v3.0.1

Compare Source

• Fix a low-severity issue affecting verify
  • An attacker with an access to secret key was able to produce signatures, which were valid for all messages for their secret key
  • Impact: low, primarily systems which rely on non-repudiation
  • Special thanks to folks who've reported the issue: Yituo He (a.k.a. @​HaveYouTall) and @​sunyxedu
• Speed-up everything 1.5x using new modP with HAC 14.47, HAC 14.50.
  • Contributed by @​georg95 in #​117.
  • keygen x 10,594 ops/sec @​ 94μs/op => 14,610 ops/sec @​ 68μs/op
  • sign x 5,267 ops/sec @​ 189μs/op => 7,225 ops/sec @​ 138μs/op
  • verify x 1,203 ops/sec @​ 830μs/op => 1,972 ops/sec @​ 506μs/op

Full Changelog: paulmillr/noble-ed25519@3.0.0...3.0.1

v1.58.2

Compare Source

v2.55.0

Compare Source

Minor Changes

• feat: page and layout params with matchers are now type narrowed in $app/types, leading to better type safety when working with params in $app/types, $app/state, and hooks. (#​15502)

v2.54.0

Compare Source

Minor Changes

• feat: allow error boundaries to catch errors on the server (#​15308)

Patch Changes

• chore: upgrade devalue (#​15535)

• fix: don't wait for remote functions that are not awaited in the template (#​15280)

• feat: allow resolve() to accept pathnames with a search string and/or hash (#​15458)

• chore: remove deprecation warnings for config.kit.files.* options when validating the Svelte config file (#​15482)

• fix: handles form target attribute in remote form redirects (#​15457)

v2.53.4

Compare Source

Patch Changes

• fix: avoid Vite warning about unknown codeSplitting option (#​15451)

v2.53.3

Compare Source

Patch Changes

• fix: prevent overlapping file metadata in remote functions form (faba869)

v2.53.2

Compare Source

Patch Changes

• fix: server-render nested form value sets (#​15378)

• fix: use deep partial types for form remote functions .value() and .set(...) (#​14837)

• fix: provide correct url info to remote functions (#​15418)

• fix: allow optional types for remote query/command/prerender functions (#​15293)

• fix: allow commands in more places (#​15288)

v2.53.1

Compare Source

Patch Changes

• fix: address warning about inlineDynamicImports when using Vite 8 (#​15403)

v2.53.0

Compare Source

Minor Changes

• feat: support Vite 8 (#​15024)

Patch Changes

• fix: remove event listeners on form attachment cleanup (#​15286)

• fix: apply queries refreshed in a form remote function when a redirect is thrown (#​15362)

v2.52.2

Compare Source

Patch Changes

• fix: validate form file information to prevent amplification attacks (3e607b3)

• chore: upgrade devalue and svelte (#​15339)

• fix: parse file offset table more strictly (f47c01b)

v2.52.0

Compare Source

Minor Changes

• feat: match function to map a path back to a route id and params (#​14997)

Patch Changes

• fix: respect scroll-margin when navigating to a url-supplied anchor (#​15246)

• fix: resolve will narrow types to follow trailing slash page settings (#​15027)

v2.51.0

Compare Source

Minor Changes

• feat: add scroll property to NavigationTarget in navigation callbacks (#​15248)

  Navigation callbacks (beforeNavigate, onNavigate, and afterNavigate) now include scroll position information via the scroll property on from and to targets:

  • from.scroll: The scroll position at the moment navigation was triggered
  • to.scroll: In beforeNavigate and onNavigate, this is populated for popstate navigations (back/forward) with the scroll position that will be restored, and null for other navigation types. In afterNavigate, this is always the final scroll position after navigation completed.

  This enables use cases like animating transitions based on the target scroll position when using browser back/forward navigation.

• feat: hydratable's injected script now works with CSP (#​15048)

Patch Changes

• fix: put preloads before styles (#​15232)

• fix: suppress false-positive inner content warning when children prop is forwarded to a child component (#​15269)

• fix: fetch not working when URL is same host but different than paths.base (#​15291)

• fix: navigate to hash link when base element is present (#​15236)

• fix: avoid triggering handleError when redirecting in a remote function (#​15222)

• fix: include test directory in generated tsconfig.json alongside existing tests entry (#​15254)

• fix: generate tsconfig.json using the value of kit.files.src (#​15253)

v2.50.2

Compare Source

Patch Changes

• fix: ensure inlined CSS follows paths.assets and paths.relative settings (#​15153)

• fix: emit script CSP nonces when unsafe-inline is present if strict-dynamic is also present (#​15221)

• fix: re-export browser/dev from esm-env (#​15206)

• fix: use validated args in batch resolver in both csr and ssr (#​15215)

• fix: ensure CSS inlining includes components that are conditionally rendered (#​15153)

• fix: only match rest params with matchers when the matcher matches (#​15216)

• fix: properly handle percent-encoded anchors (e.g. <a href="#sparkles-%E2%9C%A8">) during prerendering. (#​15231)

v0.9.2

Compare Source

Patch Changes

• Updated dependencies [84dc3eb]:
  • @​tanstack/store@​0.9.2

v0.9.1

Compare Source

Patch Changes

• Updated dependencies [77c872f]:
  • @​tanstack/store@​0.9.1

v0.9.0

Compare Source

Minor Changes

• Breaking changes (#​265)

  • new Store() is now createStore()
  • new Derived() is now a derived createStore():

    const derived = createStore(() => store.state * 2)

  • new Effect() removed in favor of store.subscribe():

    const { unsubscribe } = store.subscribe(() => {
      console.log(store.state)
    })

  • Uses alien-signals under the hood for efficient reactivity

Patch Changes

• Updated dependencies [dace25f]:
  • @​tanstack/store@​0.9.0

v0.8.1

Compare Source

Patch Changes

• Updated dependencies [3096bf2]:
  • @​tanstack/store@​0.8.1

v0.9.2

Compare Source

Patch Changes

• Updated dependencies [84dc3eb]:
  • @​tanstack/store@​0.9.2

v0.9.1

Compare Source

Patch Changes

• Updated dependencies [77c872f]:
  • @​tanstack/store@​0.9.1

v0.9.0

Compare Source

Minor Changes

• Breaking changes (#​265)

  • new Store() is now createStore()
  • new Derived() is now a derived createStore():

    const derived = createStore(() => store.state * 2)

  • new Effect() removed in favor of store.subscribe():

    const { unsubscribe } = store.subscribe(() => {
      console.log(store.state)
    })

  • Uses alien-signals under the hood for efficient reactivity

Patch Changes

• Updated dependencies [dace25f]:
  • @​tanstack/store@​0.9.0

v0.8.1

Compare Source

Patch Changes

• Updated dependencies [3096bf2]:
  • @​tanstack/store@​0.8.1

v0.9.2

Compare Source

Patch Changes

• Fix a regression where mutable atoms could be updated internally with no updater and have their snapshot replaced with undefined. (#​289)

  Mutable atoms now ignore internal no-argument _update() calls, while computed atoms keep existing recomputation behavior. This prevents external-store state from disappearing during reactive graph cleanup.

v0.9.1

Compare Source

Patch Changes

• derived createStore now returns readonly store (#​278)

v0.9.0

Compare Source

Minor Changes

• Breaking changes (#​265)

  • new Store() is now createStore()
  • new Derived() is now a derived createStore():

    const derived = createStore(() => store.state * 2)

  • new Effect() removed in favor of store.subscribe():

    const { unsubscribe } = store.subscribe(() => {
      console.log(store.state)
    })

  • Uses alien-signals under the hood for efficient reactivity

v0.8.1

Compare Source

Patch Changes

• Fix Issues with Derived Fields not Retriggering (#​274)

v0.10.2

Compare Source

Patch Changes

• Updated dependencies [84dc3eb]:
  • @​tanstack/store@​0.9.2

v0.10.1

Compare Source

Patch Changes

• Updated dependencies [77c872f]:
  • @​tanstack/store@​0.9.1

v0.10.0

Compare Source

Minor Changes

• Breaking changes (#​265)

  • new Store() is now createStore()
  • new Derived() is now a derived createStore():

    const derived = createStore(() => store.state * 2)

  • new Effect() removed in favor of store.subscribe():

    const { unsubscribe } = store.subscribe(() => {
      console.log(store.state)
    })

  • Uses alien-signals under the hood for efficient reactivity

Patch Changes

• Updated dependencies [dace25f]:
  • @​tanstack/store@​0.9.0

v0.9.1

Compare Source

Patch Changes

• Updated dependencies [3096bf2]:
  • @​tanstack/store@​0.8.1

v0.9.2

Compare Source

Patch Changes

• Updated dependencies [84dc3eb]:
  • @​tanstack/store@​0.9.2

v0.9.1

Compare Source

Patch Changes

• Updated dependencies [77c872f]:
  • @​tanstack/store@​0.9.1

v0.9.0

Compare Source

Minor Changes

• Breaking changes (#​265)

  • new Store() is now createStore()
  • new Derived() is now a derived createStore():

    const derived = createStore(() => store.state * 2)

  • new Effect() removed in favor of store.subscribe():

    const { unsubscribe } = store.subscribe(() => {
      console.log(store.state)
    })

  • Uses alien-signals under the hood for efficient reactivity

Patch Changes

• Updated dependencies [dace25f]:
  • @​tanstack/store@​0.9.0

v0.8.1

Compare Source

Patch Changes

• Updated dependencies [3096bf2]:
  • @​tanstack/store@​0.8.1

v8.57.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#​12126)

❤️ Thank You

• Newton Yuan @​NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#​12080)

🩹 Fixes

• eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#​12089)
• eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#​12094)
• typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#​11355)
• eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#​12077)
• eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#​12079)
• eslint-plugin: [strict-void-return] false positives with overloads (#​12055)

❤️ Thank You

• Brad Zacher @​bradzacher
• Brian Schlenker @​bschlenk
• Evyatar Daud @​StyleShit
• James Henry @​JamesHenry
• Josh Goldberg
• Kirk Waiblinger @​kirkwaiblinger
• Moses Odutusin @​thebolarin
• Newton Yuan @​NewtonYuan
• SungHyun627 @​SungHyun627
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

🩹 Fixes

• use parser options from context.languageOptions (#​12043)

❤️ Thank You

• Brad Zacher @​bradzacher
• fnx @​DMartens
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

🚀 Features

• utils: deprecate defaultOptions in favor of meta.defaultOptions (#​11992)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#​11949)
• eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#​11984)
• eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#​11966, #​12000)
• eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#​11990)

❤️ Thank You

• Christian Rose @​chrros95
• Josh Goldberg
• Maria Solano @​MariaSolOs
• Minyeong Kim @​minyeong981
• SungHyun627 @​SungHyun627
• Yukihiro Hasegawa @​y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v6.0.5

Miscellaneous Chores

• remove Vite 8 beta from supported range (#​746) (b3f23e4)

v6.0.4

Bug Fixes

• deps: update all non-major dependencies (#​709) (924b28e)
• deps: update all non-major dependencies (#​722) (8a95809)
• deps: update all non-major dependencies (#​726) (e69d751)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#​730) (239eb6a)
• deps: update dependency rollup to ^4.57.1 (#​733) (cd0c8a8)
• deps: update upstream (#​727) (fa3ea0e)

v5.1.5

Miscellaneous Chores

• remove Vite 8 beta from supported range (#​746) (b3f23e4)

v5.1.4

Bug Fixes

• deps: update all non-major dependencies (#​726) (e69d751)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#​730) (239eb6a)

v0.5.2

Compare Source

• Support nested function calls for extraHOCs (actually fixes #​104)

v0.5.1

Compare Source

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #​105)
• Support nested function calls for extraHOCs (fixes #​104)

v0.5.0

Compare Source

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig(
  /* Main config */
  reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig({
  files: ["**/*.ts", "**/*.tsx"],
  plugins: {
    // other plugins
    "react-refresh": reactRefresh.plugin,
  },
  rules: {
    // other rules
    "react-refresh/only-export-components": [
      "warn",
      { extraHOCs: ["someLibHOC"] },
    ],
  },
});

Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #​93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

{
  "react-refresh/only-export-components": [
    "warn",
    { "extraHOCs": ["createRootRouteWithContext"] }
  ]
}

[!NOTE]
Actually createRoute functions from TanStack Router are not React HOCs, they return route objects that fake to be a memoized component but are not. When only doing createRootRoute({ component: Foo }), HMR will work fine, but as soon as you add a prop to the options that is not a React component, HMR will not work. I would recommend to avoid adding any TanStack function to extraHOCs it you want to preserve good HMR in the long term. Bluesky thread.

Because I'm not 100% sure this new logic doesn't introduce any false positive, this is done in a major-like version. This also give me the occasion to remove the hardcoded connect from the rule. If you are using connect from react-redux, you should now add it to extraHOCs like this:

{
  "react-refresh/only-export-components": ["warn", { "extraHOCs": ["connect"] }]
}

v3.21.2

Compare Source

v3.21.1

Compare Source

3.21.1 is a regularly schedule patch release.

👉 Changelog

compare changes

🩹 Fixes

• nuxt: Correct reference format of server builder (#​34177)
• nuxt: Add status/statusText getters to NuxtError (#​34188)
• schema: Add direnv and vendor to default ignore (#​34190)
• nuxt: Focus hash links after navigation (#​34193)
• nuxt: Exclude head runtime from unhead imports transform (#​34195)
• kit: Include prereleases in semver satisfy check (#​34210)
• nuxt: Watch server/ for builder:watch hook (#​34208)
• nitro: Encode unicode paths in x-nitro-prerender header (#​34202)
• nitro: Preserve error.message for fatal errors (#​34226)
• Only enable dynamic imports when ts plugin (#​34205)
• webpack: Use H3Error for 403 in dev server (#​34233)
• nuxt: Ensure NuxtError extends Error type (#​34242)
• vite: Use H3Error for 404 in dev server (#​34225)
• nuxt: Add backwards compat for #app barrel export in keyed functions (#​34199)
• nuxt: Track + re-add custom routes on hmr (#​32044)
• nuxt: Keep vnode when leaving deeper nested route (#​33778)
• vite: Prevent CSS flickering in dev mode after config changes (#​33856)
• nuxt: Do not start view transition if there is no route (#​33723)
• nuxt: Call deferHydration done on NuxtPage unmount (#​34152)
• nuxt: Handle invalid datetime in ` (#​33992)
• nuxt: Preserve middleware error status in 404 fallback (#​34148)
• nitro: Do not augment nuxt/schema (#​34255)
• nuxt: Cache manifest files to preserve buildId (#​34002)
• nuxt: Don't decode query string in SSR context URL (#​34252)
• nuxt: Allow specifying moduleDependencies by meta.name (#​34263)
• nuxt: Resolve #components import mapping conflict for packages outside rootDir (#​34139)
• vite,webpack: Use node.res to send 403/404 (#​34266)
• nitro,nuxt: Align path encoding with vue-router (#​34265)
• nitro: Augment nuxt/schema once more (9f5bb611d)

💅 Refactors

• nuxt: Prefer genObjectKey to omit unnecessary quotes (#​34245)
• nuxt: Use ComponentProps helper to extract layout props (#​34248)

📖 Documentation

• Remove link to ai guide entirely (084b5d7f2)
• Update roadmap dates (#​34166)
• Clarify shared type context limitations for custom imports (#​34194)
• Fix broken links (#​34223)
• Document payload extraction for ISR/SWR routes (#​34222)
• Update example of email validation (#​34247)
• Add documentation for keyedComposables (#​34201)

🏡 Chore

• Remove px from width attribute (e80147f7d)
• Add ai config in gitignore (#​34220)

✅ Tests

• Vitest v4 compatibility (70e147b71)
• Add runtime tests for deeply nested <NuxtPage> navigation (707a9dc44)
• Resolve merge issues in tests (85abddc54)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Matej Černý (@​cernymatej)
• Octavio Araiza (@​8ctavio)
• Muhammad Yasir Ghaffar (@​M-YasirGhaffar)
• Max (@​onmax)
• Bobbie Goede (@​BobbieGoede)
• 纸鹿/Zhilu (@​L33Z22L11)
• Florian Heuberger (@​Flo0806)
• 山吹色御守 (@​KazariEX)
• ExXTreMe315 (@​ExXTreMe315)
• Eugene (@​FlexIDK)
• abeer0 (@​iiio2)
• Jonas Thelemann ([@​dargmuesli](https://redirec