github nitrojs/nitro v3.0.260429-beta

2 hours ago

compare changes

Important

This release patches two medium-severity vulnerabilities in proxy and redirect route rules. Users relying on either are strongly encouraged to upgrade. See GHSA-5w89-w975-hf9q and GHSA-9phm-9p8f-hw5m for details.

πŸš€ Enhancements

  • tracing: Enable tracing channels for unstorage (#4226)

🩹 Fixes

  • Accept ipv4-mapped ipv6 loopback in vfs handler (#4212)
  • route-rules: Reject out-of-scope requests (#4222)
  • route-rules: Prevent open redirect via protocol-relative url bypass (#4236)
  • vite: Route browser asset loads to vite when sec-fetch-dest is absent (#4238)

πŸ’… Refactors

  • Use built-in escapeRegExp util (#4109)

πŸ“– Documentation

  • cache: Add invalidation usage (#4216)
  • Improve jsdocs (#4199)

πŸ“¦ Build

  • Shim oxc-parser via rolldown/utils (#4237)

🌊 Types

  • vite: Make experimental.vite type optional (#4225)

Preset Changes

  • cloudflare: Add missing types for cloudflare.wrangler.observability.traces (#4220)
  • vercel: Enable shouldAddSourcemapSupport when sourcemap is enabled (#4232)

❀️ Contributors

Don't miss a new nitro release

NewReleases is sending notifications on new releases.