⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe. It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.…
⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe. It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which…
4.5.0 is the next minor release. 📣 Some News Preparing for Nuxt 5 A good chunk of this release is (hopefully) invisible plumbing for Nuxt 5. We've moved onto the latest major versions of several core dependencies (unhead v3, unctx v3, and Vite 8), switched the framework's own build over to tsdown, and introduced a stable nuxt/* build output contract with dev exports so that type-checking in the Nu…
3.21.9 is the next patch release. 👉 Changelog compare changes 🩹 Fixes vite: Use spa entry for vite-node fallback (3.x) (c8410a16a) kit,nuxt: Pass error as cause when we re-throw (#35387) vite: Inline CSS for lazy components imported from #components (#35215) nuxt: Validate <ClientOnly> fallback tag name (#35325) vite: Extract server page CSS when inlineStyles is disabled (#35209) nitro: Include ne…
4.4.8 is a hotfix release to address an issue running the dev server on MacOS. 👉 Changelog compare changes 🩹 Fixes vite: Shorter socket name for macOs with tmp fallback (#35265) kit: Respect type option in findPath (#35272) deps: Update nuxt/scripts presets (905621594) nuxt: Revert unhead dependency back to v2 (e6d578fea) 📖 Documentation Fix many typos (#35266) Explain static fallback pages (#3527…
3.21.8 is a hotfix release to address an issue running the dev server on MacOS. 👉 Changelog compare changes 🩹 Fixes vite: Shorter socket name for macOs with tmp fallback (#35265) kit: Respect type option in findPath (#35272) deps: Update nuxt/scripts presets (ff6b060dd) 📖 Documentation Change null to undefined in data-fetching docs to match actual types (#35301) ❤️ Contributors Daniel Roe (@daniel…
4.4.7 is a security hotfix release. 👉 make sure to check https://github.com/nuxt/nuxt/security/advisories to view open advisories resolved by this release. 👉 Changelog compare changes 🩹 Fixes nitro: Assign noSSR before deciding payload extraction (#35108) vite: Avoid filtering out dirs with shared prefix from allowDirs (#35112) nuxt: Use resolve from pathe for buildCache path boundary check (#3511…
3.21.7 is the a security hotfix release. 👉 make sure to check https://github.com/nuxt/nuxt/security/advisories to view open advisories resolved by this release. 👉 Changelog compare changes 🩹 Fixes nitro: Assign noSSR before deciding payload extraction (#35108) vite: Avoid filtering out dirs with shared prefix from allowDirs (#35112) nuxt: Use resolve from pathe for buildCache path boundary check (…
4.4.6 is the next patch release. 👉 Changelog compare changes 🩹 Fixes vite: Use spa entry for vite-node fallback (#35037) vite: Invalidate SSR module cache when modules are invalidated via plugin hooks (a86657a0e) nuxt: Match deduplicated resolveComponent calls in jsx blocks (#35028) nuxt: Prefer our own builder/server deps (#35029) nuxt: Update useFetch key even with watch: false (#35002) nitro: M…
3.21.6 is the next patch release. 👉 Changelog compare changes 🩹 Fixes nuxt: Prefer our own builder/server deps (#35029) nitro: Add json extension to payload cache items (#35043) nuxt: Handle errors fetching app manifest (#35050) nuxt: Preserve setPageLayout props on same-path navigation (#35055) vite: Don't strip buildAssetsDir from vite-node SSR ids (#35040) nuxt: Mark useLoadingIndicator propert…
4.4.5 is the next patch release. 👉 Changelog compare changes 🔥 Performance kit: Cache layer roots and short-circuit isIgnored relative (#35015) 🩹 Fixes vite: Resolve vite clientServer with ssr: false (#34959) nitro: Correct payload route rule for / + override ssr: true (#34990) nitro: Break recursive rendering deadlocks during prerender (#34939) vite: Drop redundant css link when entry styles are…
3.21.5 is the next patch release. 👉 Changelog compare changes 🔥 Performance kit: Cache layer roots and short-circuit isIgnored relative (#35015) 🩹 Fixes nitro: Correct payload route rule for / + override ssr: true (#34990) nitro: Break recursive rendering deadlocks during prerender (#34939) vite: Drop redundant css link when entry styles are inlined (#34950) nuxt: Only force suspense remount after…
4.4.3 is the next patch release. v4.4.4 was published with no changes due to an issue running the release script for v4.4.3. 👉 Changelog compare changes 🔥 Performance nitro: Directly import nuxt package version (#34567) vite,webpack: Use vfs for manifest + vite node server (#34666) nuxt: Clean-up build hooks + emit gc'd snapshots (#34587) nuxt: Skip key watcher when useAsyncData key is static (#34…
v4.4.4