RepoJournal
Vue.js @vuejs
152 wires and counting

$ follow Vue.js

Keep up with Vue.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-08
stories 8
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

DEVTOOLS 8.1.2 SHIPS WITH VAPOR SUPPORT AND CSP HARDENING

By RepoJournal · Filed · About Vue.js · Composed from the cited sources · methodology

skirtles-code
1 person shipped this
skirtles-code @skirtles-code 1 cited

Vue DevTools locked down Trusted Types CSP injection while expanding to support Vapor apps in the latest release.

DevTools v8.1.2 [1] landed with two critical moves: a security-first fix [2] that replaces raw script injection with TrustedScriptURL under strict Content Security Policy, and expanded framework coverage via `vite-plugin-vue-inspector` bumped to handle Vapor [3]. The release also cleaned house by removing the broken AssetDropZone.vue file [4] that was dragging TypeScript checks down, and fixed Router object introspection that was causing noise in the state inspector [1]. For teams running CSP: strict or shipping Vapor codebases, this is your upgrade path.

$ ls vuejs/reviews/ # the step-back reads

the week in review eslint-plugin-vue migrates 26 rules to TypeScript the month in review create-vue 3.24.0 adds tsgo option, tighter templates
Full archive → Weekly reviews →

Quick answers

What shipped in Vue.js on May 8, 2026?
Vue DevTools locked down Trusted Types CSP injection while expanding to support Vapor apps in the latest release. In total, 4 commits, 3 pull requests, and 1 releases landed.
Who contributed to Vue.js on May 8, 2026?
1 developer shipped this update, including skirtles-code.
What were the notable Vue.js updates?
v8.1.2, fix(vite): use TrustedScriptURL for overlay injection under Trusted Types CSP (#1094), and feat: bump `vite-plugin-vue-inspector` to support vapor app (#1096).
♥

$ log @vuejs --recent

language-tools trims its HTML data workflow 1 shipped Language-tools moves to trusted publishing, fixes hover and nav regressions 9 shipped language-tools drops a @ts-ignore for inline handler $event 7 shipped Volar smooths strict JS diagnostics, router fixes native hash scroll 13 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training GSM8K scoring parses answers as exact decimals AI Red Teaming PyRIT closes a judge-spoofing hole, promptfoo accepts Langfuse v6

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.