@vue/typescript-plugin version 2.0.13 introduces subtle but crucial updates compared to its predecessor, version 2.0.12. Both versions serve as essential plugins enhancing TypeScript's capabilities within Vue.js projects, streamlining the development experience by providing better language support in your IDE. They seamlessly integrate with tsserver and typescript-language-server, ensuring strong type checking, autocompletion, and other valuable language features directly within your code editor. The core functionality remains consistent, focusing on improving the developer workflow when writing Vue components with TypeScript.
The key difference lies in the dependency updates. Version 2.0.13 upgrades @volar/typescript from 2.2.0-alpha.7 to 2.2.0-alpha.8. While seemingly minor, this @volar/typescript update likely includes bug fixes, performance improvements, and potentially tweaks to the language service integration. Developers might notice enhanced responsiveness, more accurate error reporting, or better support for newer TypeScript features. Also, @vue/language-core updates to version 2.0.13 from 2.0.12. The update introduces changes to the core language tooling impacting how Vue single-file components (SFCs) are analyzed and processed in TypeScript projects. If you're already using @vue/typescript-plugin, upgrading to 2.0.13 is recommended to benefit from these latest improvements and ensure compatibility with the evolving Vue and TypeScript ecosystems. The releaseDate also shows a time difference of two days, suggesting the newer version addresses recent needs and potential fixes.
All the vulnerabilities related to the version 2.0.13 of the package
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
A vulnerability has been discovered in vue-template-compiler, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code. Vue 2 has reached End-of-Life. This vulnerability has been patched in Vue 3.
