build(deps): bump the nuxt group with 2 updates

[dependabot]

Bumps the nuxt group with 2 updates: @nuxt/image and nuxt.

Updates @nuxt/image from 2.0.0 to 2.1.0

Release notes

Sourced from @​nuxt/image's releases.

v2.1.0

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

• Smaller bundles: IPX is now ESM-only with reduced dependency size
• Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
• New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
• Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
• Custom URL parsing: IPX now supports custom URL formats via the parseURL option

🌐 New Providers

This release adds support for eight new image optimization services:

• Builder.io - Builder.io's Image API (#2050)
• Cloudflare Images - Cloudflare's dedicated image service (#2100)
• EdgeOne Pages - Tencent EdgeOne Pages (#2173)
• Flyimg - Self-hosted image resizing (#2125)
• imgproxy - Fast, secure image processing server (#2117)
• Lorem Picsum - Placeholder images for development (#2106)
• Supabase - Supabase Storage image transformations (#2027)
• Umbraco - Umbraco CMS image cropper (#2165)

🔧 Provider Improvements

• Directus: Added support for sharp transforms and a key modifier for named presets (#2207)
• Sanity: Support for absolute URLs with automatic project/dataset extraction (#2274), and a configurable baseURL for custom CDN setups (#2273)
• AWS Amplify & Vercel: minimumCacheTTL is now configurable (#2278)

📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements

... (truncated)

Commits

• 05758b6 v2.1.0
• 97d3758 chore: run module prepare in prepack
• e529f37 ci: add workflow to comment on issues resolved in the latest release
• 64b96c1 feat(deps): migrate to ipx v4 (#2094)
• 100bed3 chore(deps): update nuxt framework to ^4.5.1 (#2282)
• a670c04 chore(deps): update all non-major dependencies (#2267)
• d875d84 chore(deps): update dependency @​noble/hashes to v2 (#2290)
• a1500e6 ci: improve workflows (#2288)
• 6f59ab1 docs(sanity): document baseURL option
• 137ee63 fix(flyimg): encode all # characters in color values
• Additional commits viewable in compare view

Updates nuxt from 4.4.8 to 4.6.1

Release notes

Sourced from nuxt's releases.

v4.6.1

v4.6.1 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

• nitro: build the portable event's web view on first access (cffb182d6)

🩹 Fixes

• vite: match vite 8.1+ optimizer messages for deps hint (#36525)
• nuxt: accept any baseURL when fetch response type is named (#36523)
• nitro: resolve nitropack/types declarations under nodenext (242e1971e)
• nuxt: allow false in setPageLayout types (#36506)
• nuxt: align Serialize object types with JSON (#36503)
• vite: don't abort dep scan on virtual imports in installed packages (#36477)
• nuxt: update publishConfig config export extension (64fa191cb)
• kit: install the package a missing subpath belongs to (#36507)
• vite-server: use the configured outDir as the public directory for non-ssr environment (#36501)
• kit,nitro: match dev handler paths on both nitro majors (#36515)
• nuxt: preserve onServerPrefetch for useId hydration (#36430)
• vite-server: include the request in dev error reports (#36489)
• nitro: register each dev server handler once (#36493)
• nitro: pass RequestEvent to nuxt dev server handlers (e6beceea2)
• nuxt: type the global $fetch with nuxt's TypedFetch (#36492)
• vite-server: work with deploy target plugins in dev (#36491)
• schema: ignore .wrangler directory (#36487)
• vite-server: pass the path to the error page render (#36488)
• nuxt,vite: disable dev error broadcast if BroadcastChannel throws (#36480)
• kit: align semantic version regexp with nightly version format (#36479)
• nuxt: export types reachable from async data composables (#36478)
• vite: detect enclosing string delimiter in inline style urls (#36476)
• schema: type the nuxt dev server handler variant (452052793)
• nitro: inline nuxt runtime when resolved to windows paths (21657c6fc)
• nitro: resolve unhead from nuxt in server bundle (dc1e2d6e6)

💅 Refactors

• kit: use package-manager-detector workspace + deno handling (1563a6d25)

📖 Documentation

• document dev server handlers and nuxt/server scope (7c36a1352)
• fix nightly examples (#36486)

🏡 Chore

... (truncated)

Commits

• a5c7fa3 v4.6.1 (#36466)
• 3fd3b19 chore(deps): upgrade all non-major dependencies (#36527)
• 681ae58 fix(nuxt): accept any baseURL when fetch response type is named (#36523)
• e93e210 fix(nuxt): allow false in setPageLayout types (#36506)
• c552e04 fix(nuxt): align Serialize object types with JSON (#36503)
• 6bd3ee3 fix(vite): don't abort dep scan on virtual imports in installed packages (#36...
• 64fa191 fix(nuxt): update publishConfig config export extension
• 8f9ee06 fix(nuxt): preserve onServerPrefetch for useId hydration (#36430)
• eec3725 fix(nuxt): type the global $fetch with nuxt's TypedFetch (#36492)
• 890e1c0 fix(nuxt,vite): disable dev error broadcast if BroadcastChannel throws (#36...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.