|
|
|
|
|
|
|
|
|
|
|
|
Sourced from vite's releases.
v6.0.9
This version contains a breaking change due to security fixes. See https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 for more details.
Please refer to CHANGELOG.md for details.
v6.0.8
Please refer to CHANGELOG.md for details.
Sourced from vite's changelog.
6.0.9 (2025-01-20)
- fix!: check host header to prevent DNS rebinding attacks and introduce
server.allowedHosts
(bd896fb)- fix!: default
server.cors: false
to disallow fetching from untrusted origins (b09572a)- fix: verify token for HMR WebSocket connection (029dcd6)
6.0.8 (2025-01-20)
- fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193
- fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108
- fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059
- fix: ensure
server.close()
only called once (#19204) (db81c2d), closes #19204- fix: resolve.conditions in ResolvedConfig was
defaultServerConditions
(#19174) (ad75c56), closes #19174- fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189
- fix: use shared sigterm callback (#19203) (47039f4), closes #19203
- fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098
- fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119
- fix(types): improve
ESBuildOptions.include / exclude
type to allowreadonly (string | RegExp)[]
(ea53e70), closes #19146- chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139
a55f8ba
release: v6.0.9bd896fb
fix!: check host header to prevent DNS rebinding attacks and introduce
`serve...029dcd6
fix: verify token for HMR WebSocket connectionb09572a
fix!: default server.cors: false
to disallow fetching from
untrusted originsc0f72a6
release: v6.0.8f2aed62
fix: tree shake stringified JSON imports (#19189)db81c2d
fix: ensure server.close()
only called once (#19204)47039f4
fix: use shared sigterm callback (#19203)3bd55bc
fix: avoid SSR HMR for HTML files (#19193)e690d8b
fix(optimizer): use correct default install state path for yarn PnP (#19119)
|
|
|
|
|
|
|
|
|
|
|
|
Sourced from vitest's releases.
v3.0.5
This release includes security patches for:
🚀 Features
- ui: Insert message "no tests found" in ui - by
@DevJoaoLopes
in vitest-dev/vitest#7366 (92da4)🐞 Bug Fixes
- Validate websocket request - by
@hi-ogawa
and@AriPerkkio
in vitest-dev/vitest#7317 (191ef)- Don't toggle cli cursor on non-TTY - by
@AriPerkkio
in vitest-dev/vitest#7336 (3c805)- vite-node: Differentiate file url with hash and query - by
@hi-ogawa
in vitest-dev/vitest#7365 (926ca)View changes on GitHub