Skip to content

dependabot: bump vue-router from 4.6.4 to 5.0.2#2

Open
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/vue-router-5.0.2
Open

dependabot: bump vue-router from 4.6.4 to 5.0.2#2
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/vue-router-5.0.2

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps vue-router from 4.6.4 to 5.0.2.

Release notes

Sourced from vue-router's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vue Router 5 is a boring release, it merges unplugin-vue-router into the core package with no breaking changes. The only exception is that the iife build no longer includes @vue/devtools-api because it has been upgraded to v8 and does not expose an IIFE build itself. You can track that change in this issue. See the migration guide for instructions on how to upgrade from unplugin-vue-router to Vue Router 5.

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0-beta.2

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 758f70f release: vue-router@5.0.2
  • 90e4bb8 fix: loose version check vue-router
  • 085bbdc test: add missing STRIP_DEVTOOLS and FEATURE_PROD_DEVTOOLS to Vite co...
  • b322635 test: define globals
  • 022758a fix(volar): empty options
  • 0392906 docs: note about devtools
  • 7c0d8b4 docs: update version
  • 58c033c fix: remove devtools from iife build
  • 0a6c674 refactor: cleanup dead code
  • 4e8a073 release: vue-router@5.0.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 2, 2026
@greptile-apps
Copy link

greptile-apps bot commented Feb 2, 2026

Greptile Overview

Greptile Summary

Upgraded vue-router from v4.6.4 to v5.0.2, a major version release that merges unplugin-vue-router into the core package. According to the release notes, this is intentionally a "boring" release with no breaking changes for standard use cases, though the IIFE build no longer includes @vue/devtools-api.

Key Changes:

  • Major version bump (v4 → v5) with new experimental features (data loaders, query params handling)
  • Volar plugin support added for better TypeScript integration
  • DevTools API upgraded to v8
  • Bug fixes for keep-alive navigation guards and param parsers

Compatibility Assessment:

  • Project uses Nuxt 4.2.2 with Vue 3.5.25, which should be compatible with vue-router v5
  • Router usage is abstracted through Nuxt's built-in routing (file-based routes)
  • Navigation uses nuxt-link components (lowercase), not direct RouterLink imports
  • No direct useRouter() or router API usage detected in the codebase

Recommendations:

  • Check that all routing functionality works correctly after upgrade, including navigation between pages (/docs, /blog, /roadmap)
  • Verify that dynamic routes (e.g., /blog/[slug]) still function properly
  • Check that the build process completes successfully
  • Run the full test suite if available to catch any compatibility issues

Confidence Score: 4/5

  • This PR is generally safe to merge with low risk, requiring only basic verification testing
  • Score reflects that while this is a major version bump, Vue Router v5 is documented as having no breaking changes for standard usage. The project uses Nuxt's routing abstractions rather than direct router APIs, which provides additional insulation from potential breaking changes. The main risk is the IIFE build change, but this project doesn't appear to use that build format
  • No files require special attention beyond standard verification testing

Important Files Changed

Filename Overview
package.json Updated vue-router from 4.6.4 to 5.0.2, a major version bump with potential breaking changes
pnpm-lock.yaml Lock file updated to reflect vue-router v5.0.2 and its dependencies

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant Dep as Dependabot
    participant PM as Package Manager
    participant App as Nuxt App
    participant VR as Vue Router

    Dep->>PM: Detect vue-router 4.6.4 → 5.0.2 update
    Dep->>PM: Update package.json dependency
    PM->>PM: Resolve dependencies in pnpm-lock.yaml
    PM->>VR: Install vue-router@5.0.2
    Note over VR: Major version bump (v4 → v5)
    Note over VR: Includes unplugin-vue-router merge
    Note over VR: Experimental data loaders added
    App->>VR: Use router via Nuxt abstractions
    Note over App,VR: nuxt-link components (lowercase usage)
    Dev->>App: Verify routing functionality
    Dev->>App: Check for breaking changes
    Note over Dev: Test navigation, links, guards
Loading

Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vue-router-5.0.2 branch from ef8bc36 to 73e0ea4 Compare February 13, 2026 08:47
notxorand and others added 2 commits February 22, 2026 03:51
Bumps [vue-router](https://github.com/vuejs/router) from 4.6.4 to 5.0.2.
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v4.6.4...v5.0.2)

---
updated-dependencies:
- dependency-name: vue-router
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vue-router-5.0.2 branch from 73e0ea4 to e3729d5 Compare February 22, 2026 02:55
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 1, 2026

A newer version of vue-router exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant