Sourced from vite's changelog.
5.0.12 (2024-01-19)
- fix: await
configResolved
hooks of worker plugins (#15597) (#15605) (ef89f80), closes #15597 #15605- fix: fs deny for case insensitive systems (#15653) (91641c4), closes #15653
5.0.11 (2024-01-05)
- fix: don't pretransform classic script links (#15361) (19e3c9a), closes #15361
- fix: inject
__vite__mapDeps
code before sourcemap file comment (#15483) (d2aa096), closes #15483- fix(assets): avoid splitting
,
inside base64 value ofsrcset
attribute (#15422) (8de7bd2), closes #15422- fix(html): handle offset magic-string slice error (#15435) (5ea9edb), closes #15435
- chore(deps): update dependency strip-literal to v2 (#15475) (49d21fe), closes #15475
- chore(deps): update tj-actions/changed-files action to v41 (#15476) (2a540ee), closes #15476
5.0.10 (2023-12-15)
- fix: omit protocol does not require pre-transform (#15355) (d9ae1b2), closes #15355
- fix(build): use base64 for inline SVG if it contains both single and double quotes (#15271) (1bbff16), closes #15271
5.0.9 (2023-12-14)
- fix: htmlFallbackMiddleware for favicon (#15301) (c902545), closes #15301
- fix: more stable hash calculation for depsOptimize (#15337) (2b39fe6), closes #15337
- fix(scanner): catch all external files for glob imports (#15286) (129d0d0), closes #15286
- fix(server): avoid chokidar throttling on startup (#15347) (56a5740), closes #15347
- fix(worker): replace
import.meta
correctly for IIFE worker (#15321) (08d093c), closes #15321- feat: log re-optimization reasons (#15339) (b1a6c84), closes #15339
- chore: temporary typo (#15329) (7b71854), closes #15329
- perf: avoid computing paths on each request (#15318) (0506812), closes #15318
- perf: temporary hack to avoid fs checks for /
@react-refresh
(#15299) (b1d6211), closes #152995.0.8 (2023-12-12)
- perf: cached fs utils (#15279) (c9b61c4), closes #15279
- fix: missing warmupRequest in transformIndexHtml (#15303) (103820f), closes #15303
- fix: public files map will be updated on add/unlink in windows (#15317) (921ca41), closes #15317
- fix(build): decode urls in CSS files (fix #15109) (#15246) (ea6a7a6), closes #15109 #15246
- fix(deps): update all non-major dependencies (#15304) (bb07f60), closes #15304
- fix(ssr): check esm file with normal file path (#15307) (1597170), closes #15307
... (truncated)
ee81e19
release: v5.0.1291641c4
fix: fs deny for case insensitive systems (#15653)ef89f80
fix: await configResolved
hooks of worker plugins (#15597)
(#15605)b44c493
release: v5.0.11d2aa096
fix: inject __vite__mapDeps
code before sourcemap file
comment (#15483)2a540ee
chore(deps): update tj-actions/changed-files action to v41 (#15476)5ea9edb
fix(html): handle offset magic-string slice error (#15435)49d21fe
chore(deps): update dependency strip-literal to v2 (#15475)8de7bd2
fix(assets): avoid splitting ,
inside base64 value of
srcset
attribute (#...19e3c9a
fix: don't pretransform classic script links (#15361)1ecbf2f
1.1.96a3ada9
lib: fixed CVE-2023-42282 and added unit test35a517c
Release version 1.15.6 of the npm package.c4f847f
Drop Proxy-Authorization across hosts.8526b4a
Use GitHub for disclosure.b1677ce
Release version 1.15.5 of the npm package.d8914f7
Preserve fragment in responseUrl.6585820
Release version 1.15.4 of the npm package.7a6567e
Disallow bracketed hostnames.05629af
Prefer native URL instead of deprecated url.parse.1cba8e8
Prefer native URL instead of legacy url.resolve.72bc2a4
Simplify _processResponse error handling.Sourced from jose's releases.
v4.15.5
Fixes
- add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176
Sourced from jose's changelog.
4.15.5 (2024-03-07)
Fixes
- add a maxOutputLength option to zlib inflate (1b91d88)
86071ea
chore(release): 5.3.4189c4ac
fix(security): do not allow to read files above (#1779)