chore(og-image): upgrade to nuxt-og-image 6.3.4 + takumi rc.17

- Bump nuxt-og-image 6.2.6 → 6.3.4
- Bump @takumi-rs/core, @takumi-rs/wasm 1.0.0-beta.20 → 1.0.0-rc.17
- Enable security.strict (drops maxQueryParamSize, now covered)
- Reuse NUXT_IMAGE_PROXY_SECRET for OG URL signing to avoid a second secret

Caching verified: runtimeCacheStorage defaults to nitro `cache` storage,
which modules/cache.ts maps to vercel-runtime-cache on Vercel when
RUNTIME_CACHE is set. Edge caching is handled by the ISR route rule at
`/_og/d/**` (24h). nuxt-og-image defaults cacheMaxAgeSeconds to 72h.

Author: harlan-zw

.env.example

@@ -1,5 +1,5 @@
 #secure password, can use openssl rand -hex 32
 NUXT_SESSION_PASSWORD=""
 
-#HMAC secret for image proxy URL signing, can use openssl rand -hex 32
+#HMAC secret for image-proxy and OG image URL signing, can use openssl rand -hex 32
 NUXT_IMAGE_PROXY_SECRET=""

lunaria/components.ts

@@ -135,9 +135,13 @@ const LocaleDetails = (status: I18nStatus, locale: Locale): string => {
       )}
       <br />
       <br />
-      ${missingKeys.length > 0
-        ? html`${MissingKeysList(missingKeys)}`
-        : html` <p>This translation is complete, amazing job! 🎉</p> `}
+      ${
+        missingKeys.length > 0
+          ? html`${MissingKeysList(missingKeys)}`
+          : html`
+              <p>This translation is complete, amazing job! 🎉</p>
+            `
+      }
     </details>
   `
 }
@@ -364,10 +368,12 @@ function SvgLocaleSummary(
         >${label} (${lang})</text
       >
       <text x="0" y="26" font-size="9" fill="#999">
-        ${missingFiles.length == 0 && outdatedFiles.length == 0
-          ? '100% complete, amazing job! 🎉'
-          : html`${doneLength} done, ${outdatedFiles.length} outdated, ${missingFiles.length}
-            missing`}
+        ${
+          missingFiles.length == 0 && outdatedFiles.length == 0
+            ? '100% complete, amazing job! 🎉'
+            : html`${doneLength} done, ${outdatedFiles.length} outdated, ${missingFiles.length}
+            missing`
+        }
       </text>
       <rect x="0" y="34" width="${barWidth}" height="8" fill="#999" opacity="0.25"></rect>
       <rect x="0" y="34" width="${outdatedWidth}" height="8" fill="#fb923c"></rect>

lunaria/styles.ts

@@ -5,8 +5,8 @@ export const BaseStyles = html`
     :root {
       /** Fonts */
       --ln-font-fallback:
-        -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif,
-        Apple Color Emoji, Segoe UI Emoji;
+        -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif, Apple Color Emoji,
+        Segoe UI Emoji;
       --ln-font-body: 'Geist', 'IBM Plex Sans Arabic', var(--ln-font-fallback);
       --ln-font-mono: 'Geist Mono', 'IBM Plex Sans Arabic', monospace;
 

nuxt.config.ts

@@ -296,7 +296,9 @@ export default defineNuxtConfig({
   ogImage: {
     enabled: !isStorybook,
     security: {
-      maxQueryParamSize: 2048,
+      strict: true,
+      // Reuse image-proxy HMAC secret to avoid managing a second secret
+      secret: process.env.NUXT_IMAGE_PROXY_SECRET,
     },
   },
 

package.json

@@ -69,8 +69,8 @@
     "@shikijs/langs": "4.0.2",
     "@shikijs/markdown-exit": "4.0.2",
     "@shikijs/themes": "4.0.2",
-    "@takumi-rs/core": "1.0.0-beta.20",
-    "@takumi-rs/wasm": "1.0.0-beta.20",
+    "@takumi-rs/core": "1.0.0-rc.17",
+    "@takumi-rs/wasm": "1.0.0-rc.17",
     "@unocss/nuxt": "66.6.7",
     "@unocss/preset-wind4": "66.6.7",
     "@upstash/redis": "1.37.0",
@@ -91,7 +91,7 @@
     "marked": "17.0.4",
     "module-replacements": "2.11.0",
     "nuxt": "4.3.1",
-    "nuxt-og-image": "6.2.6",
+    "nuxt-og-image": "6.3.4",
     "ofetch": "1.5.1",
     "ohash": "2.0.11",
     "perfect-debounce": "2.1.0",