@cloudflare/vite-plugin@1.42.0
📦 cloudflare-workersView on GitHub →
✨ 2 features🐛 2 fixes🔧 5 symbols
Summary
This release introduces an experimental `cf-vite build` command and patches a high-severity DoS vulnerability in the `ws` dependency. It also improves compatibility with Vitest 4 regarding Node.js built-in module resolution.
Migration Steps
- If using `cf-vite build`, ensure you have a `cloudflare.config.ts` file at the project root, as this command now forces `experimental.newConfig` and `experimental.newConfig.cfBuildOutput` to be on.
✨ New Features
- Added a `build` command to the experimental, internal `cf-vite` delegate binary, which runs Vite's full multi-environment app build and enables the experimental Build Output API by default, requiring a `cloudflare.config.ts`.
- The `cf-vite dev` delegate now forces experimental new config on by default.
🐛 Bug Fixes
- Dependency `ws` bumped from 8.20.1 to 8.21.0 to address a remote memory-exhaustion DoS vulnerability (GHSA-96hv-2xvq-fx4p / CVE-2026-48779) in older versions.
- The Cloudflare Vite plugin now correctly allows `resolve.external` configurations in Worker environments when they contain only Node.js built-in module names (e.g., `fs` or `node:fs`), resolving an incompatibility error when used with Vitest 4.