From 9e460f58f91f95972ff9683f664fa4df44b6d2af Mon Sep 17 00:00:00 2001 From: sapphi-red <49056869+sapphi-red@users.noreply.github.com> Date: Mon, 20 Jan 2025 19:07:13 +0900 Subject: [PATCH] release: v4.5.6 --- .tool-versions | 1 + packages/vite/CHANGELOG.md | 8 ++++++++ packages/vite/package.json | 2 +- 3 files changed, 10 insertions(+), 1 deletion(-) create mode 100644 .tool-versions diff --git a/.tool-versions b/.tool-versions new file mode 100644 index 00000000000000..e8fc3f8ea0e28e --- /dev/null +++ b/.tool-versions @@ -0,0 +1 @@ +nodejs 20.18.1 diff --git a/packages/vite/CHANGELOG.md b/packages/vite/CHANGELOG.md index ccee6ae6416689..f1f228fd260058 100644 --- a/packages/vite/CHANGELOG.md +++ b/packages/vite/CHANGELOG.md @@ -1,3 +1,11 @@ +## 4.5.6 (2025-01-20) + +* fix!: check host header to prevent DNS rebinding attacks and introduce `server.allowedHosts` ([ef1049d](https://github.com/vitejs/vite/commit/ef1049d)) +* fix!: default `server.cors: false` to disallow fetching from untrusted origins ([07b36d5](https://github.com/vitejs/vite/commit/07b36d5)) +* fix: verify token for HMR WebSocket connection ([c065a77](https://github.com/vitejs/vite/commit/c065a77)) + + + ## 4.5.5 (2024-09-16) diff --git a/packages/vite/package.json b/packages/vite/package.json index 25fd90cc100bb8..06935207cd4e9d 100644 --- a/packages/vite/package.json +++ b/packages/vite/package.json @@ -1,6 +1,6 @@ { "name": "vite", - "version": "4.5.5", + "version": "4.5.6", "type": "module", "license": "MIT", "author": "Evan You",