@quasar/app-webpack-v4.0.5

#quasar

Changes

● feat(app-webpack): unpin esbuild version (upstream define bug is now fixed)
● fix(app-webpack): Packaged bundle zip file is missing from bex build #17729

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

quasar-v2.17.6

#quasar

Fixes

● fix(ui/lang): chinese simplified language pack iso name #17723

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-vite-v2.0.6

#quasar

Fixes

● fix(app-vite): protect alias from being tampered with across build threads

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-webpack-v4.0.6

#quasar

Fixes

● fix(app-webpack): PWA - don't use Webpack to compile again the custom service worker (already compiled by esbuild) #17745
● fix(app-webpack): pwa > do not call quasarConf.pwa.extendPWACustomSWConf multiple times

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-vite-v2.0.7

#quasar

Changes

● fix(app-vite): filter env files keys (a-zA-Z0-9_$ chars only) #17744

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-webpack-v4.0.7

#quasar

Changes

● fix(app-webpack): filter env files keys (a-zA-Z0-9_$ chars only) #17744
● fix(app-webpack): SSR build -> only build the custom sw if ssr.pwa is enabled
● fix(app-webpack): fix defineBoot, definePreFetch, and defineRouter app wrappers (fix: #17743)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/vite-plugin-v1.9.0

#quasar

Changes

● perf(vite-plugin): load import map only when needed (#17756)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-vite-v2.0.8

#quasar

Changes

● feat(app-vite): eliminate useless empty line in src-capacitor/package.json when there is no author
● fix(app-vite): ignore workspace in capacitor installation when using pnpm

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

@quasar/app-webpack-v4.0.8

#quasar

Changes

● feat(app-webpack): eliminate useless empty line in src-capacitor/package.json when there is no author
● fix(app-webpack): ignore workspace in capacitor installation when using pnpm

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

quasar-v2.17.7

#quasar

Changes

● fix(ui): add rowsNumber to qtable slots/methods/etc. where missing (fix: #17719) (#17757)
● fix(QTable): @row-context-menu not being called when QTable is in grid mode #17758
● fix(ui): fix QOptionGroup options type #17710

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

● Becoming a sponsor on Github
● One-off donation via PayPal

source

v6.0.8

#vite

6.0.8 (2025-01-20)

● fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193
● fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108
● fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059
● fix: ensure server.close() only called once (#19204) (db81c2d), closes #19204
● fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#19174) (ad75c56), closes #19174
● fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189
● fix: use shared sigterm callback (#19203) (47039f4), closes #19203
● fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098
● fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119
● fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #19146
● chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139

source

v2.3.1

#pinia #vue_pinia #vue3_pinia

Please refer to CHANGELOG.md for details.

source

v5.4.12

#vite

5.4.12 (2025-01-20)

● fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
● fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
● fix: verify token for HMR WebSocket connection (b71a5c8)
● chore: add deps update changelog (ecd2375)

5.4.11 (2024-11-11)

● fix(deps): update dependencies of postcss-modules (ceb15db), closes #18617

5.4.10 (2024-10-23)

● fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412

source

v6.0.9

#vite

6.0.9 (2025-01-20)

● fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
● fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
● fix: verify token for HMR WebSocket connection (029dcd6)

source

#admin

Should be fixed in future posts.

v4.5.6

#vite

4.5.6 (2025-01-20)

● fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (ef1049d)
● fix!: default server.cors: false to disallow fetching from untrusted origins (07b36d5)
● fix: verify token for HMR WebSocket connection (c065a77)

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

● fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115) (e812716), closes #18115
● fix: backport #18112, fs raw query (b901438), closes #18112

4.5.3 (2024-03-24)

● fix: fs.deny with globs with directories (#16250) (96a7f3a), closes #16250

source

v4.5.7

#vite

4.5.7 (2025-01-20)

● fix: crypto.getRandomValues is not available in old Node versions (#19237) (f4d3c46), closes #19237

4.5.6 (2025-01-20)

● fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (ef1049d)
● fix!: default server.cors: false to disallow fetching from untrusted origins (07b36d5)
● fix: verify token for HMR WebSocket connection (c065a77)

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

● fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115) (e812716), closes #18115
● fix: backport #18112, fs raw query (b901438), closes #18112

source

v5.4.13

#vite

5.4.13 (2025-01-20)

● fix: try parse server.origin URL (#19241) (5946215), closes #19241

5.4.12 (2025-01-20)

● fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
● fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
● fix: verify token for HMR WebSocket connection (b71a5c8)
● chore: add deps update changelog (ecd2375)

5.4.11 (2024-11-11)

● fix(deps): update dependencies of postcss-modules (ceb15db), closes #18617

5.4.10 (2024-10-23)

● fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412

source