# What changed in nitropack

> 32 changes in nitropack 2 from its official release notes, upgrade guides and advisories: 4 security, 3 new APIs and options. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/nitropack/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## nitropack 2

### Security

- The Vercel skew protection cookie uses SameSite=Lax. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Nitro has a proxy scope bypass via percent-encoded path traversal in `routeRules` (2.13.4) — [security advisory](https://github.com/advisories/GHSA-5W89-W975-HF9Q)
- Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules (2.13.4) — [security advisory](https://github.com/advisories/GHSA-9PHM-9P8F-HW5M), [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.4)
- Proxy route rules reject out-of-scope requests, addressing a medium-severity vulnerability. (2.13.4) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.4)

### New APIs and options

- The Bun preset uses the hostname option for Bun.serve. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The dev worker can listen on a Unix socket or named pipe. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Vercel build output config includes framework information. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)

### Behavior and default changes

- The Cloudflare preset warns only about conflicting asset overrides. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Auto-import paths are emitted as files rather than directories. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The AWS Amplify preset supports Node.js 22 and 24 runtimes. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Cloudflare preset prefers source paths rather than #imports. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Cloudflare preset guards the nodejs_compat flag by compatibility date. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Node and Deno presets support PORT=0 for random port assignment. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Vercel preset supports Node.js 24. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)

### Tooling

- RollupConfig.plugins accepts rolldown-typed plugins. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)

### Fixes and other changes

- Vercel ISR enables passQuery when allowQuery is set. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- WebSocket upgrades are proxied for devProxy routes configured with ws. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- String rules match Windows IDs, and resolved paths are normalized on Windows. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Import attributes are preserved in the build output. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Bun preset supports setting NITRO_BUN_IDLE_TIMEOUT to 0. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Cloudflare preset detects implicit nodejs_compat when deployConfig is false. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- OpenAPI filtering removes undefined values only from array nodes. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Prerendering refuses .. only when it is a whole path segment. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- A missing public asset on disk now receives a 404 response. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Public assets are kept inside the output directory when cleaning. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Each output file is counted once in the build size report. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Sourcemap mappings are preserved for chunks containing user code. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The SWR handler respects the h3 URL. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Header-only route entries are marked as continue. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Trailing slashes are stripped from prerendered route overrides. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- Missing Wrangler observability types are added. (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)
- The Cloudflare preset uses pathe for POSIX relative paths in wrangler.json (v2). (2.13.5) — [release notes](https://github.com/nitrojs/nitro/releases/tag/v2.13.5)