Skip to content

v2.0.0-alpha.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@TheKAdhikari TheKAdhikari released this 05 Sep 16:13
· 6 commits to main since this release
v2.0.0-alpha.1
1907d10
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Pre-release of the v2 line. Consumed through @teispace/next-maker 5.0.1.

Fixed

  • Security headers over http: Strict-Transport-Security and the CSP upgrade-insecure-requests directive are sent only when NEXT_PUBLIC_APP_URL is https. A production build served over plain http (local pnpm start, internal previews) previously made WebKit upgrade every asset request to https, so pages never hydrated. securityHeaders and buildCsp take an explicit https flag; servesHttps in src/lib/config/constants.ts derives it.
  • CI runs the Playwright suite on WebKit as well as Chromium; the smoke test asserts the https-only headers stay off over http.

Full changelog: CHANGELOG.md.

Assets 2
Loading