release: v4.5.6

sapphi-red · sapphi-red · commit 9e460f58f91f · 2025-01-20T19:07:13.000+09:00
diff --git a/.tool-versions b/.tool-versions
@@ -0,0 +1 @@
+nodejs 20.18.1
diff --git a/packages/vite/CHANGELOG.md b/packages/vite/CHANGELOG.md
@@ -1,3 +1,11 @@
+## <small>4.5.6 (2025-01-20)</small>
+
+* fix!: check host header to prevent DNS rebinding attacks and introduce `server.allowedHosts` ([ef1049d](https://github.com/vitejs/vite/commit/ef1049d))
+* fix!: default `server.cors: false` to disallow fetching from untrusted origins ([07b36d5](https://github.com/vitejs/vite/commit/07b36d5))
+* fix: verify token for HMR WebSocket connection ([c065a77](https://github.com/vitejs/vite/commit/c065a77))
+
+
+
 ## <small>4.5.5 (2024-09-16)</small>
 
 
diff --git a/packages/vite/package.json b/packages/vite/package.json
@@ -1,6 +1,6 @@
 {
   "name": "vite",
-  "version": "4.5.5",
+  "version": "4.5.6",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",
