🚨 Breaking Changes

• server: Default CORS origin to "*" and support async origin options  -  by @dinwwwh in #1914 (519c3)

   🚀 Features

• openapi: Add allow option to OpenAPIReferenceHandlerPlugin  -  by @dinwwwh in #1911 (4e592)

   🐞 Bug Fixes

• Stop error-code lookups resolving through Object.prototype  -  by @dinwwwh in #1913 (0b4dd)
• evlog: Do not log ErrorEvent from event stream response bodies  -  by @dinwwwh in #1918 (a9b4f)
• json-schema: Keep sibling union branches that share a $defs entry  -  by @dinwwwh in #1927 (d7e45)
• nest: Honor routed request during input decoding  -  by @Gyeonghun-Park in #1922 (8a3e0)
• server: Let batch request headers win over sub-request headers  -  by @dinwwwh in #1912 (101a7)

    View changes on GitHub

   🚀 Features

• msw: Add @orpc/experimental-msw for typed MSW request handlers  -  by @dinwwwh in #1899 (c054d)

   🐞 Bug Fixes

• client: Resolve default fetch lazily so interception tools work regardless of link construction order  -  by @dinwwwh in #1901 (aff6c)

    View changes on GitHub

   🚀 Features

• Add oRPC agent skills and publish them for discovery  -  by @dinwwwh in #1884 (b0842)
• node:
  • Resolve tmp file upload body limits per request  -  by @dinwwwh in #1881 (5f023)
  • Add batch response compression plugin  -  by @dinwwwh in #1882 (b6a88)

    View changes on GitHub

   🚀 Features

• node: Add TmpFileUploadHandlerPlugin  -  by @dinwwwh in #1863 (a2142)
• server: Add timeout handler plugin  -  by @dinwwwh in #1858 (38df6)

    View changes on GitHub

   🚀 Features

• node:
  • Add @orpc/node package with StaticFileHandlerPlugin  -  by @dinwwwh in #1819 (70db4)
• rpc, openapi:
  • Improve malformed response handling in RPCLink and OpenAPILink  -  by @dinwwwh in #1836 (b4c00)
• rpc,openapi:
  • Add end-to-end HTTP QUERY support  -  by @aldotestino in #1844 (2bc38)
• server:
  • Make CORS plugin origin options sync  -  by @dinwwwh in #1839 (6f615)
  • Replace simple CSRF protection with GET method CSRF protection  -  by @dinwwwh in #1846 (9fab6)
• server,contract,ai-sdk:
  • Merge stacked object input schemas  -  by @dinwwwh in #1851 (4fd06)

   🐞 Bug Fixes

• client:
  • Forward error batch responses instead of parsing them  -  by @dinwwwh in #1847 (bc0f7)
  • Respect user-provided mapSubresponse in BatchLinkPlugin  -  by @dinwwwh in #1848 (1d6db)

    View changes on GitHub

   🚀 Features

• server: Add MethodOverrideHandlerPlugin  -  by @dinwwwh in #1805 (07199)

   🐞 Bug Fixes

• ai-sdk: Keep output validation enabled for tool procedures  -  by @dinwwwh in #1791 (f36f8)
• client: Preserve subclass prototype chain in cloneORPCError  -  by @dinwwwh in #1801 (37d88)
• nest: Keep non-contract params and harden path param handling  -  by @dinwwwh in #1818 (99ce3)
• openapi: Preserve event iterator return type in JsonifiedClient  -  by @dinwwwh in #1797 (adde7)
• server: Reject non-GET sub-requests in GET batch requests  -  by @dinwwwh in #1813 (0c089)
• shared: Prevent clone() from re-parenting the cloned object  -  by @dinwwwh in #1790 (9f9d6)

    View changes on GitHub

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

• client: Stop client proxies from resolving primitive coercion over the network — by @dinwwwh in #1815 [(149c1)](149c13ea)

[View changes on GitHub](v1.14.15...v1.15.0)

   🐞 Bug Fixes

• openapi: Preserve event iterator return type in JsonifiedClient  -  by @dinwwwh in #1798 (17551)

    View changes on GitHub

   🚀 Features

• rpc: Restrict RPC handlers to POST, PUT, PATCH and DELETE by default  -  by @dinwwwh in #1778 (59952)

   🐞 Bug Fixes

• nest: Apply method-level decorators to router-contract @Implement routes  -  by @dinwwwh in #1776 (a0afe)

    View changes on GitHub

   🐞 Bug Fixes

• nest: Run method-level guards on routes synthesized by router-contract @Implement  -  by @dinwwwh in #1775 (2b81d)

    View changes on GitHub