Nuxt prior to version 3.4.3 is vulnerable to code injection.
Release Notes
nuxt/nuxt
### [`v3.4.3`](https://togithub.com/nuxt/nuxt/releases/tag/v3.4.3)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.4.2...v3.4.3)
> 3.4.3 is a patch release with the latest bug fixes. ๐ It is expected that the next release will be v3.5, in approximately two weeks' time.
#### โ Upgrading
As usual, our recommendation for upgrading is to run:
```sh
nuxi upgrade --force
```
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.4.2...v3.4.3)
##### ๐ฉน Fixes
- **nuxt:** Don't call `timeEnd` unless we're debugging ([#20424](https://togithub.com/nuxt/nuxt/pull/20424))
- **nuxt:** Use key to force server component re-rendering ([#19911](https://togithub.com/nuxt/nuxt/pull/19911))
- **nuxt:** Add basic typings for `` ([f1ded44e8](https://togithub.com/nuxt/nuxt/commit/f1ded44e8))
- **nuxt:** Use `event.node.req` in cookie utility ([#20474](https://togithub.com/nuxt/nuxt/pull/20474))
- **deps:** Relax upper node version constraint ([#20472](https://togithub.com/nuxt/nuxt/pull/20472))
- **nuxi,schema:** Support `devServer.https: true` ([#20498](https://togithub.com/nuxt/nuxt/pull/20498))
- **nuxt:** Throw 404 when accessing `/__nuxt_error` directly ([#20497](https://togithub.com/nuxt/nuxt/pull/20497))
- **nuxt:** Use `callAsync` for executing hooks with context ([#20510](https://togithub.com/nuxt/nuxt/pull/20510))
- **nuxt:** Improved typing support for app config ([#20526](https://togithub.com/nuxt/nuxt/pull/20526))
- **nuxt:** Call `app:error` in SSR before rendering error page ([#20511](https://togithub.com/nuxt/nuxt/pull/20511))
- **nuxt:** Restrict access to single renderer outside of test/rootDir ([#20543](https://togithub.com/nuxt/nuxt/pull/20543))
- **nuxt:** Throw errors when running legacy `asyncData` ([#20535](https://togithub.com/nuxt/nuxt/pull/20535))
- **nuxt:** Transform `#components` imports into direct component imports ([#20547](https://togithub.com/nuxt/nuxt/pull/20547))
- **nuxt:** Return `RenderResponse` for redirects ([#20496](https://togithub.com/nuxt/nuxt/pull/20496))
##### ๐ Documentation
- Fix typos on docs homepage ([#20456](https://togithub.com/nuxt/nuxt/pull/20456))
- Update links to `vue-router` docs ([#20454](https://togithub.com/nuxt/nuxt/pull/20454))
- Remove RC reference and add link to vue migration build ([#20485](https://togithub.com/nuxt/nuxt/pull/20485))
- Add cdn proxy section ([#20408](https://togithub.com/nuxt/nuxt/pull/20408))
- Add a next steps link to first page of migration docs ([#20512](https://togithub.com/nuxt/nuxt/pull/20512))
- Add custom fetch composable example ([#20115](https://togithub.com/nuxt/nuxt/pull/20115))
- Adjust wrong link after repo migration ([#20536](https://togithub.com/nuxt/nuxt/pull/20536))
##### โ Tests
- Exclude default error pages from bundle test ([ba320a558](https://togithub.com/nuxt/nuxt/commit/ba320a558))
- Update snapshot ([ac598e4f4](https://togithub.com/nuxt/nuxt/commit/ac598e4f4))
##### ๐ค CI
- Publish edge release with provenance ([ec1503731](https://togithub.com/nuxt/nuxt/commit/ec1503731))
- Run release script with node 18 ([0d10e9734](https://togithub.com/nuxt/nuxt/commit/0d10e9734))
- Try releasing `nuxt-edge` with provenance ([753c4c2a3](https://togithub.com/nuxt/nuxt/commit/753c4c2a3))
- Run nuxt2 nightly release on node 14 again ([48c034cf0](https://togithub.com/nuxt/nuxt/commit/48c034cf0))
##### โค๏ธ Contributors
- Daniel Roe ([@danielroe](https://togithub.com/danielroe))
- Anthony Fu ([@antfu](https://togithub.com/antfu))
- Julien Huang ([@huang-julien](https://togithub.com/huang-julien))
- Andrew Luca ([@iamandrewluca](https://togithub.com/iamandrewluca))
- Adrien Zaganelli ([@adrienZ](https://togithub.com/adrienZ))
- Michael Gale (he/him) ([@miclgael](https://togithub.com/miclgael))
- Clรฉment Ollivier ([@clemcode](https://togithub.com/clemcode))
- Paul Melero ([@gangsthub](https://togithub.com/gangsthub))
- Jonas Thelemann ([@dargmuesli](https://togithub.com/dargmuesli))
- Johannes Przymusinski ([@cngJo](https://togithub.com/cngJo))
- Idorenyin Udoh ([@idorenyinudoh](https://togithub.com/idorenyinudoh))
### [`v3.4.2`](https://togithub.com/nuxt/nuxt/releases/tag/v3.4.2)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.4.1...v3.4.2)
> 3.4.2 is a patch release with the latest bug fixes and performance improvements
#### โจ What's new?
Apart from the normal bug fixes, we have a couple things we should call out.
1. ๐ฅ We're now on **Vite 4.3** ([#20405](https://togithub.com/nuxt/nuxt/issues/20405)). This was a performance-focused release and hopefully you'll be enjoying the speed improvements! Check out [the release announcement](https://vitejs.dev/blog/announcing-vite4-3.html) for more info.
2. ๐ It's now possible to experimentally enable `@parcel/watcher` for the Nuxt dev watcher ([#20179](https://togithub.com/nuxt/nuxt/issues/20179)). This may improve performance if you're on Windows. You'll probably also want to install `watchman` in that case.
#### โ Upgrading
As usual, our recommendation for upgrading is to run:
```sh
nuxi upgrade --force
```
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.4.1...v3.4.2)
##### ๐ฅ Performance
- **nuxt:** Share lazy component definitions ([#20259](https://togithub.com/nuxt/nuxt/pull/20259))
- Remove unused deps and add implicit deps ([#20356](https://togithub.com/nuxt/nuxt/pull/20356))
- Allow using `@parcel/watcher` for dev watcher ([#20179](https://togithub.com/nuxt/nuxt/pull/20179))
##### ๐ฉน Fixes
- **vite:** Set different cache dirs for client/server ([#20276](https://togithub.com/nuxt/nuxt/pull/20276))
- **nuxt:** Generate hi-res sourcemaps ([#20280](https://togithub.com/nuxt/nuxt/pull/20280))
- **nuxt:** Return type directly if not picking asyncData ([#20288](https://togithub.com/nuxt/nuxt/pull/20288))
- **nuxt:** Provide more helpful error when instance unavailable ([#20289](https://togithub.com/nuxt/nuxt/pull/20289))
- **nuxt:** Mark `useRequestHeaders` keys as optional ([#20286](https://togithub.com/nuxt/nuxt/pull/20286))
- **vite:** Avoid serving arbitrary file in vite-node middleware ([#20345](https://togithub.com/nuxt/nuxt/pull/20345))
- **nuxt:** Swap preloads for json/js payloads ([#20375](https://togithub.com/nuxt/nuxt/pull/20375))
- **nuxt:** Handle pages with no content and log warning ([#20373](https://togithub.com/nuxt/nuxt/pull/20373))
- **test-utils:** Import jest functions from `@jest/globals` ([#20360](https://togithub.com/nuxt/nuxt/pull/20360))
- **core,kit:** Ensure module transpilation paths are dirs ([#20396](https://togithub.com/nuxt/nuxt/pull/20396))
- **schema:** Rely on installed telemetry types ([#19640](https://togithub.com/nuxt/nuxt/pull/19640))
- **cli:** Load kit from `rootDir` when preparing project ([#20401](https://togithub.com/nuxt/nuxt/pull/20401))
- **nuxt:** Clone app config on server ([#20278](https://togithub.com/nuxt/nuxt/pull/20278))
##### ๐ Refactors
- **nuxt:** Rework and use `isJS` and `isVue` utilities consistently ([#20344](https://togithub.com/nuxt/nuxt/pull/20344))
- **vite:** Use native `isFileServingAllowed` util ([#20414](https://togithub.com/nuxt/nuxt/pull/20414))
##### ๐ Documentation
- Update links on hooks page ([#20296](https://togithub.com/nuxt/nuxt/pull/20296))
- Add brief information on debugging a nuxt app ([#20282](https://togithub.com/nuxt/nuxt/pull/20282))
- Fix vue-tsc link ([#20350](https://togithub.com/nuxt/nuxt/pull/20350))
- Update lint command for the documentation ([#20399](https://togithub.com/nuxt/nuxt/pull/20399))
##### ๐ก Chore
- Remove `@ts-ignore` and fix some issues ([#20273](https://togithub.com/nuxt/nuxt/pull/20273))
- Maintain a 'next release' PR ([e6cc4aa02](https://togithub.com/nuxt/nuxt/commit/e6cc4aa02))
- Set git user ([2a596c2b3](https://togithub.com/nuxt/nuxt/commit/2a596c2b3))
- Don't list dep updates in auto-changelog ([8234bc18d](https://togithub.com/nuxt/nuxt/commit/8234bc18d))
- Update vite to v4.3 ([#20405](https://togithub.com/nuxt/nuxt/pull/20405))
##### ๐ค CI
- Don't run ci for release branches ([f550976f7](https://togithub.com/nuxt/nuxt/commit/f550976f7))
- Give write access to changelogensets ([0518cdbff](https://togithub.com/nuxt/nuxt/commit/0518cdbff))
##### โค๏ธ Contributors
- Daniel Roe ([@danielroe](https://togithub.com/danielroe))
- Harlan Wilton ([@harlan-zw](https://togithub.com/harlan-zw))
- Preet Mishra ([@preetmishra](https://togithub.com/preetmishra))
- Lehoczky Zoltรกn ([@Lehoczky](https://togithub.com/Lehoczky))
- [@BD103](https://togithub.com/BD103)
- Anthony Fu ([@antfu](https://togithub.com/antfu))
### [`v3.4.1`](https://togithub.com/nuxt/nuxt/releases/tag/v3.4.1)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.4.0...v3.4.1)
> 3.4.1 is a patch release. We've pulled it forward slightly to fix a couple of breaking bugs in 3.4.0.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.4.0...v3.4.1)
##### ๐ฉน Fixes
- **nuxt:** Set config on `ssrContext` in spa renderer ([#20216](https://togithub.com/nuxt/nuxt/pull/20216))
- **nuxt:** Mark entire payload as reactive ([#20218](https://togithub.com/nuxt/nuxt/pull/20218))
- **nuxt:** Add missing imports to `` ([#20237](https://togithub.com/nuxt/nuxt/pull/20237))
- **nuxt:** Improve handling of redirects within middleware ([#20244](https://togithub.com/nuxt/nuxt/pull/20244))
- **nuxt:** Do not redirect when `vue-router` normalises url ([#20247](https://togithub.com/nuxt/nuxt/pull/20247))
##### ๐ Documentation
- Add a brief description of `transform`/`pick` ([#20186](https://togithub.com/nuxt/nuxt/pull/20186))
##### โ Tests
- Add js payload test suite ([#20217](https://togithub.com/nuxt/nuxt/pull/20217))
##### โค๏ธ Contributors
- Daniel Roe ([@danielroe](https://togithub.com/danielroe))
- David Kurek ([@daviddomain](https://togithub.com/daviddomain))
### [`v3.4.0`](https://togithub.com/nuxt/nuxt/releases/tag/v3.4.0)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.3.3...v3.4.0)
> **3.4.0** is a minor (feature) release for Nuxt 3 bringing exciting new features, including support for the View Transitions API, transferring rich JavaScript payloads from server to client - and much more.
#### ๐ Highlights
##### ๐ช View Transitions API Support
https://user-images.githubusercontent.com/904724/231222082-6bd4aeae-3026-407e-b3be-658df6305748.mp4
You can see a demo on https://nuxt-view-transitions.surge.sh
You may have noticed that Chromium-based browsers now ship a new web platform API: the [**View Transitions API**](https://developer.chrome.com/docs/web-platform/view-transitions/). This is an exciting new ability for native browser transitions which (among other things) have the ability to transition between unrelated elements on different pages.
Nuxt now ships with an experimental implementation, which will be under active development during the v3.4 release cycle. See the known issues in the [linked PR](https://togithub.com/nuxt/nuxt/pull/20092).
```ts
export default defineNuxtConfig({
experimental: {
viewTransition: true
}
})
```
##### โจ Payload Enhancements
We've merged a **[significant change to how Nuxt handles payloads](https://togithub.com/nuxt/nuxt/pull/19205)** (under an experimental flag). Payloads are used to send data from the server to the client when doing server-side rendering and avoid double data-fetching during the hydration phase.
```ts [nuxt.config.ts]
export default defineNuxtConfig({
experimental: {
renderJsonPayloads: true
}
})
```
With this new option enabled, this now means that **various rich JS types are supported out-of-the-box**: regular expressions, dates, Map and Set and BigInt as well as NuxtError - and Vue-specific objects like `ref`, `reactive`, `shallowRef` and `shallowReactive`.
You can find [an example](https://togithub.com/nuxt/nuxt/blob/main/test/fixtures/basic/pages/json-payload.vue) in our test suite.
This is all possible due to [Rich-Harris/devalue#58](https://togithub.com/Rich-Harris/devalue/pull/58). For a long time, Nuxt has been using our own fork of devalue owing to issues serialising Errors and other non-POJO objects, but we now have transitioned back to the original.
You can even register your own custom types with a new object-syntax Nuxt plugin:
```ts [plugins/custom-payload-type.ts]
export default definePayloadPlugin(() => {
definePayloadReducer('BlinkingText', data => data === '' && '_')
definePayloadReviver('BlinkingText', () => '')
})
```
You can read more about how this works [here](https://togithub.com/rich-harris/devalue#custom-types).
**Note**: this only affects payloads of the Nuxt app, that is, data stored within `useState`, returned from `useAsyncData` or manually injected via `nuxtApp.payload`. It does not affect data fetched from Nitro server routes via `$fetch` or `useFetch` although this is one area I am keen to explore further.
Preliminary testing shows a significant speed-up: **25% faster in total server response time** for a very minimal app with a large JSON payload, but I'd urge you to run your own tests and share the results with us.
As mentioned, we're merging this behind a flag so we can test this broadly and gather feedback on the new approach. The most significant potential change is that the payload is now no longer available on `window.__NUXT__` immediately. Instead, we now need to initialise the Nuxt app to parse the payload so any code that accesses `__NUXT__` will need to be run in a plugin or later in the Nuxt app lifecycle. Please feel free to raise an issue if you foresee or encounter issues in your projects.
##### ๐ Object-syntax Nuxt plugins
We now support object-syntax Nuxt plugins for better control over plugin *order* and easier registration of hooks.
```ts [plugins/my-plugin.ts]
export default defineNuxtPlugin({
name: 'my-plugin',
enforce: 'pre', // or 'post'
async setup (nuxtApp) {
// this is the equivalent of a normal functional plugin
},
hooks: {
// You can directly register Nuxt app hooks here
'app:created'() {
const nuxtApp = useNuxtApp()
//
}
}
})
```
In future we plan to enable build optimizations based on the metadata you pass in your Nuxt plugins.
##### ๐ ๏ธ Easier Devtools Configuration
It's even easier to enable Nuxt DevTools in your project: just set `devtools: true` in your `nuxt.config` file to enable devtools.
```js [nuxt.config.ts]
export default defineNuxtConfig({
devtools: true
})
```
If it's not already installed, Nuxt will prompt to install it locally. This means you no longer need to have Nuxt DevTools enabled globally.
**Note**: the DevTools is still experimental and under active development, so do be prepared for occasional unexpected behaviour, and please report issues directly to https://github.com/nuxt/devtools ๐
##### ๐ Layers Improvements
We now support [transforming `~`/`~~`/`@`/`@@` aliases within layers](https://togithub.com/nuxt/nuxt/pull/19986), meaning you now no longer need to use relative paths when importing within layers.
This should mean it is much easier to use a 'normal' Nuxt project as a [layer](https://nuxt.com/docs/getting-started/layers#layers) without needing to specially write it as one.
##### ๐งธ Better Context Transforms
We [now transform certain keys](https://togithub.com/nuxt/nuxt/pull/20182) of `definePageMeta` and `defineNuxtComponent` which means you should have fewer issues with a missing Nuxt instance. This includes support accessing the Nuxt instance after an `await` within `asyncData` and `setup` functions for those still using the Options API. And you no longer need to wrap `middleware` and `validate` with `defineNuxtRouteMiddleware` when using async functions.
##### โป๏ธ Ecosystem Updates
As usual, this release will pull in upstream improvements, including the new [Consola v3](https://togithub.com/unjs/consola) and [Nitropack v2.3.3](https://togithub.com/unjs/nitro) (a new minor is expected shortly).
##### ๐จ 'Breaking fixes'
We've also taken the opportunity to do some cleanup in this minor release.
1. Previously it was possible to pass the `x-nuxt-no-ssr` header (undocumented) to force SPA rendering. We've now disabled this behaviour by default but you can get it back by setting `experimental.respectNoSSRHeader` to true. Alternatively, you can set `event.context.nuxt.noSSR` on the server to force SPA rendering.
2. We've [removed the (deprecated) `#head` alias](https://togithub.com/nuxt/nuxt/pull/20111) and also disabled the [polyfill for `@vueuse/head` behaviour](https://togithub.com/nuxt/nuxt/pull/20131) by default. (It can still be enabled with `experimental.polyfillVueUseHead`.)
3. We've [removed the (deprecated) `experimental.viteNode` option](https://togithub.com/nuxt/nuxt/pull/20112). It can be configured instead with `vite.devBundler`.
4. We've [deprecated accessing public runtime config without the `public` key](https://togithub.com/nuxt/nuxt/pull/20082). This was an undocument compatibility measure with Nuxt 2 and we plan to remove it entirely in v3.5.
5. To fix a bug with our vue-router integration, we now generate a slightly different path matching syntax. If you were relying on the exact path generated, have a look at [https://github.com/nuxt/nuxt/pull/19902](https://togithub.com/nuxt/nuxt/pull/19902) for more information.
##### โ Upgrading
As usual, our recommendation for upgrading is to run:
```sh
nuxi upgrade --force
```
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
With Nuxt v3.4.0, we now advise that you explicitly install the `@types/node` version that matches your Node version.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.3.3...v3.4.0)
##### ๐ Enhancements
- **nuxt:** Warn in dev when `useRoute` is used in middleware ([#20050](https://togithub.com/nuxt/nuxt/pull/20050))
- **nuxt:** Support disabling `watch` with `useFetch` ([#19823](https://togithub.com/nuxt/nuxt/pull/19823))
- **nuxt:** Support `~`/`~~`/`@`/`@@` aliases within layers ([#19986](https://togithub.com/nuxt/nuxt/pull/19986))
- **nuxt:** Respect custom `dir.pages` in page placeholder ([#20079](https://togithub.com/nuxt/nuxt/pull/20079))
- **nuxt:** Support vue runtime compiler ([#4762](https://togithub.com/nuxt/framework/pull/4762))
- **test-utils:** Allow mounting single component for testing ([#5723](https://togithub.com/nuxt/nuxt/pull/5723))
- **nuxt:** Experimental option for rich json payloads ([#19205](https://togithub.com/nuxt/nuxt/pull/19205))
- **nuxt:** Prompt to install `devtools` when it's enabled ([#20126](https://togithub.com/nuxt/nuxt/pull/20126))
- Upgrade to consola v3.x prerelease ([#20141](https://togithub.com/nuxt/nuxt/pull/20141))
- **nuxt:** Add experimental View Transitions API support ([#20092](https://togithub.com/nuxt/nuxt/pull/20092))
- **nuxt:** Support async transform of object properties ([#20182](https://togithub.com/nuxt/nuxt/pull/20182))
- **nuxt:** Support object-syntax plugins ([#20003](https://togithub.com/nuxt/nuxt/pull/20003))
- **nuxt:** Add `experimentalNoScripts` route rule ([#19805](https://togithub.com/nuxt/nuxt/pull/19805))
- **nuxt:** Add chokidar watcher debug timing ([#20176](https://togithub.com/nuxt/nuxt/pull/20176))
##### ๐ฅ Performance
- **head:** Disable `@vueuse/head` polyfill by default ([#20131](https://togithub.com/nuxt/nuxt/pull/20131))
##### ๐ฉน Fixes
- **nuxt:** End route param tokens manually ([#19902](https://togithub.com/nuxt/nuxt/pull/19902))
- **nuxt:** Disable `x-nuxt-no-ssr` header by default ([#20024](https://togithub.com/nuxt/nuxt/pull/20024))
- **kit:** Support calling Nuxt 2 modules with module container ([#20023](https://togithub.com/nuxt/nuxt/pull/20023))
- **nuxt:** Add types for globally injected `$config` object ([#20081](https://togithub.com/nuxt/nuxt/pull/20081))
- **nuxt:** Throw error on protocol relative path in `useFetch` ([#20052](https://togithub.com/nuxt/nuxt/pull/20052))
- **nuxt:** Add `@types/node` as a peerDependency ([#20025](https://togithub.com/nuxt/nuxt/pull/20025))
- **nuxt:** Test all custom app config keys for `any` ([#20105](https://togithub.com/nuxt/nuxt/pull/20105))
- **nuxt:** Add key to `.client` component placeholders ([#20093](https://togithub.com/nuxt/nuxt/pull/20093))
- **nuxt:** Add `undefined` type for `useCookie` return value ([4f0b3c722](https://togithub.com/nuxt/nuxt/commit/4f0b3c722))
- **nuxt:** Deprecate old (pre-rc) runtimeConfig ([#20082](https://togithub.com/nuxt/nuxt/pull/20082))
- **cli:** Preview nitro build with custom dir config ([#18882](https://togithub.com/nuxt/nuxt/pull/18882))
- **nuxt:** Default nitro autoImports to `imports.autoImport` ([#20180](https://togithub.com/nuxt/nuxt/pull/20180))
- **nuxi, vite:** Suppress sourcemap + native fetch warnings ([#20198](https://togithub.com/nuxt/nuxt/pull/20198))
- **schema:** Allow `ignorePrefix` to be changed ([#20202](https://togithub.com/nuxt/nuxt/pull/20202))
##### ๐ Refactors
- **schema:** Clean up `experimental` options ([#20112](https://togithub.com/nuxt/nuxt/pull/20112))
- **nuxt:** Remove `#head` alias ([#20111](https://togithub.com/nuxt/nuxt/pull/20111))
##### ๐ Documentation
- Add interop default to dynamic vue import example ([8908aa7c5](https://togithub.com/nuxt/nuxt/commit/8908aa7c5))
- Add short note about custom `imports` configuration ([#20073](https://togithub.com/nuxt/nuxt/pull/20073))
- Re-enable docs linting and update docs ([#20084](https://togithub.com/nuxt/nuxt/pull/20084))
- Fix type of `headers` option for `useFetch` ([#20148](https://togithub.com/nuxt/nuxt/pull/20148))
- Fix typo in `@pinia/nuxt` module name ([#20199](https://togithub.com/nuxt/nuxt/pull/20199))
- Add import to server-side cookies example ([#20197](https://togithub.com/nuxt/nuxt/pull/20197))
##### ๐ก Chore
- Loosen nitro version constraint ([79ad5ac9b](https://togithub.com/nuxt/nuxt/commit/79ad5ac9b))
- Exclude new subpath from lint reordering ([b8cdef69c](https://togithub.com/nuxt/nuxt/commit/b8cdef69c))
- Use workspace ref ([b33b84d57](https://togithub.com/nuxt/nuxt/commit/b33b84d57))
- Use `overrides` ([4a6f85277](https://togithub.com/nuxt/nuxt/commit/4a6f85277))
- Correctly nest `overrides` ([a15a9b66f](https://togithub.com/nuxt/nuxt/commit/a15a9b66f))
- Remove `JITI_ESM_RESOLVE` ([#20172](https://togithub.com/nuxt/nuxt/pull/20172))
- Upgrade to consola v3 ([#20194](https://togithub.com/nuxt/nuxt/pull/20194))
##### โ Tests
- Use kb size snapshot ([#20083](https://togithub.com/nuxt/nuxt/pull/20083))
- Update bundle size snapshot ([d265abbad](https://togithub.com/nuxt/nuxt/commit/d265abbad))
##### ๐จ Styles
- Lint ([f1baa0355](https://togithub.com/nuxt/nuxt/commit/f1baa0355))
- Enable `sort-imports` eslint rule ([#20133](https://togithub.com/nuxt/nuxt/pull/20133))
##### ๐ค CI
- Enable autofix for pr linting ([#20085](https://togithub.com/nuxt/nuxt/pull/20085))
- Use autofix to update bundle size ([#20088](https://togithub.com/nuxt/nuxt/pull/20088))
- Stub project before linting ([13b853622](https://togithub.com/nuxt/nuxt/commit/13b853622))
- Lint before stubbing ([857e9cb3d](https://togithub.com/nuxt/nuxt/commit/857e9cb3d))
- Stub project before linting ([b329ed781](https://togithub.com/nuxt/nuxt/commit/b329ed781))
- Use `head_ref` for dependency deduping ([ae5df72c5](https://togithub.com/nuxt/nuxt/commit/ae5df72c5))
##### โค๏ธ Contributors
- Daniel Roe ([@danielroe](https://togithub.com/danielroe))
- Sacha Stafyniak ([@stafyniaksacha](https://togithub.com/stafyniaksacha))
- Julien Huang ([@huang-julien](https://togithub.com/huang-julien))
- Harlan Wilton ([@harlan-zw](https://togithub.com/harlan-zw))
- Nolan ([@ncphillips](https://togithub.com/ncphillips))
- Jeremy Graziani ([@AcelisWeaven](https://togithub.com/AcelisWeaven))
- JT Smith ([@rizen](https://togithub.com/rizen))
- Anthony Fu ([@antfu](https://togithub.com/antfu))
- Xjccc ([@xjccc](https://togithub.com/xjccc))
- Pooya Parsa ([@pi0](https://togithub.com/pi0))
- Cany748 ([@cany748](https://togithub.com/cany748))
- Aleksandar Trpkovski ([@Suv4o](https://togithub.com/Suv4o))
- Paul Melero ([@gangsthub](https://togithub.com/gangsthub))
### [`v3.3.3`](https://togithub.com/nuxt/nuxt/releases/tag/v3.3.3)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.3.2...v3.3.3)
> **3.3.3** is your regularly scheduled bugfix/patch release.
#### โ Upgrading
As usual, our recommendation for upgrading is to run:
```sh
nuxi upgrade --force
```
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.3.2...v3.3.3)
##### ๐ฉน Fixes
- **schema:** Prefer src to rootDir aliases ([#19937](https://togithub.com/nuxt/nuxt/pull/19937))
- **nuxt:** Don't override options signature with schema ([#19934](https://togithub.com/nuxt/nuxt/pull/19934))
- **vite:** Allow extending vue config per-environment ([#19968](https://togithub.com/nuxt/nuxt/pull/19968))
- **nuxt:** Store payloads in cache without trailing slash ([#19992](https://togithub.com/nuxt/nuxt/pull/19992))
- **webpack:** Transpile rest of nuxt runtime directories ([#19936](https://togithub.com/nuxt/nuxt/pull/19936))
- **nuxt:** Suppress handled errors ([#20002](https://togithub.com/nuxt/nuxt/pull/20002))
- **vite:** Remove separate rollup dependency ([#20013](https://togithub.com/nuxt/nuxt/pull/20013))
- **nuxt:** Sync `setResponseStatus` signature with h3 ([#19987](https://togithub.com/nuxt/nuxt/pull/19987))
- **schema:** Add export condition for nuxt2 support ([1fd491f1a](https://togithub.com/nuxt/nuxt/commit/1fd491f1a))
##### ๐ Refactors
- **vite:** Use rollup types re-exported from vite ([#20011](https://togithub.com/nuxt/nuxt/pull/20011))
##### ๐ Documentation
- Fix `pages:extend` example ([72724076b](https://togithub.com/nuxt/nuxt/commit/72724076b))
- Remove unused function call ([#20021](https://togithub.com/nuxt/nuxt/pull/20021))
- Add explanation for middleware execution order ([#20029](https://togithub.com/nuxt/nuxt/pull/20029))
- Fix a couple of typos ([b083493ec](https://togithub.com/nuxt/nuxt/commit/b083493ec))
##### ๐ก Chore
- Remove unneeded types packages ([e60cb2698](https://togithub.com/nuxt/nuxt/commit/e60cb2698))
- Use pnpm workspace protocol internally ([#19962](https://togithub.com/nuxt/nuxt/pull/19962))
- Bump version of `mkdist` to `1.2.0` ([a96451d2d](https://togithub.com/nuxt/nuxt/commit/a96451d2d))
- Fix fixture package.json files ([8c2ca23c5](https://togithub.com/nuxt/nuxt/commit/8c2ca23c5))
- Fix typo in code comment ([2f8e991b9](https://togithub.com/nuxt/nuxt/commit/2f8e991b9))
##### โ Tests
- Skip bundle size test in ecosystem-ci suites ([434e2013e](https://togithub.com/nuxt/nuxt/commit/434e2013e))
- Bump bundle size test by 100 bytes ([5785908ec](https://togithub.com/nuxt/nuxt/commit/5785908ec))
##### ๐ค CI
- Run docs linting step on node 18 ([1ae5b2c58](https://togithub.com/nuxt/nuxt/commit/1ae5b2c58))
##### โค๏ธ Contributors
- Daniel Roe ([@danielroe](https://togithub.com/danielroe))
- Ben Hong ([@bencodezen](https://togithub.com/bencodezen))
- Julien Le Coupanec ([@LeCoupa](https://togithub.com/LeCoupa))
- David Mignot ([@idflood](https://togithub.com/idflood))
### [`v3.3.2`](https://togithub.com/nuxt/nuxt/releases/tag/v3.3.2)
[Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.3.1...v3.3.2)
> **3.3.2** is a patch release with plenty of bug fixes.
#### โ Upgrading
As usual, our recommendation for upgrading is to run:
```sh
nuxi upgrade --force
```
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
#### ๐ Changelog
[compare changes](https://togithub.com/nuxt/nuxt/compare/v3.3.1...v3.3.2)
##### ๐ฅ Performance
- **nuxt:** Experimentally disable vue server renderer nitro endpoint ([#19825](https://togithub.com/nuxt/nuxt/pull/19825))
##### ๐ฉน Fixes
- **kit:** Provide name to `performance.mark()` ([#19687](https://togithub.com/nuxt/nuxt/pull/19687))
- **nuxt:** Unpause DOM updates on suspense resolve ([#19740](https://togithub.com/nuxt/nuxt/pull/19740))
- **kit:** Handle node 14 performance behaviour ([#19733](https://togithub.com/nuxt/nuxt/pull/19733))
- **webpack:** Transpile app directory ([#19773](https://togithub.com/nuxt/nuxt/pull/19773))
- **nuxt:** Unset context after app is created ([#19753](https://togithub.com/nuxt/nuxt/pull/19753))
- **cli:** Watch dist and register restart hook after nuxt is ready ([#19736](https://togithub.com/nuxt/nuxt/pull/19736))
- **nuxt:** Ignore falsy modules ([#19684](https://togithub.com/nuxt/nuxt/pull/19684))
- **nuxt:** Use `h3` utilities to set response status/code ([#19713](https://togithub.com/nuxt/nuxt/pull/19713))
- **nuxt:** Add temporary augmentation for webstorm (and docs) ([#19400](https://togithub.com/nuxt/nuxt/pull/19400))
- **nuxt:** Handle external navigation to api routes ([#19829](https://togithub.com/nuxt/nuxt/pull/19829))
- **nuxt:** Observe slot element in custom nuxt-link ([#19802](https://togithub.com/nuxt/nuxt/pull/19802))
- **nuxt:** Directly render server components ([#19605](https://togithub.com/nuxt/nuxt/pull/19605))
- **vite:** Support multiple rollup entries ([#19842](https://togithub.com/nuxt/nuxt/pull/19842))
- **nuxt:** Ignore schema types that eval to any ([#19835](https://togithub.com/nuxt/nuxt/pull/19835))
- **nuxt:** Use prerender cache for islands ([#19822](https://togithub.com/nuxt/nuxt/pull/19822))
- **nuxt:** Add missing import in islands template ([#19870](https://togithub.com/nuxt/nuxt/pull/19870))
- **kit:** Check if nuxt is restarting before updating templates ([#19830](https://togithub.com/nuxt/nuxt/pull/19830))
- **test-utils:** Allow overriding nitro options ([#19872](https://togithub.com/nuxt/nuxt/pull/19872))
- **kit:** Add legacy entrypoints for pre v3.3 usage ([#19874](https://togithub.com/nuxt/nuxt/pull/19874))
##### ๐ Documentation
- Fix auto-imports example ([#19520](https://togithub.com/nuxt/nuxt/pull/19520), [#19690](https://togithub.com/nuxt/nuxt/pull/19690))
- Update seo and meta page ([#19697](https://togithub.com/nuxt/nuxt/pull/19697))
- **introduction:** First batch of improvements ([98b9afa6d](https://togithub.com/nuxt/nuxt/commit/98b9afa6d))
- Update module author guide ([#18551](https://togithub.com/nuxt/nuxt/pull/18551))
- Add 'going further' section for custom routing ([#19565](https://togithub.com/nuxt/nuxt/pull/19565))
- Improve installation prerequisites ([c570ae272](https://togithub.com/nuxt/nuxt/commit/c570ae272))
- Update custom routing link ([8d644903b](https://togithub.com/nuxt/nuxt/commit/8d644903b))
- Add backticks ([#19721](https://togithub.com/nuxt/nuxt/pull/19721))
- Add link to layout transitions ([#19770](https://togithub.com/nuxt/nuxt/pull/19770))
- Fix typo ([#19775](https://togithub.com/nuxt/nuxt/pull/19775))
- Fix typo ([#19779](https://togithub.com/nuxt/nuxt/pull/19779))
- Fix typo ([#19785](https://togithub.com/nuxt/nuxt/pull/19785))
- Add missing comma ([#19791](https://togithub.com/nuxt/nuxt/pull/19791))
- Update legacy server examples ([#19797](https://togithub.com/nuxt/nuxt/pull/19797))
- Third-party state management and migration guide ([#19798](https://togithub.com/nuxt/nuxt/pull/19798))
- Link to module request issue template ([#19754](https://togithub.com/nuxt/nuxt/pull/19754))
- Improve swr documentation ([#18743](https://togithub.com/nuxt/nuxt/pull/18743))
- Add another example for `useAsyncData` ([#19225](https://togithub.com/nuxt/nuxt/pull/19225))
- Avoid `$fetch` in top-level ` Githubissues.
Githubissues is a development platform for aggregating issues.
This PR contains the following updates:
2.17.0
->3.4.3
GitHub Vulnerability Alerts
CVE-2023-3224
Nuxt prior to version 3.4.3 is vulnerable to code injection.
Release Notes
nuxt/nuxt
### [`v3.4.3`](https://togithub.com/nuxt/nuxt/releases/tag/v3.4.3) [Compare Source](https://togithub.com/nuxt/nuxt/compare/v3.4.2...v3.4.3) > 3.4.3 is a patch release with the latest bug fixes. ๐ It is expected that the next release will be v3.5, in approximately two weeks' time. #### โ Upgrading As usual, our recommendation for upgrading is to run: ```sh nuxi upgrade --force ``` This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem. #### ๐ Changelog [compare changes](https://togithub.com/nuxt/nuxt/compare/v3.4.2...v3.4.3) ##### ๐ฉน Fixes - **nuxt:** Don't call `timeEnd` unless we're debugging ([#20424](https://togithub.com/nuxt/nuxt/pull/20424)) - **nuxt:** Use key to force server component re-rendering ([#19911](https://togithub.com/nuxt/nuxt/pull/19911)) - **nuxt:** Add basic typings for `You can see a demo on https://nuxt-view-transitions.surge.sh You may have noticed that Chromium-based browsers now ship a new web platform API: the [**View Transitions API**](https://developer.chrome.com/docs/web-platform/view-transitions/). This is an exciting new ability for native browser transitions which (among other things) have the ability to transition between unrelated elements on different pages. Nuxt now ships with an experimental implementation, which will be under active development during the v3.4 release cycle. See the known issues in the [linked PR](https://togithub.com/nuxt/nuxt/pull/20092). ```ts export default defineNuxtConfig({ experimental: { viewTransition: true } }) ``` ##### โจ Payload Enhancements We've merged a **[significant change to how Nuxt handles payloads](https://togithub.com/nuxt/nuxt/pull/19205)** (under an experimental flag). Payloads are used to send data from the server to the client when doing server-side rendering and avoid double data-fetching during the hydration phase. ```ts [nuxt.config.ts] export default defineNuxtConfig({ experimental: { renderJsonPayloads: true } }) ``` With this new option enabled, this now means that **various rich JS types are supported out-of-the-box**: regular expressions, dates, Map and Set and BigInt as well as NuxtError - and Vue-specific objects like `ref`, `reactive`, `shallowRef` and `shallowReactive`. You can find [an example](https://togithub.com/nuxt/nuxt/blob/main/test/fixtures/basic/pages/json-payload.vue) in our test suite. This is all possible due to [Rich-Harris/devalue#58](https://togithub.com/Rich-Harris/devalue/pull/58). For a long time, Nuxt has been using our own fork of devalue owing to issues serialising Errors and other non-POJO objects, but we now have transitioned back to the original. You can even register your own custom types with a new object-syntax Nuxt plugin: ```ts [plugins/custom-payload-type.ts] export default definePayloadPlugin(() => { definePayloadReducer('BlinkingText', data => data === '