cloudflare/vinext v0.0.41

v0.0.41

Repository: cloudflare/vinext

Tag: v0.0.41

Published: 2026-04-09T08:18:25Z

Prerelease: no

Release notes:

What's Changed

New Features

• Added Content Security Policy (CSP) support for enhanced security

Bug Fixes

• Fixed font call range tracking during plugin transformations
• Fixed RequestCookies validation to prevent invalid Cookie header mutations
• Fixed URL scheme detection to properly handle control characters
• Fixed app router to reject cyclic Flight payloads in server actions, preventing infinite loops
• Fixed middleware header merging to use proper override semantics in app routes
• Fixed parallel slot parameter handling to correctly apply override params to segment maps
• Fixed middleware header merging for HTML responses to use override semantics
• Silenced unnecessary IMPORT_IS_UNDEFINED warnings for proxy.ts files

Internal / Chores

• Updated @clerk/nextjs compatibility status from unsupported to partial
• Rebuilt lockfile for dependency consistency

Contributors

@hyoban @james-elicx @Divkix @Shorebirdmgmt @southpolesteve @NathanDrake2406