[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nitropack	^2.13.4 → ^2.13.5
unstorage	^1.17.5 → ^1.17.6

---

Release Notes

nitrojs/nitro (nitropack)

v2.13.5

Compare Source

compare changes

Preset Changes

• aws-amplify: Support node.js 22 and 24 runtimes (#​4244)
• cloudflare: Prefer source path rather than #imports (#​4247)
• vercel: Add framework info to build output config (#​4475)
• vercel: Add support for node@​24 (v2) (#​4628)

✅ Tests

• Fix windows path handling in new tests (f6bcc4f4)
• Use memory cache storage in dev fixture to avoid flaky cache test (e98dced6)

🩹 Fixes

• types: Only strip extensions that ts retries (f3a57737)
• types: Emit auto-import paths as files, not directories (#​4334)
• Respect h3 url in swr handler (#​4386)
• Preserve sourcemap mappings for chunks containing user code (#​4450)
• build: Count each output file once in the size report (#​4569)
• vercel: Mark header-only route entries as continue (#​4651)
• cloudflare: Guard nodejs_compat flag by compatibility date (#​4663)
• cloudflare: Detect implicit nodejs_compat when deployConfig is false (#​4667)
• cloudflare: Warn only about conflicting asset overrides (#​4690)
• externals: Match string rules against windows ids (#​4732)
• externals: Normalize resolved paths on windows (#​4752)
• rollup: Keep import attributes in the build output (#​4519)
• dev: Close upgraded sockets and resolve on worker shutdown timeout (#​4671)
• openapi: Only filter undefined from array nodes (#​3895)
• dev: Proxy websocket upgrades for devProxy routes with ws (#​4788)
• vercel: Strip trailing slash from prerendered route overrides (#​4791)
• vercel: Use SameSite=Lax for skew protection cookie (#​4789)
• static: Respond with 404 when a public asset is missing on disk (#​4787)
• bun: Support NITRO_BUN_IDLE_TIMEOUT=0 (#​4190)
• vercel: Enable ISR passQuery when allowQuery is set (#​4790)
• prepare: Keep public assets inside output dir when cleaning (#​4798)
• task: Support dev worker listening on a unix socket or named pipe (#​4797)
• node, deno: Support PORT=0 for random port assignment (#​4796)
• bun: Use hostname option for Bun.serve (#​4795)
• prerender: Only refuse .. as a whole path segment (#​4794)
• cloudflare: Fix baseURL traversal for wrangler assets dir (#​4793)
• cloudflare: Use pathe for POSIX relative paths in wrangler.json (v2) (#​4801)

📖 Documentation

• Workaround for search-and-replace issues (#​3078)

📦 Build

• Resolve subpath types under nodenext (#​4757)

🌊 Types

• Widen RollupConfig.plugins to accept rolldown-typed plugins (#​4484)
• Add missing wrangler observability types (#​4742)

🔥 Performance

• dev: Cache sourcemap consumer per bundle in error handler (#​4786)

❤️ Contributors

• Liang Xu
• Pooya Parsa (@​pi0)
• Ilya Semenov (@​IlyaSemenov)
• Kricsleo (@​kricsleo)
• Nestor Vera
• Daniel Roe (@​danielroe)
• Leonid G. agantelin@gmail.com
• Rocky
• Paul
• Harlan Wilton
• Agustin18
• Rihan Arfan (@​RihanArfan)
• Jonas Thelemann
• Maxim Lepekha
• Adrien Foulon
• Abdul Rauf (@​armujahid)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.