[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/icon	2.6.0 → 2.6.1

---

Release Notes

nuxt/icon (@​nuxt/icon)

v2.6.1

Compare Source

v2.6.1 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

• memoise generated icon CSS across requests (#​549)
• sort icon collections once when resolving names (#​550)

🩹 Fixes

• plugin: chunk custom icon loader queries to avoid 431/414 (#​551)
• css: preserve cascade layer order for late icons (#​548)

🤖 CI

• release with uppt (#​547)

🎉 New Contributors

• Thrasher (@​thrashxr)
• sean0407 (@​sean0407)

❤️ Contributors

• Thrasher (@​thrashxr)
• Daniel Roe (@​danielroe)
• sean0407 (@​sean0407)
• Sébastien Chopin (@​atinux)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[github-actions]

Terraform Plan

🚧 Changes detected — Plan: 1 to add, 1 to change, 1 to destroy.

Plan output

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # module.service.aws_ecs_service.this will be updated in-place
  ~ resource "aws_ecs_service" "this" {
        id                                 = "arn:aws:ecs:eu-central-1:553637109631:service/javabin-platform/cupcake-cupcake"
        name                               = "cupcake-cupcake"
        tags                               = {}
      ~ task_definition                    = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake:2" -> (known after apply)
        # (16 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

  # module.service.aws_ecs_task_definition.this must be replaced
-/+ resource "aws_ecs_task_definition" "this" {
      ~ arn                      = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake:2" -> (known after apply)
      ~ arn_without_revision     = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake" -> (known after apply)
      ~ container_definitions    = jsonencode(
          ~ [
              ~ {
                    name                   = "cupcake"
                  ~ portMappings           = [
                      ~ {
                          - hostPort      = 3000
                            # (2 unchanged attributes hidden)
                        },
                    ]
                  ~ secrets                = [
                        {
                            name      = "COGNITO_CLIENT_ID"
                            valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-id"
                        },
                      + {
                          + name      = "COGNITO_IDENTITY_PROVIDER"
                          + valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-identity-provider"
                        },
                        {
                            name      = "NUXT_PUBLIC_OIDC_CLIENT_ID"
                            valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-id"
                        },
                    ]
                  - systemControls         = []
                  - volumesFrom            = []
                    # (7 unchanged attributes hidden)
                },
            ] # forces replacement
        )
      ~ enable_fault_injection   = false -> (known after apply)
      ~ id                       = "cupcake-cupcake" -> (known after apply)
      ~ revision                 = 2 -> (known after apply)
      - tags                     = {} -> null
        # (10 unchanged attributes hidden)

      - volume {
          - configure_at_launch = false -> null
          - name                = "tmp" -> null
        }
      + volume {
          + configure_at_launch = (known after apply)
          + name                = "tmp"
        }
    }

Plan: 1 to add, 1 to change, 1 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

---

LLM Review

Risk: 🟢 LOW

Plan replaces the ECS task definition for cupcake-cupcake (new revision with an added COGNITO_IDENTITY_PROVIDER secret and removal of a container hostPort mapping) and updates the ECS service to point at the new task definition; no databases, security groups, IAM, or networking are changed.

• ✅ [routine] aws_ecs_task_definition.this is destroy-and-replace (forced by container_definitions change). Task definitions are immutable and get a new revision, so this is expected; the old revision remains registered in ECS and is not a data-loss event.
• ✅ [routine] aws_ecs_service.this updates in-place only to point at the new task definition revision. The service will roll out new tasks; confirm deployment settings (min/max healthy percent) are acceptable for a rolling update.
• ✅ [routine] container_definitions diff removes portMappings hostPort = 3000 (the containerPort mapping is unchanged). With awsvpc/Fargate networking hostPort is ignored or matches containerPort; if the service uses bridge networking or the app/target group relies on host port 3000, verify connectivity. Also removes empty systemControls and volumesFrom, which is cosmetic.
• 🔒 [security] Adds a new SSM-backed secret COGNITO_IDENTITY_PROVIDER sourced from /javabin/apps/cupcake/cupcake/cognito-client-identity-provider. This is a parameter reference, not a plaintext value, and does not change IAM or network exposure. Confirm the SSM parameter exists and the task execution role can read it, or the task will fail to start.
• ✅ [routine] Volume 'tmp' is recreated with configure_at_launch changing from false to unset/known-after-apply; no data persistence concern for an ephemeral volume. No cost impact: no new billable resources are created.

[github-actions]

Terraform Plan

🚧 Changes detected — Plan: 1 to add, 1 to change, 1 to destroy.

Plan output

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # module.service.aws_ecs_service.this will be updated in-place
  ~ resource "aws_ecs_service" "this" {
        id                                 = "arn:aws:ecs:eu-central-1:553637109631:service/javabin-platform/cupcake-cupcake"
        name                               = "cupcake-cupcake"
        tags                               = {}
      ~ task_definition                    = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake:2" -> (known after apply)
        # (16 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

  # module.service.aws_ecs_task_definition.this must be replaced
-/+ resource "aws_ecs_task_definition" "this" {
      ~ arn                      = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake:2" -> (known after apply)
      ~ arn_without_revision     = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake" -> (known after apply)
      ~ container_definitions    = jsonencode(
          ~ [
              ~ {
                    name                   = "cupcake"
                  ~ portMappings           = [
                      ~ {
                          - hostPort      = 3000
                            # (2 unchanged attributes hidden)
                        },
                    ]
                  ~ secrets                = [
                        {
                            name      = "COGNITO_CLIENT_ID"
                            valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-id"
                        },
                      + {
                          + name      = "COGNITO_IDENTITY_PROVIDER"
                          + valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-identity-provider"
                        },
                        {
                            name      = "NUXT_PUBLIC_OIDC_CLIENT_ID"
                            valueFrom = "arn:aws:ssm:eu-central-1:553637109631:parameter/javabin/apps/cupcake/cupcake/cognito-client-id"
                        },
                    ]
                  - systemControls         = []
                  - volumesFrom            = []
                    # (7 unchanged attributes hidden)
                },
            ] # forces replacement
        )
      ~ enable_fault_injection   = false -> (known after apply)
      ~ id                       = "cupcake-cupcake" -> (known after apply)
      ~ revision                 = 2 -> (known after apply)
      - tags                     = {} -> null
        # (10 unchanged attributes hidden)

      - volume {
          - configure_at_launch = false -> null
          - name                = "tmp" -> null
        }
      + volume {
          + configure_at_launch = (known after apply)
          + name                = "tmp"
        }
    }

Plan: 1 to add, 1 to change, 1 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

---

LLM Review

Risk: 🟢 LOW

Plan replaces the ECS task definition for cupcake-cupcake (container definition change adding a COGNITO_IDENTITY_PROVIDER SSM secret and removing a hostPort mapping) and updates the ECS service to point at the new task definition revision; no databases, security groups, IAM, or networking resources are affected.

• ✅ [routine] aws_ecs_task_definition.this is destroy-and-replace (forced by container_definitions change). A new revision is created and the ECS service is updated in place to reference it; this is the standard rollout path, not data loss.
• ✅ [routine] Container port mapping hostPort 3000 is removed from the container definition. Confirm this is intended: if the service relied on a fixed host port (non-awsvpc network mode) traffic routing could change. In Fargate/awsvpc mode the hostPort is typically ignored or matches containerPort.
• 🔒 [security] A new secret COGNITO_IDENTITY_PROVIDER is injected from SSM parameter cognito-client-identity-provider. This is a read of an existing SSM parameter via the task execution role; it does not grant new IAM permissions in this plan, but verify the parameter exists and that its value is not sensitive beyond what the container needs.
• ✅ [routine] Minor attribute changes: systemControls and volumesFrom now null/empty, volume block recreated with configure_at_launch unset (null vs false), and tags set from {} to null. These are no-op-equivalent cosmetic diffs.
• 💰 [cost] No new billable resources are created; the change only adds a new task definition revision and updates the service, so no direct cost impact.