Vue 2.7 NES Release Notes

NES Releases

2.7.22 (NES) - October 17th, 2024

Notes

• Internal build-only issues required a re-release to fix entry points for the SFC compiler when imported deeply via vue package

2.7.21 (NES) - October 4, 2024

Bug Fixes

• server-renderer, webpack-plugin: Depend on secure lodash@4.17.21 instead of single-function legacy packages lodash.template@4.5.0 and lodash.uniq@4.5.0

2.7.20 (NES) - July 25, 2024

Bug Fixes

• Improve parser processing for <script>, <style>, and <textarea> tags to patch CVE-2024-9506 (low-severity vulnerability)

2.7.19 (NES) - June 3, 2024

Bug Fixes

• template-compiler: Sanitize ASTNodes when constructing AST tree to patch CVE-2024-6783 (medium-severity vulnerability)
• lodash.template: (used in server-side template compilation) Updated to patch CVE-2021-23337 (high-severity vulnerability)

2.7.18 (NES) - January 2, 2024

Notes

• This release contains no functional changes from OSS 2.7.16
• This release mainlines the final OSS 2.7.16 into NES 2.7.18 release, including all OSS commits merged in December 2023

2.7.17 (NES) - September 18, 2023

Bug Fixes

• template-compiler: Resolves issue related to NES repackaging that would erroneously report mismatched versions between Vue NES & template-compiler

2.7.16 (NES) - August 20, 2023

Notes

• This release contains no functional changes from OSS 2.7.15
• This release mainlines OSS 2.7.15 into NES 2.7.16

2.7.15 (NES) - August 15, 2023

Notes

• This release contains no functional changes
• Resolved a sporadic issue where certain build/test tools could not resolve the aliased vue package

2.7.14 (NES) - July 31, 2023

Notes

• This release represents the NES forking point from OSS Vue 2.7.14 and contains no functional changes
• Only non-functional files (licensing, copyright, packaging, etc) required for NES distribution were changed

OSS Vue Release Notes

2.7.16 - December 24, 2023

Bug Fixes

• lifecycle: Ensure component effect scopes are disconnected (56ce7f8), closes #13134

2.7.16-beta.2 - December 14, 2023

Bug Fixes

• Account for nested render calls (db9c566), closes #13131
• types: Export more types for v3 alignment (jsx / component options) (895669f), closes #13078 #13128

2.7.16-beta.1 - December 8, 2023

Bug Fixes

• compiler-sfc: Check template ref usage (83d9535), closes #12984
• compiler-sfc: Fix rewriteDefault edge cases (25f97a5), closes #13060 #12892 #12906
• keep-alive: Fix keep-alive memory leak (2632249), closes #12827
• keep-alive: Fix memory leak without breaking transition tests (e0747f4)
• props: Should not unwrap props that are raw refs (08382f0), closes #12930
• shallowReactive: Should track value if already reactive when set in shallowReactive (0ad8e8d)
• style: Always set new styles (f5ef882), closes #12901 #12946
• types: Fix shallowRef's return type (a174c29), closes #12978
• types: Fix type augmentation and compiler-sfc types w/moduleResolution: bundler (de0b97b), closes #13106
• types: Provide types for built-in components (3650c12), closes #13002
• types: Type VNodeChildren should allow type number (24fcf69), closes #12973
• utils: Unwrap refs when stringifying values in template (ae3e4b1), closes #12884 #12888
• watch: New property addition should trigger deep watcher with getter (6d857f5), closes #12967 #12972

...Additional historical release notes available in the OSS Vue 2 Github Repository