quasarframework/quasar @quasar/app-vite-v3.4.1

on GitHub

Changes

• Security: bumped @fastify/static from ^9.1.1 to ^10.1.2 in the SSR Fastify template — fixes a route-guard bypass via path traversal (high severity) and an authorization bypass via non-canonical URL paths.
• This only affects newly generated SSR projects using the Fastify variant. Existing projects should manually bump @fastify/static to ^10.1.2 in src-ssr/package.json. The only breaking change in v10 is the setHeaders callback signature (now receives a FastifyReply instead of a raw Response) — the template doesn't use it, so no code changes are needed unless you added it yourself.
• Upgraded more template spawned deps

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal