Skip to content

v4.9.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jun 14:39
Immutable release. Only release title and notes can be modified.
v4.9.1
6e58d98
This commit was signed with the committer’s verified signature.
fengmk2 MK (fengmk2)
GPG key ID: E0F8FB7FEC3F4DC8
Verified
Learn about vigilant mode.

What's Changed

Security

  • Do not forward credential headers (Authorization, Cookie, Proxy-Authorization) on cross-origin redirect, and clear auth/digestAuth, matching the WHATWG Fetch spec and undici's RedirectHandler (#812). Same-origin redirects are unchanged and the caller's options object is never mutated.

Dependencies

  • Update runtime dependencies: undici (^7.24.0), qs, form-data, formstream, and type-fest.

Internal

  • Migrate the toolchain to Vite+ (Vitest 4, Oxlint, Oxfmt, tsdown).
  • Two-stage release workflow with manual approval, publishing the 4.x line to the latest-4 npm dist-tag (#817).

Full Changelog: v4.9.0...v4.9.1

Assets 3
Loading