chore(deps): bump @nuxt/ui from 2.22.3 to 4.8.1

[dependabot]

Bumps @nuxt/ui from 2.22.3 to 4.8.1.

Release notes

Sourced from @​nuxt/ui's releases.

v4.8.1

🐛 Bug Fixes

• ContentSearch/DashboardSearch: proxy missing CommandPalette props (#6505) (631f5dc)
• Form: add method="post" to prevent credential leaking via GET before hydration (#6512) (7a0825a)
• Icon: avoid recursive icon resolution (#6495) (d50c121)
• locale: improve Thai translation accuracy and consistency (#6509) (5d82418)
• module: expose component theme keys in AppConfig type (#6520) (ffaf163)
• Select/SelectMenu/InputMenu: add fallback for max-height (#6503) (f4d7cbe)

❤️ Contributors

• @​Akur1a
• @​bansal
• @​benjamincanac
• @​maximepvrt
• @​thanet-s

Full Changelog: nuxt/ui@v4.8.0...v4.8.1

v4.8.0

✨ Highlights

🎨 Theme component prop defaults

The Theme component can now override default prop values for all descendant components. Pass a props object where keys are component names and values are their prop overrides:

\<template>
  <UTheme
    :props="{
      tooltip: { delayDuration: 0, arrow: true },
      button: { color: 'neutral', variant: 'subtle', size: 'lg' },
      input: { size: 'lg' }
    }"
  >
    <UTooltip text="Tooltip">
      <UButton label="Save" />
    </UTooltip>
&lt;UInput placeholder=&quot;Search...&quot; /&gt;

</UTheme>
</template>

Explicit props on a component always take priority. Theme components can be nested (innermost wins) and propagate through the entire tree via provide / inject.

🔍 ContentSearch async search

The ContentSearch component now supports FTS5 full-text search via the new search prop and the useSearchCollection composable (nuxt/content#3787, released in @nuxt/content v3.14.0). Instead of loading all content upfront with files and filtering client-side with Fuse.js, you can now run async queries with highlighted snippets:

... (truncated)

Changelog

Sourced from @​nuxt/ui's changelog.

4.8.1 (2026-05-28)

Bug Fixes

• ContentSearch/DashboardSearch: proxy missing CommandPalette props (#6505) (631f5dc)
• Form: add method="post" to prevent credential leaking via GET before hydration (#6512) (7a0825a)
• Icon: avoid recursive icon resolution (#6495) (d50c121)
• locale: improve Thai translation accuracy and consistency (#6509) (5d82418)
• module: expose component theme keys in AppConfig type (#6520) (ffaf163)
• module: revert tagPriority to -2 for inline style tag (2dac778)
• Select/SelectMenu/InputMenu: add fallback for max-height (#6503) (f4d7cbe)

4.8.0 (2026-05-21)

⚠ BREAKING CHANGES

• InputMenu: rename autocomplete prop to mode to free up HTML attribute (#6474)

Features

• Avatar/AvatarGroup: add color prop (#6405) (6f2396f)
• Breadcrumb: add color prop (#6406) (955dac1)
• ChatMessage: add body slot and improve actions alignment (#6460) (48685b6)
• ChatMessage: add color prop and header slot (#6407) (c6ce8ca)
• ChatPrompt: add submitOnEnter prop to control Enter behavior (b597f90), closes #6177
• Checkbox/RadioGroup/Switch: add highlight prop for error ring styling (a0deee4)
• CommandPalette: search and highlight description field (524c34d)
• ContentSearch/DashboardSearch: enable Fuse.js token search by default (ba08220)
• ContentSearch: add async search support via useSearchCollection (#6432) (a1bef8b)
• DashboardGroup: add storageOptions prop (8f0101b), closes #6170
• Error: add icon prop and leading slot (e6ea707), closes #6119
• Separator: add position prop (#6415) (844660a)
• Theme: override component prop defaults (#6031) (71c008e)

Bug Fixes

• ChatMessage: add wrap-break-word to content slot (#6476) (eb468e6)
• CommandPalette: only split tokens in highlight when useTokenSearch is enabled (898fbce)
• CommandPalette: preserve relative order of ignoreFilter groups (e4c1787)
• CommandPalette: re-highlight first item after debounced results render (efd7b8e)
• CommandPalette: update default fuse keys in docs and search components (0d9cc0d)
• components: apply theme.prefix to hardcoded utility classes (f51b1e8)
• components: constrain popper content to available viewport height (007b136), closes #6449
• ContentSearch: preserve intermediate ancestors in breadcrumb prefix (#6466) (f639b19)
• ContentToc: apply ui.trigger prop to trigger elements (252b906), closes #6428
• defineShortcuts: use e.code for alt shortcuts to handle macOS key remapping (231f156), closes #6444
• FileUpload: pass disabled attribute to button variant (2890c83), closes #6420
• Form: improve errors type (#6208) (c1090ab)
• InputMenu/Select/SelectMenu: respect trailing: false over default trailingIcon (#6457) (65b47ce)
• InputMenu: rename autocomplete prop to mode to free up HTML attribute (#6474) (2799fa6)

... (truncated)

Commits

• 00aded7 chore(release): v4.8.1
• 80bd0cc docs(search): improve relevance and tooltip behavior (#6521)
• ffaf163 fix(module): expose component theme keys in AppConfig type (#6520)
• c9fc7a4 docs: fix missing CSS variables on prerendered pages (#6519)
• 564adbf docs(toast): remove misleading AppConfig notes from examples
• 7a0825a fix(Form): add method="post" to prevent credential leaking via GET before h...
• fc6295b chore(playground): update vite optimizeDeps include list
• a4dfa9e chore: add .cursor to .gitignore
• 2dac778 fix(module): revert tagPriority to -2 for inline style tag
• 5b9a9c9 chore(repl): use Vue-compatible component overrides for Icon and Link
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nuxt.new	Error		Aug 31, 2026 12:10pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​nuxt/​ui@​4.8.1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @tanstack/table-core is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@nuxt/ui@4.8.1 → npm/@tanstack/table-core@8.21.3 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@tanstack/table-core@8.21.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm embla-carousel is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/@nuxt/ui@4.8.1 → npm/embla-carousel@8.6.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/embla-carousel@8.6.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report