chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@nuxt/content (source)	^3.10.0 → ^3.11.0			dependencies	minor
better-sqlite3	^12.6.0 → ^12.6.2			dependencies	patch
node	24.12.0-alpine → 24.13.0-alpine			final	minor
node	24.12.0-alpine → 24.13.0-alpine			stage	minor
nuxt-studio	1.0.0 → 1.1.0			dependencies	minor
ufo	^1.6.2 → ^1.6.3			dependencies	patch

---

Release Notes

nuxt/content (@​nuxt/content)

v3.11.0

Compare Source

Features

• api: use request fetch (#​3677) (2b32a4d)
• auto generate markdown version of documents (#​3688) (340fdf4)
• cast date field from datetime to date string format (#​3673) (f1a2ca4)
• collection: allow hidden property in editor without redefine validation (#​3661) (24af55a)
• nuxt-llms: rewriteLLMSTxt option to disable rewriting paths in llms.txt (38e57ec)

Bug Fixes

• add mdc.components.map to renderer aliases (7eebe27), closes #​3681
• nuxthub: handle nuxthub version correctly (#​3680) (695bd2e)
• nuxthub: register sql_dump route even if the database is disabled (#​3668) (bb78812)

Performance Improvements

• wrap SQL queries in transaction (#​3670) (030dc27)

Reverts

• Revert "chore: upgrade deps" (c4a3228)
• Revert "chore: upgrade deps" (841b360)

WiseLibs/better-sqlite3 (better-sqlite3)

v12.6.2

Compare Source

What's Changed

• fix build: update node-abi version in package.json to ^4.25.0 by @​mceachen in #​1439

Full Changelog: WiseLibs/better-sqlite3@v12.6.1...v12.6.2

nodejs/node (node)

v24.13.0: 2026-01-13, Version 24.13.0 'Krypton' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

• (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
  lib,permission:
• (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
  src:
• (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
  src,lib:
• (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
  tls:
• (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

Commits

• [2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #​60997
• [3e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #​61283
• [4ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• [89adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
• [7302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
• [ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
• [20075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
• [20591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

nuxt-content/studio (nuxt-studio)

v1.1.0

Compare Source

Features

• ** editor:** add textarea input in form editor (#​264) (d20a7c4)
• auth: add login and logout server runtime hooks (#​263) (3b98f54)
• editor: support datetime input + fix date input (#​234) (67f659c)
• form: detect potential media/icon selection + improve object inputs (#​255) (de38ed8)
• frontmatter: remove hidden fields before passing document to studio editor (#​254) (b0f0827)
• i18n: add Kurdish (ckb) locale (#​270) (ac15b8c)
• i18n: add Vietnamese (vi) locale (#​256) (399e465)
• meta: add component filtering in editor (#​260) (185ab76)
• tiptap: add insertion actions to drag actions (#​246) (c33a2dd)

Bug Fixes

• app: reduce z-index to let other modal show over it (#​238) (a740855)
• collection: handle collection prefix (#​242) (d09d54e)
• document: respect contentHeading option (#​215) (ca79f02)
• form: arrays edition (#​257) (e10ed37)
• itemCardForm: slugify file path (#​228) (830fc03)
• tiptapToMdc: unwrap paragraphs inside slot (#​247) (a7a0d92)

unjs/ufo (ufo)

v1.6.3

Compare Source

compare changes

🩹 Fixes

• withBase, withoutBase: Prevent false prefix matches (#​313)

🏡 Chore

• Update deps (04b73bd)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Florian Heuberger (@​Flo0806)

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
canvas	Ready	Preview, Comment	Jan 18, 2026 2:05am