Vue-tsc 2.0.13 is a minor version update to the Vue TypeScript compiler, designed to enhance the developer experience when working with Vue.js projects using TypeScript. Released on April 12, 2024, it follows closely after version 2.0.12 (released April 10, 2024), suggesting a rapid iteration cycle focused on bug fixes and incremental improvements. The core functionality remains consistent, centering on providing robust type checking and compilation for Vue components written in TypeScript.
Key changes between the two versions involve updates to internal dependencies. Vue-tsc 2.0.13 utilizes @volar/typescript version 2.2.0-alpha.8, a step up from 2.2.0-alpha.7 in the previous version. This likely incorporates improvements and refinements within the Volar TypeScript language service, potentially affecting type inference, error reporting, and overall language support within Vue templates and components. @vue/language-core is also updated from 2.0.12 to 2.0.13. This update might include minor bug fixes or internal improvements to the language core. The semver dependency remains unchanged at version ^7.5.4.
For developers, this update signifies a commitment to ongoing refinement and optimization of the Vue TypeScript development workflow. While the core usage remains the same (npm i vue-tsc -D for installation), users can anticipate potentially better performance, more accurate type checking, and enhanced compatibility with the latest Vue.js features. The increase in unpackedSize from 4976 to 5440 is also a sign of some kind of internal changes. Staying up-to-date with these minor versions ensures access to the most stable and feature-rich environment for building type-safe Vue.js applications.
All the vulnerabilities related to the version 2.0.13 of the package
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
A vulnerability has been discovered in vue-template-compiler, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code. Vue 2 has reached End-of-Life. This vulnerability has been patched in Vue 3.
