• Turbopack: fix source field in CSS sourcemaps: #88225
• fix: track dynamic accesses in final runtime prerenders: #98255
• docs: add API reference pages for skipProxyUrlNormalize and skipTrailingSlashRedirect: #97967

Huge thanks to @Xanaado, @lubieowoce, and @icyJoseph for helping!

Release 2026-09-04 22:28

• solid-query: sweep X-Revalidate keys in the single-flight consumer (#11394) (f41ac714d) by @ryansolid

• @tanstack/solid-query@6.0.0-rc.3
• @tanstack/solid-query-devtools@6.0.0-rc.3
• @tanstack/solid-query-persist-client@6.0.0-rc.3

Release 2026-09-04 22:28

• solid-query: sweep X-Revalidate keys in the single-flight consumer (#11394) (f41ac714d) by @ryansolid

• @tanstack/solid-query@6.0.0-rc.3
• @tanstack/solid-query-devtools@6.0.0-rc.3
• @tanstack/solid-query-persist-client@6.0.0-rc.3

• Updated dependencies [f41ac71]:
  • @tanstack/solid-query@6.0.0-rc.3

• Updated dependencies [f41ac71]:
  • @tanstack/solid-query@6.0.0-rc.3

• Updated dependencies [f41ac71]:
  • @tanstack/solid-query@6.0.0-rc.3

• #11394 f41ac71 - Sweep X-Revalidate keys in the single-flight consumer. A mutation can declare its invalidation scope with Solid's reload/redirect revalidate option; the flight payload covers what the server recomputed, and whatever a declared key matches beyond it (parameterized instances only the client holds, queries no loader owns) is now invalidated client-side — active queries refetch in the background, inactive ones are marked stale. Keys match by queryKey prefix, mirroring Solid Router's consumption of the same header.

• Updated dependencies [f41ac71]:
  • @tanstack/solid-query@6.0.0-rc.3

• #11394 f41ac71 - Sweep X-Revalidate keys in the single-flight consumer. A mutation can declare its invalidation scope with Solid's reload/redirect revalidate option; the flight payload covers what the server recomputed, and whatever a declared key matches beyond it (parameterized instances only the client holds, queries no loader owns) is now invalidated client-side — active queries refetch in the background, inactive ones are marked stale. Keys match by queryKey prefix, mirroring Solid Router's consumption of the same header.

This release includes a fix for the following security issue:

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.