nitro-nightly 3.0.1-20251113-100129-fde97b54 → 3.0.1-20251116-142138-25872617

package/dist/_presets.mjs

@@ -199,6 +199,7 @@ async function writeAmplifyFiles(nitro) {
 //#region src/presets/aws-amplify/preset.ts
 const awsAmplify = defineNitroPreset({
 	entry: "./aws-amplify/runtime/aws-amplify",
+	manifest: { deploymentId: process.env.AWS_JOB_ID },
 	serveStatic: true,
 	output: {
 		dir: "{{ rootDir }}/.amplify-hosting",
@@ -858,6 +859,7 @@ const unenvDeno = {
 //#region src/presets/deno/preset.ts
 const denoDeploy = defineNitroPreset({
 	entry: "./deno/runtime/deno-deploy",
+	manifest: { deploymentId: process.env.DENO_DEPLOYMENT_ID },
 	exportConditions: ["deno"],
 	node: false,
 	noExternals: true,
@@ -1181,6 +1183,7 @@ function getGeneratorString(nitro) {
 //#region src/presets/netlify/preset.ts
 const netlify = defineNitroPreset({
 	entry: "./netlify/runtime/netlify",
+	manifest: { deploymentId: process.env.DEPLOY_ID },
 	output: {
 		dir: "{{ rootDir }}/.netlify/functions-internal",
 		publicDir: "{{ rootDir }}/dist/{{ baseURL }}"
@@ -1204,6 +1207,7 @@ const netlify = defineNitroPreset({
 const netlifyEdge = defineNitroPreset({
 	extends: "base-worker",
 	entry: "./netlify/runtime/netlify-edge",
+	manifest: { deploymentId: process.env.DEPLOY_ID },
 	exportConditions: ["netlify"],
 	output: {
 		serverDir: "{{ rootDir }}/.netlify/edge-functions/server",
@@ -1235,6 +1239,7 @@ const netlifyEdge = defineNitroPreset({
 }, { name: "netlify-edge" });
 const netlifyStatic = defineNitroPreset({
 	extends: "static",
+	manifest: { deploymentId: process.env.DEPLOY_ID },
 	output: {
 		dir: "{{ rootDir }}/dist",
 		publicDir: "{{ rootDir }}/dist/{{ baseURL }}"
@@ -1415,6 +1420,16 @@ function generateBuildConfig(nitro, o11Routes) {
 				if (routeRules.headers) route = defu(route, { headers: routeRules.headers });
 				return route;
 			}),
+			...nitro.options.vercel?.skewProtection && nitro.options.manifest?.deploymentId ? [{
+				src: "/.*",
+				has: [{
+					type: "header",
+					key: "Sec-Fetch-Dest",
+					value: "document"
+				}],
+				headers: { "Set-Cookie": `__vdpl=${nitro.options.manifest.deploymentId}; Path=${nitro.options.baseURL}; SameSite=Strict; Secure; HttpOnly` },
+				continue: true
+			}] : [],
 			...nitro.options.publicAssets.filter((asset) => !asset.fallthrough).map((asset) => joinURL(nitro.options.baseURL, asset.baseURL || "/")).map((baseURL) => ({
 				src: baseURL + "(.*)",
 				headers: { "cache-control": "public,max-age=31536000,immutable" },
@@ -1542,6 +1557,8 @@ async function writePrerenderConfig(filename, isrConfig, bypassToken) {
 //#region src/presets/vercel/preset.ts
 const vercel = defineNitroPreset({
 	entry: "./vercel/runtime/vercel.{format}",
+	manifest: { deploymentId: process.env.VERCEL_DEPLOYMENT_ID },
+	vercel: { skewProtection: !!process.env.VERCEL_SKEW_PROTECTION_ENABLED },
 	output: {
 		dir: "{{ rootDir }}/.vercel/output",
 		serverDir: "{{ output.dir }}/functions/__server.func",
@@ -1575,6 +1592,8 @@ const vercel = defineNitroPreset({
 });
 const vercelStatic = defineNitroPreset({
 	extends: "static",
+	manifest: { deploymentId: process.env.VERCEL_DEPLOYMENT_ID },
+	vercel: { skewProtection: !!process.env.VERCEL_SKEW_PROTECTION_ENABLED },
 	output: {
 		dir: "{{ rootDir }}/.vercel/output",
 		publicDir: "{{ output.dir }}/static/{{ baseURL }}"

package/dist/types/index.d.mts

@@ -1780,6 +1780,13 @@ interface VercelServerlessFunctionConfig {
 }
 interface VercelOptions {
   config: VercelBuildConfigV3;
+  /**
+   * If you have enabled skew protection in the Vercel dashboard, it will
+   * be enabled by default.
+   *
+   * You can disable the Nitro integration by setting this option to `false`.
+   */
+  skewProtection?: boolean;
   /**
    * If you are using `vercel-edge`, you can specify the region(s) for your edge function.
    * @see https://vercel.com/docs/concepts/functions/edge-functions#edge-function-regions
@@ -2851,6 +2858,9 @@ interface NitroOptions extends PresetOptions {
   ssrRoutes: string[];
   serveStatic: boolean | "node" | "deno" | "inline";
   noPublicDir: boolean;
+  manifest?: {
+    deploymentId?: string;
+  };
   features: {
     /**
      * Enable runtime hooks for request and response.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nitro-nightly",
-  "version": "3.0.1-20251113-100129-fde97b54",
+  "version": "3.0.1-20251116-142138-25872617",
   "description": "Build and Deploy Universal JavaScript Servers",
   "homepage": "https://nitro.build",
   "repository": "nitrojs/nitro",