48 minutes ago
slate

slate-react@0.147.6

Patch Changes

  • #6364 6f00413 Thanks @dannelundqvist! - Copy and cut now use the selection the user just made. Selection changes reach editor.selection a little later than they happen, and copy and cut wrote the clipboard from editor.selection, so a copy straight after selecting, such as Ctrl+A followed at once by Ctrl+C, could copy the previous selection or nothing at all. Copy and cut now process any pending selection change first, before an onCopy or onCut handler runs.
1 hours ago
bootstrap

v5.3.9

What's Changed

CSS

JavaScript

Docs

Build and maintenance

Dependency updates (119 pull requests)

New Contributors

Full Changelog: https://github.com/twbs/bootstrap/compare/v5.3.8...v5.3.9

1 hours ago
astro

astro@7.4.11

Patch Changes

  • #18641 08e2cee Thanks @astro-factory! - Validates the protocol, host and port from X-Forwarded-Proto, X-Forwarded-Host and X-Forwarded-Port together against each security.allowedDomains entry, instead of one at a time:

    • A forwarded protocol is only applied when an entry allows it for the host in use.
    • A forwarded port is only applied when the entry for that host lists it.
    • A forwarded host without a forwarded protocol is validated with the protocol of the server.
    • An entry with port: '443' (or '80' for http) now matches a host that doesn't include a port.
  • #18651 93a9057 Thanks @umeraamir69! - Returns 400 Bad Request for malformed percent-encoded paths in the dev server and static preview instead of bubbling into a 500

  • #18672 e901468 Thanks @astro-factory! - Fixes astro check reporting @astrojs/check as missing when the package is installed but throws while loading. The original error is now shown instead of an install prompt.

  • #18641 08e2cee Thanks @astro-factory! - Fixes security.allowedDomains accepting non-HTTP(S) X-Forwarded-Proto values (such as ftp or ws) when the list mixes patterns with and without a protocol

  • #18686 62bb716 Thanks @astro-factory! - Fixes astro build deleting the license file generated by Vite's build.license option. Astro now removes only its own Vite manifest from the .vite/ output folder.

  • #18629 e9916e1 Thanks @decrek! - Fixes spreading an object onto an element with scoped styles changing that object. When the same object was spread on every render, for example a constant imported from another module, its class grew with every request.

  • #18641 08e2cee Thanks @astro-factory! - Tightens how security.allowedDomains validates the Host and X-Forwarded-Host headers. Only a plain hostname with an optional port is accepted, and the validated host is applied to Astro.url exactly as it was matched.

  • Updated dependencies [d13beeb, e9916e1]:

    • @astrojs/markdown-satteri@0.4.9
    • @astrojs/runtime@0.1.1
    • @astrojs/vite-plugin-astro@0.1.2
1 hours ago
astro

@astrojs/svelte@9.1.5

Patch Changes

  • Updated dependencies []:
    • @astrojs/svelte-renderer@0.1.1
1 hours ago
astro

@astrojs/solid-js-renderer@0.1.1

Patch Changes

  • Updated dependencies [e9916e1]:
    • @astrojs/runtime@0.1.1
1 hours ago
astro

@astrojs/solid-js@7.1.5

Patch Changes

  • Updated dependencies []:
    • @astrojs/solid-js-renderer@0.1.1
1 hours ago
astro

@astrojs/vite-plugin-astro@0.1.2

Patch Changes

  • Updated dependencies [e9916e1]:
    • @astrojs/runtime@0.1.1
1 hours ago
astro

@astrojs/svelte-renderer@0.1.1

Patch Changes

  • Updated dependencies [e9916e1]:
    • @astrojs/runtime@0.1.1
1 hours ago
astro

@astrojs/vue-renderer@0.1.1

Patch Changes

  • Updated dependencies [e9916e1]:
    • @astrojs/runtime@0.1.1
1 hours ago
astro

@astrojs/vue@7.1.5

Patch Changes

  • Updated dependencies []:
    • @astrojs/vue-renderer@0.1.1