated data from their shared allocation pool

5.9.2

Patch Changes

• 8b2a456: fix: reject out-of-bounds indices

... (truncated)

Commits

• b36fdee Version Packages (#210)
• 12ad9d6 chore: remove dts-buddy (#209)
• d763272 Version Packages (#206)
• 24ecda3 chore: tidy up (#208)
• 6156b2e perf: cheaper stringify for plain data and strings (#190)
• 42fd8a2 perf: add stringify/uneval benchmarks (#207)
• c6b650d Make deserialization more explicit in usage example (#37)
• c13cf6a fix: populate error.path for values inside promises in stringifyAsync (#189)
• e7a9a73 fix(parse): validate indices before dereferencing malformed payloads (#191)
• 9e44253 fix: serialize typed arrays with partial backing elements (#204)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for devalue since your current version.

Updates nuxt from 2.15.8 to 4.6.0

Release notes

Sourced from nuxt's releases.

v4.6.0

v4.6.0 is the next minor release.

📣 Some news

🖥️ Nuxt CLI v4

Alongside the release of Nuxt v4.6, today also brings a new major release of the Nuxt CLI: @nuxt/cli v4. It ships as a dependency of nuxt, so you'll get it automatically when you upgrade.

Most of what's new is in nuxt dev:

• an interactive terminal UI, showing URLs, startup progress and keyboard shortcuts, with panels to dive into error logs, routes, network requests and more
• the dev server gives you more info, such as why it reloaded or restarted, which nuxt.config keys changed, where the time went during a slow start or build, and how long each module took to set up
• a CLI-level error channel rendered with my-bad (see below), powering things like automatically reloading when a syntax error in nuxt.config.ts is fixed
• a lock file in .nuxt/, which lets a second nuxt dev (say, one started by an agent) take over or defer to the one you started, and powers new nuxt curl and nuxt task commands that talk to the running server

There's also a new nuxt docs "<query>" search, and nuxt preview --takeover can replace a running preview server. And in general nuxt/cli is a lot smaller and starts a lot faster:

	v3.37	v4.0
@nuxt/cli install size	13.1 MB	3.5 MB	-73%
@nuxt/cli dependencies	70	31	-56%
nuxt dev: first paint	330 ms	50 ms	6.6x faster
nuxt dev: port bound	338 ms	104 ms	3.2x faster
nuxt dev: memory at rest (Linux)	630 MB	440 MB	-30%

Although this is a major version, none of the changes should be breaking for Nuxt v4 users: we require Node.js v22.21+, v24.11+ or v26+, we drop nuxt init and only support npm create nuxt@latest, and Nuxt 2 and @nuxt/bridge are no longer supported.

👉 Check out the full Nuxt CLI v4 release notes for everything that's changed.

💡 A server-agnostic Nuxt

The biggest thing about this release is our move towards making Nuxt server-agnostic.

I feel that freedom of choice is very much a fundamental value of the web, and one that unites the whole Nuxt team.

You can use pages/ (with vue-router) or not. You can use Vite, webpack or Rspack to bundle your code. You can pick from dozens of providers to deploy to, pick any image or font provider, choose any database adapter. In every case, the framework is the same.

The server side was different. #app composables imported h3 types, server code imported from h3 and nitropack, and every module that touched the server was tied to whichever major version of those packages Nuxt happened to depend on.

This has become particularly clear as we have been upgrading to new majors of h3 and nitro, which ship breaking changes with a cascading effect throughout the whole ecosystem.

👉 This release changes that.

Alongside explicitly defining our public API in nuxt/kit (which now does not refer to external packages), Nuxt now specifies our own types for the request event, route rules and typed $fetch, and we expose an import surface (nuxt/server) for the server utilities that will be needed by most apps.

This is the culmination of work we started almost a year ago, making it possible to use any server builder with Nuxt, not just Nitro (#33462).

... (truncated)

Commits

• 49da92f v4.6.0
• 052d82e chore(deps): update all non-major dependencies (4.x) (#36463)
• df46569 fix(nuxt): resolve anchor hrefs through the router (#36459)
• a66221f fix(nuxt): leave a newer async data entry alone when an old one is taken off ...
• f90115c fix(nuxt): await async layouts before navigation (#36454)
• b64d878 fix(nuxt,vite): show compile error overlay on client-only pages (#36444)
• 62ebbd9 fix(nuxt): keep CookieOptions compatible with cookie serialize options
• a2b9145 fix(kit,nuxt): preserve types when building into a relocated build dir (#36418)
• c4f1e97 feat(nuxt): add addon support to createUseFetch and createUseAsyncData (#...
• e003cd4 feat(nuxt,nitro,schema): add useServerHooks to nuxt/server
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nuxt since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.