v4.6.4 is the next patch release.
👉 Changelog
🩹 Fixes
- nitro,nuxt: require unrouting 0.3.2 (
768d21368) - nitro: preserve wildcard tails in case-insensitive route rules (
bf31e4cd8) - nitro: require nitropack 2.13.6 (
1b13c6981) - nitro: keep leading double slash in renderer request path (
75c12c6fb) - nuxt: use unambiguous encoding for island hash (
6f1b93c64) - vite-server: resolve wildcard redirect tails from the matched segments (
1e7dfa6a7) - nuxt: do not expose details of untrusted thrown errors (
8c56b71e4) - nuxt: strip trailing slashes in linear time (
97424dd21) - nitro,webpack: include hosts the CLI allows after loading the config (
8c11d965d) - webpack: skip hot middleware for forbidden dev requests (
3c9645326) - rspack,webpack: reject unexpected Host headers in dev middleware (
f8d64c9aa) - schema,nitro,vite: add
devServer.allowedHosts(3e1c7964e) - nitro,nuxt: match route rules for paths with encoded slashes (
084396b10) - schema: only widen workspace dir to a declared workspace root (
89d3306d1) - nitro: only trust
x-forwarded-protoin when opted-in (#36818) - nitro: stream the body read through a
nuxt/serverhandler (#36817) - kit: suggest the specific fix when loading falls back to jiti (
24d75659d) - vite: use a single type checker (#36774)
- nitro,vite: remove windows + virtual dev ssr css links after hydration (#36765)
- nitro,vite: dedupe dev css by module node (#36420)
- nuxt: avoid hoisting setup-only values from
definePageMeta(#36751) - nuxt: only match hydration modifiers after lazy prefix (#36750)
- kit,nitro,nuxt: make emitted tsconfig/types stable across reruns (#36747)
- nuxt: render inlined component styles after stylesheet links (#36714)
- webpack: use valid devtool for hidden client sourcemaps in dev (#36555)
📖 Documentation
- clarify template dependency regeneration (#36766)
- revise README structure and headings (#36772)
- link the Nuxt DevTools docs on nuxt.com (#36769)
- warn against spreading untrusted objects onto server components (
1225ca7ff) - update anchors for flat heading ids (#36664)
🏡 Chore
- add 1000-row listing routes to the benchmark (
c852d871f) - add client page weight and browser timing suites (#36788)
✅ Tests
- update bundle size snapshot (
7528c3ce6) - list new main-only diagnostic codes (
545b5934c) - tolerate node 26 proxy inspect output (
40f72b40b) - normalise rolldown comment (
861e153dd) - improve benchmark tests (#36745)
🤖 CI
- check unversioned docs links against branch docs version (
d093c88b1) - skip unneeded checks for release prs (
4b90681bd) - skip benchmarks in merge groups (
6428070e0) - re-enable codspeed ⚡ (
bc17c03d1)
❤️ Contributors
- Daniel Roe (@danielroe)
- Max (@onmax)
- Sébastien Chopin (@atinux)
- saini-25 (@saini-25)
- Baptiste Leproux (@larbish)