RepoJournal
Vue.js

@vuejs

Vue + the surrounding frontend ecosystem

Keep up with Vue.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

DEVTOOLS 8.1.2 SHIPS WITH VAPOR SUPPORT AND CSP HARDENING

By RepoJournal · Filed · About Vue.js

Vue DevTools locked down Trusted Types CSP injection while expanding to support Vapor apps in the latest release.

DevTools v8.1.2 [1] landed with two critical moves: a security-first fix [2] that replaces raw script injection with TrustedScriptURL under strict Content Security Policy, and expanded framework coverage via `vite-plugin-vue-inspector` bumped to handle Vapor [3]. The release also cleaned house by removing the broken AssetDropZone.vue file [4] that was dragging TypeScript checks down, and fixed Router object introspection that was causing noise in the state inspector [1]. For teams running CSP: strict or shipping Vapor codebases, this is your upgrade path.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] v8.1.2 ↗ vuejs/devtools
  2. [2] fix(vite): use TrustedScriptURL for overlay injection under Trusted Types CSP (#1094) vuejs/devtools
  3. [3] feat: bump `vite-plugin-vue-inspector` to support vapor app (#1096) vuejs/devtools
  4. [4] chore(client): remove unused file AssetDropZone.vue ↗ vuejs/devtools

Quick answers

What shipped in Vue.js on May 8, 2026?
Vue DevTools locked down Trusted Types CSP injection while expanding to support Vapor apps in the latest release. In total, 4 commits, 3 pull requests, and 1 releases landed.
Who contributed to Vue.js on May 8, 2026?
1 developer shipped this update, including skirtles-code.
What were the notable Vue.js updates?
v8.1.2, fix(vite): use TrustedScriptURL for overlay injection under Trusted Types CSP (#1094), and feat: bump `vite-plugin-vue-inspector` to support vapor app (#1096).

More from @vuejs

Daily updates, in your inbox

Follow Vue.js

Keep up with Vue.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?