chore(deps-dev): bump @builder.io/qwik-city from 1.11.0 to 1.19.0 in /examples/qwik

[dependabot]

Bumps @builder.io/qwik-city from 1.11.0 to 1.19.0.

Release notes

Sourced from @​builder.io/qwik-city's releases.

@​builder.io/qwik-city@1.19.0

Minor Changes

• ✨ allow mocking route loaders & actions in QwikCityMockProvider (by @​alexismch in #8102)

Patch Changes

• 🐞🩹 qwik-city spa routeStateInternal and routeLocation url origins mismatch (by @​maiieul in #8234)

• feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoOptions for improved URL handling (by @​JerryWu1234 in #8251)

• Make RequestEvents readonly instead of frozen (by @​DustinJSilk in #8135)

@​builder.io/qwik-city@1.18.0

Patch Changes

• execute cleanup cb for all component tree while calling dispose.cleanup method returned by render fn (by @​sashkashishka in #8164)

@​builder.io/qwik-city@1.17.2

Patch Changes

• 🐞🩹 history behavior in some edge cases has been brought inline with the E2E tests that were accidentally disabled. (the tests can't be disabled any more either) (by @​wmertens in 206f3e0)

• 🐞🩹 SPA routing is broken unless origin matches value in in vite.config #8093 (by @​termermc in #8097)

  If the SSG origin was set to localhost:3000 and a user visited from 127.0.0.1:3000, SPA routing would be broken.

  Internally, useNavigate's context provider goto checks the new destination with the last route location. If the origin is different, it just does a normal browser navigation. This makes sense; links to other origins cannot use SPA routing. However, the initial route it compares was using an origin that came from the server environment.

  Now, the first navigation will set that initial route to the browser's actual href, eliminating the erroneous origin mismatch for SPA navigations.

• 🐞🩹 this in various Qwik-City handlers is now RequestEvent again. (by @​wmertens in #8111)

@​builder.io/qwik-city@1.17.1

Patch Changes

• 🐞🩹 zod is now imported as import * as z from 'zod', which vastly improves bundling. The Insights app client code reduced by 12kB. (by @​wmertens in #8042)

@​builder.io/qwik-city@1.17.0

Patch Changes

• 🐞🩹 SSG sometimes hangs after completion, now we forcibly exit the SSG process when this happens. (by @​wmertens in #7957)

• 🐞🩹 return 404 for missing /build/ files. (by @​gioboa in #7914)

• 🐞🩹 redirecting internal q-data.json requests will keep the q-data.json suffix so that the client can still fetch the correct one (by @​wmertens in #7988)

... (truncated)

Changelog

Sourced from @​builder.io/qwik-city's changelog.

1.19.0

Minor Changes

• ✨ allow mocking route loaders & actions in QwikCityMockProvider (by @​alexismch in #8102)

Patch Changes

• 🐞🩹 qwik-city spa routeStateInternal and routeLocation url origins mismatch (by @​maiieul in #8234)

• feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoOptions for improved URL handling (by @​JerryWu1234 in #8251)

• Make RequestEvents readonly instead of frozen (by @​DustinJSilk in #8135)

1.18.0

Patch Changes

• execute cleanup cb for all component tree while calling dispose.cleanup method returned by render fn (by @​sashkashishka in #8164)

1.17.2

Patch Changes

• 🐞🩹 history behavior in some edge cases has been brought inline with the E2E tests that were accidentally disabled. (the tests can't be disabled any more either) (by @​wmertens in 206f3e0)

• 🐞🩹 SPA routing is broken unless origin matches value in in vite.config #8093 (by @​termermc in #8097)

  If the SSG origin was set to localhost:3000 and a user visited from 127.0.0.1:3000, SPA routing would be broken.

  Internally, useNavigate's context provider goto checks the new destination with the last route location. If the origin is different, it just does a normal browser navigation. This makes sense; links to other origins cannot use SPA routing. However, the initial route it compares was using an origin that came from the server environment.

  Now, the first navigation will set that initial route to the browser's actual href, eliminating the erroneous origin mismatch for SPA navigations.

• 🐞🩹 this in various Qwik-City handlers is now RequestEvent again. (by @​wmertens in #8111)

1.17.1

Patch Changes

• 🐞🩹 zod is now imported as import * as z from 'zod', which vastly improves bundling. The Insights app client code reduced by 12kB. (by @​wmertens in #8042)

1.17.0

Patch Changes

• 🐞🩹 SSG sometimes hangs after completion, now we forcibly exit the SSG process when this happens. (by @​wmertens in #7957)

... (truncated)

Commits

• 97df2e6 Version Packages
• 25dbde0 Merge branch 'main' into upcoming
• c0c65d7 fix: trailing slash in path
• eebf610 Merge commit from fork
• 8bbd973 fix: content-type header handling
• 189e01c fix: refactor form parsing
• 898bcf4 refactor(qwik-city): remove deprecated origin option from QwikCityBunOptions ...
• 91f4f25 feat(qwik-city): add getOrigin option to QwikCityBunOptions and QwikCityDenoO...
• 595214a feat(untrack): accept signals/stores directly, pass arguments
• 20a2285 chore(deps): bump undici from 7.16.0 to 7.18.2 in the npm_and_yarn group acro...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Medium Risk
Primarily a dependency bump, but it refreshes many transitive packages (including sharp/image tooling) and introduces stricter Node engine requirements in parts of the tree, which could affect installs/builds in the example.

Overview
Updates the examples/qwik project to use @builder.io/qwik-city@1.19.0 (from 1.11.0).

Regenerates package-lock.json to align with the new Qwik City version, pulling in updated transitive tooling deps (notably vite-imagetools/sharp and MDX-related packages), including new platform-specific sharp artifacts and updated version/engine constraints.

^{Written by Cursor Bugbot for commit 0650504. This will update automatically on new commits. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 0650504

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Mismatched qwik and qwik-city package versions

Medium Severity

The @builder.io/qwik-city package is being bumped to ^1.19.0 while @builder.io/qwik remains at ^1.11.0. These are companion packages from the same framework monorepo and are typically released together with matching versions. Having qwik-city 8 minor versions ahead of qwik core could cause API incompatibilities, missing expected features, or runtime errors since qwik-city 1.19.0 may rely on functionality introduced in qwik versions after 1.11.0.

 

[cursor]

Node.js version requirement conflict with new dependencies

Medium Severity

The engines field allows Node 18.17.0+ (^18.17.0 || ^20.3.0 || >=21.0.0), but this dependency update brings in vite-imagetools 9.0.2 and imagetools-core 9.1.0 which both require node >=20.0.0. Users attempting to build this project with Node 18.x (which is explicitly permitted) will encounter compatibility failures with these transitive dependencies.

 

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 0650504

Command	Status	Duration	Result
nx test @builder.io/sdks	✅ Succeeded	13s	View ↗
nx typecheck @builder.io/sdks	✅ Succeeded	6s	View ↗
nx build @builder.io/sdk	✅ Succeeded	11s	View ↗
nx test @builder.io/sdk	✅ Succeeded	4s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-02-03 21:12:37 UTC