Sourced from vite's releases.
v6.0.9
This version contains a breaking change due to security fixes. See https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 for more details.
Please refer to CHANGELOG.md for details.
v6.0.8
Please refer to CHANGELOG.md for details.
v6.0.7
Please refer to CHANGELOG.md for details.
v6.0.6
Please refer to CHANGELOG.md for details.
v6.0.5
Please refer to CHANGELOG.md for details.
v6.0.4
Please refer to CHANGELOG.md for details.
Sourced from vite's changelog.
6.0.9 (2025-01-20)
- fix!: check host header to prevent DNS rebinding attacks and introduce
server.allowedHosts
(bd896fb)- fix!: default
server.cors: false
to disallow fetching from untrusted origins (b09572a)- fix: verify token for HMR WebSocket connection (029dcd6)
6.0.8 (2025-01-20)
- fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193
- fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108
- fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059
- fix: ensure
server.close()
only called once (#19204) (db81c2d), closes #19204- fix: resolve.conditions in ResolvedConfig was
defaultServerConditions
(#19174) (ad75c56), closes #19174- fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189
- fix: use shared sigterm callback (#19203) (47039f4), closes #19203
- fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098
- fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119
- fix(types): improve
ESBuildOptions.include / exclude
type to allowreadonly (string | RegExp)[]
(ea53e70), closes #19146- chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139
6.0.7 (2025-01-02)
- fix: fix
minify
whenbuilder.sharedPlugins: true
(#19025) (f7b1964), closes #19025- fix: skip the plugin if it has been called before with the same id and importer (#19016) (b178c90), closes #19016
- fix(html): error while removing
vite-ignore
attribute for inline script (#19062) (a492253), closes #19062- fix(ssr): fix semicolon injection by ssr transform (#19097) (1c102d5), closes #19097
- perf: skip globbing for static path in warmup (#19107) (677508b), closes #19107
- feat(css): show lightningcss warnings (#19076) (b07c036), closes #19076
6.0.6 (2024-12-26)
- fix: replace runner-side path normalization with
fetchModule
-side resolve (#18361) (9f10261), closes #18361- fix(css): resolve style tags in HTML files correctly for lightningcss (#19001) (afff05c), closes #19001
- fix(css): show correct error when unknown placeholder is used for CSS modules pattern in lightningcs (9290d85), closes #19070
- fix(resolve): handle package.json with UTF-8 BOM (#19000) (902567a), closes #19000
- fix(ssrTransform): preserve line offset when transforming imports (#19004) (1aa434e), closes #19004
- chore: fix typo in comment (#19067) (eb06ec3), closes #19067
- chore: update comment about
build.target
(#19047) (0e9e81f), closes #19047- revert: unpin esbuild version (#19043) (8bfe247), closes #19043
- test(ssr): test virtual module with query (#19044) (a1f4b46), closes #19044
6.0.5 (2024-12-20)
... (truncated)
a55f8ba
release: v6.0.9bd896fb
fix!: check host header to prevent DNS rebinding attacks and introduce
`serve...029dcd6
fix: verify token for HMR WebSocket connectionb09572a
fix!: default server.cors: false
to disallow fetching from
untrusted originsc0f72a6
release: v6.0.8f2aed62
fix: tree shake stringified JSON imports (#19189)db81c2d
fix: ensure server.close()
only called once (#19204)47039f4
fix: use shared sigterm callback (#19203)3bd55bc
fix: avoid SSR HMR for HTML files (#19193)e690d8b
fix(optimizer): use correct default install state path for yarn PnP (#19119)