v0.0.41

What's Changed

New Features

• Added Content Security Policy (CSP) support for enhanced security

Bug Fixes

• Fixed font call range tracking during plugin transformations
• Fixed RequestCookies validation to prevent invalid Cookie header mutations
• Fixed URL scheme detection to properly handle control characters
• Fixed app router to reject cyclic Flight payloads in server actions, preventing infinite loops
• Fixed middleware header merging to use proper override semantics in app routes
• Fixed parallel slot parameter handling to correctly apply override params to segment maps
• Fixed middleware header merging for HTML responses to use override semantics
• Silenced unnecessary IMPORT_IS_UNDEFINED warnings for proxy.ts files

Internal / Chores

• Updated @clerk/nextjs compatibility status from unsupported to partial
• Rebuilt lockfile for dependency consistency

Contributors

@hyoban
@james-elicx
@Divkix
@Shorebirdmgmt
@southpolesteve
@NathanDrake2406