CHANGELOG.md

@@ -13,144 +13,147 @@ We manage release notes in this file instead of the paginated Github Releases Pa
   <summary>Table of Contents</summary>
 
 - [Remix Releases](#remix-releases)
-  - [v2.16.2](#v2162)
+  - [v2.16.3](#v2163)
+    - [Security Notice](#security-notice)
     - [Patch Changes](#patch-changes)
-  - [v2.16.1](#v2161)
+  - [v2.16.2](#v2162)
     - [Patch Changes](#patch-changes-1)
+  - [v2.16.1](#v2161)
+    - [Patch Changes](#patch-changes-2)
   - [v2.16.0](#v2160)
     - [Minor Changes](#minor-changes)
-    - [Patch Changes](#patch-changes-2)
+    - [Patch Changes](#patch-changes-3)
     - [Updated Dependencies](#updated-dependencies)
   - [v2.15.3](#v2153)
-    - [Patch Changes](#patch-changes-3)
+    - [Patch Changes](#patch-changes-4)
     - [Updated Dependencies](#updated-dependencies-1)
   - [v2.15.2](#v2152)
-    - [Patch Changes](#patch-changes-4)
+    - [Patch Changes](#patch-changes-5)
     - [Updated Dependencies](#updated-dependencies-2)
   - [v2.15.1](#v2151)
-    - [Patch Changes](#patch-changes-5)
-  - [v2.15.0](#v2150)
     - [Patch Changes](#patch-changes-6)
+  - [v2.15.0](#v2150)
+    - [Patch Changes](#patch-changes-7)
   - [v2.14.0](#v2140)
     - [Minor Changes](#minor-changes-1)
-    - [Patch Changes](#patch-changes-7)
+    - [Patch Changes](#patch-changes-8)
     - [Updated Dependencies](#updated-dependencies-3)
     - [Changes by Package](#changes-by-package)
   - [v2.13.1](#v2131)
-    - [Patch Changes](#patch-changes-8)
+    - [Patch Changes](#patch-changes-9)
   - [v2.13.0](#v2130)
     - [What's Changed](#whats-changed)
       - [Stabilized APIs](#stabilized-apis)
     - [Minor Changes](#minor-changes-2)
-    - [Patch Changes](#patch-changes-9)
+    - [Patch Changes](#patch-changes-10)
     - [Updated Dependencies](#updated-dependencies-4)
     - [Changes by Package](#changes-by-package-1)
   - [v2.12.1](#v2121)
-    - [Patch Changes](#patch-changes-10)
+    - [Patch Changes](#patch-changes-11)
     - [Changes by Package](#changes-by-package-2)
   - [v2.12.0](#v2120)
     - [What's Changed](#whats-changed-1)
       - [Future Flag for Automatic Dependency Optimization (unstable)](#future-flag-for-automatic-dependency-optimization-unstable)
       - [Improved Single Fetch Type Safety (unstable)](#improved-single-fetch-type-safety-unstable)
       - [Updates to Single Fetch Revalidation Behavior (unstable)](#updates-to-single-fetch-revalidation-behavior-unstable)
     - [Minor Changes](#minor-changes-3)
-    - [Patch Changes](#patch-changes-11)
+    - [Patch Changes](#patch-changes-12)
     - [Updated Dependencies](#updated-dependencies-5)
     - [Changes by Package](#changes-by-package-3)
   - [v2.11.2](#v2112)
-    - [Patch Changes](#patch-changes-12)
+    - [Patch Changes](#patch-changes-13)
     - [Updated Dependencies](#updated-dependencies-6)
     - [Changes by Package](#changes-by-package-4)
   - [v2.11.1](#v2111)
-    - [Patch Changes](#patch-changes-13)
+    - [Patch Changes](#patch-changes-14)
     - [Changes by Package](#changes-by-package-5)
   - [v2.11.0](#v2110)
     - [What's Changed](#whats-changed-2)
       - [Renamed `unstable_fogOfWar` future flag to `unstable_lazyRouteDiscovery` (unstable)](#renamed-unstable_fogofwar-future-flag-to-unstable_lazyroutediscovery-unstable)
       - [Removed `response` stub in Single Fetch (unstable)](#removed-response-stub-in-single-fetch-unstable)
     - [Minor Changes](#minor-changes-4)
-    - [Patch Changes](#patch-changes-14)
+    - [Patch Changes](#patch-changes-15)
     - [Updated Dependencies](#updated-dependencies-7)
     - [Changes by Package](#changes-by-package-6)
   - [v2.10.3](#v2103)
-    - [Patch Changes](#patch-changes-15)
+    - [Patch Changes](#patch-changes-16)
     - [Updated Dependencies](#updated-dependencies-8)
     - [Changes by Package](#changes-by-package-7)
   - [v2.10.2](#v2102)
-    - [Patch Changes](#patch-changes-16)
+    - [Patch Changes](#patch-changes-17)
     - [Changes by Package](#changes-by-package-8)
   - [v2.10.1](#v2101)
-    - [Patch Changes](#patch-changes-17)
+    - [Patch Changes](#patch-changes-18)
     - [Updated Dependencies](#updated-dependencies-9)
     - [Changes by Package](#changes-by-package-9)
   - [v2.10.0](#v2100)
     - [What's Changed](#whats-changed-3)
       - [Lazy Route Discovery (a.k.a. "Fog of War")](#lazy-route-discovery-aka-fog-of-war)
     - [Minor Changes](#minor-changes-5)
-    - [Patch Changes](#patch-changes-18)
+    - [Patch Changes](#patch-changes-19)
     - [Updated Dependencies](#updated-dependencies-10)
     - [Changes by Package](#changes-by-package-10)
   - [v2.9.2](#v292)
     - [What's Changed](#whats-changed-4)
       - [Updated Type-Safety for Single Fetch](#updated-type-safety-for-single-fetch)
-    - [Patch Changes](#patch-changes-19)
+    - [Patch Changes](#patch-changes-20)
     - [Updated Dependencies](#updated-dependencies-11)
     - [Changes by Package](#changes-by-package-11)
   - [v2.9.1](#v291)
-    - [Patch Changes](#patch-changes-20)
+    - [Patch Changes](#patch-changes-21)
     - [Changes by Package](#changes-by-package-12)
   - [v2.9.0](#v290)
     - [What's Changed](#whats-changed-5)
       - [Single Fetch (unstable)](#single-fetch-unstable)
       - [Undici](#undici)
     - [Minor Changes](#minor-changes-6)
-    - [Patch Changes](#patch-changes-21)
+    - [Patch Changes](#patch-changes-22)
     - [Updated Dependencies](#updated-dependencies-12)
     - [Changes by Package](#changes-by-package-13)
   - [v2.8.1](#v281)
-    - [Patch Changes](#patch-changes-22)
+    - [Patch Changes](#patch-changes-23)
     - [Updated Dependencies](#updated-dependencies-13)
     - [Changes by Package](#changes-by-package-14)
   - [v2.8.0](#v280)
     - [Minor Changes](#minor-changes-7)
-    - [Patch Changes](#patch-changes-23)
+    - [Patch Changes](#patch-changes-24)
     - [Updated Dependencies](#updated-dependencies-14)
     - [Changes by Package](#changes-by-package-15)
   - [2.7.2](#272)
-    - [Patch Changes](#patch-changes-24)
-  - [2.7.1](#271)
     - [Patch Changes](#patch-changes-25)
+  - [2.7.1](#271)
+    - [Patch Changes](#patch-changes-26)
   - [v2.7.0](#v270)
     - [What's Changed](#whats-changed-6)
       - [Stabilized Vite Plugin](#stabilized-vite-plugin)
       - [New `Layout` Export](#new-layout-export)
       - [Basename support](#basename-support)
       - [Cloudflare Proxy as a Vite Plugin](#cloudflare-proxy-as-a-vite-plugin)
     - [Minor Changes](#minor-changes-8)
-    - [Patch Changes](#patch-changes-26)
+    - [Patch Changes](#patch-changes-27)
     - [Updated Dependencies](#updated-dependencies-15)
     - [Changes by Package](#changes-by-package-16)
   - [v2.6.0](#v260)
     - [What's Changed](#whats-changed-7)
       - [Unstable Vite Plugin updates](#unstable-vite-plugin-updates)
     - [Minor Changes](#minor-changes-9)
-    - [Patch Changes](#patch-changes-27)
+    - [Patch Changes](#patch-changes-28)
     - [Updated Dependencies](#updated-dependencies-16)
     - [Changes by Package](#changes-by-package-17)
   - [v2.5.1](#v251)
-    - [Patch Changes](#patch-changes-28)
+    - [Patch Changes](#patch-changes-29)
     - [Updated Dependencies](#updated-dependencies-17)
     - [Changes by Package](#changes-by-package-18)
   - [v2.5.0](#v250)
     - [What's Changed](#whats-changed-8)
       - [SPA Mode (unstable)](#spa-mode-unstable)
       - [Server Bundles (unstable)](#server-bundles-unstable)
     - [Minor Changes](#minor-changes-10)
-    - [Patch Changes](#patch-changes-29)
+    - [Patch Changes](#patch-changes-30)
     - [Updated Dependencies](#updated-dependencies-18)
     - [Changes by Package](#changes-by-package-19)
   - [v2.4.1](#v241)
-    - [Patch Changes](#patch-changes-30)
+    - [Patch Changes](#patch-changes-31)
     - [Updated Dependencies](#updated-dependencies-19)
     - [Changes by Package](#changes-by-package-20)
   - [v2.4.0](#v240)
@@ -159,19 +162,19 @@ We manage release notes in this file instead of the paginated Github Releases Pa
       - [`future.v3_relativeSplatPath`](#futurev3_relativesplatpath)
       - [Vite Updates (Unstable)](#vite-updates-unstable)
     - [Minor Changes](#minor-changes-11)
-    - [Patch Changes](#patch-changes-31)
+    - [Patch Changes](#patch-changes-32)
     - [Updated Dependencies](#updated-dependencies-20)
     - [Changes by Package](#changes-by-package-21)
   - [v2.3.1](#v231)
-    - [Patch Changes](#patch-changes-32)
+    - [Patch Changes](#patch-changes-33)
     - [Updated Dependencies](#updated-dependencies-21)
     - [Changes by Package](#changes-by-package-22)
   - [v2.3.0](#v230)
     - [What's Changed](#whats-changed-10)
       - [Stabilized `useBlocker`](#stabilized-useblocker)
       - [`unstable_flushSync` API](#unstable_flushsync-api)
     - [Minor Changes](#minor-changes-12)
-    - [Patch Changes](#patch-changes-33)
+    - [Patch Changes](#patch-changes-34)
     - [Updated Dependencies](#updated-dependencies-22)
     - [Changes by Package](#changes-by-package-23)
   - [v2.2.0](#v220)
@@ -180,19 +183,19 @@ We manage release notes in this file instead of the paginated Github Releases Pa
       - [New Fetcher APIs](#new-fetcher-apis)
       - [Persistence Future Flag](#persistence-future-flag)
     - [Minor Changes](#minor-changes-13)
-    - [Patch Changes](#patch-changes-34)
+    - [Patch Changes](#patch-changes-35)
     - [Updated Dependencies](#updated-dependencies-23)
     - [Changes by Package](#changes-by-package-24)
   - [v2.1.0](#v210)
     - [What's Changed](#whats-changed-12)
       - [View Transitions](#view-transitions)
       - [Stable `createRemixStub`](#stable-createremixstub)
     - [Minor Changes](#minor-changes-14)
-    - [Patch Changes](#patch-changes-35)
+    - [Patch Changes](#patch-changes-36)
     - [Updated Dependencies](#updated-dependencies-24)
     - [Changes by Package](#changes-by-package-25)
   - [v2.0.1](#v201)
-    - [Patch Changes](#patch-changes-36)
+    - [Patch Changes](#patch-changes-37)
     - [Changes by Package 🔗](#changes-by-package-)
   - [v2.0.0](#v200)
     - [Breaking Changes](#breaking-changes)
@@ -256,6 +259,20 @@ Date: YYYY-MM-DD
 
 -->
 
+## v2.16.3
+
+Date: 2025-03-28
+
+### Security Notice
+
+Fixed a security vulnerability that allowed URL manipulation and potential cache pollution via the `Host` and `X-Forwarded-Host` headers due to inadequate port sanitization.
+
+### Patch Changes
+
+- `@remix-run/express` - Better validation of `x-forwarded-host` header to prevent potential security issues ([#10553](https://github.com/remix-run/remix/pull/10553))
+
+**Full Changelog**: [`v2.16.2...v2.16.3`](https://github.com/remix-run/remix/compare/remix@2.16.2...remix@2.16.3)
+
 ## v2.16.2
 
 Date: 2025-03-19

packages/create-remix/CHANGELOG.md

@@ -1,5 +1,7 @@
 # `create-remix`
 
+## 2.16.3
+
 ## 2.16.2
 
 No significant changes to this package were made in this release. [See the repo `CHANGELOG.md`](https://github.com/remix-run/remix/blob/main/CHANGELOG.md) for an overview of all changes in v2.16.2.

packages/create-remix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-remix",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Create a new Remix app",
   "homepage": "https://remix.run",
   "bugs": {

packages/remix-architect/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@remix-run/architect`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/node@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes

packages/remix-architect/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/architect",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Architect server request handler for Remix",
   "bugs": {
     "url": "https://github.com/remix-run/remix/issues"

packages/remix-cloudflare-pages/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@remix-run/cloudflare-pages`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/cloudflare@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes

packages/remix-cloudflare-pages/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/cloudflare-pages",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Cloudflare Pages request handler for Remix",
   "bugs": {
     "url": "https://github.com/remix-run/remix/issues"

packages/remix-cloudflare-workers/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@remix-run/cloudflare-workers`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/cloudflare@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes

packages/remix-cloudflare-workers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/cloudflare-workers",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Cloudflare worker request handler for Remix",
   "bugs": {
     "url": "https://github.com/remix-run/remix/issues"

packages/remix-cloudflare/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@remix-run/cloudflare`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/server-runtime@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes

packages/remix-cloudflare/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/cloudflare",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Cloudflare platform abstractions for Remix",
   "bugs": {
     "url": "https://github.com/remix-run/remix/issues"

packages/remix-css-bundle/CHANGELOG.md

@@ -1,5 +1,7 @@
 # `@remix-run/css-bundle`
 
+## 2.16.3
+
 ## 2.16.2
 
 No significant changes to this package were made in this release. [See the repo `CHANGELOG.md`](https://github.com/remix-run/remix/blob/main/CHANGELOG.md) for an overview of all changes in v2.16.2.

packages/remix-css-bundle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/css-bundle",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "CSS bundle href when using CSS bundling features in Remix",
   "homepage": "https://remix.run",
   "bugs": {

packages/remix-deno/CHANGELOG.md

@@ -1,5 +1,12 @@
 # `@remix-run/deno`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/server-runtime@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes

packages/remix-deno/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remix-run/deno",
-  "version": "2.16.2",
+  "version": "2.16.3",
   "description": "Deno platform abstractions for Remix",
   "homepage": "https://remix.run",
   "main": "./index.ts",

packages/remix-dev/CHANGELOG.md

@@ -1,5 +1,13 @@
 # `@remix-run/dev`
 
+## 2.16.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@remix-run/node@2.16.3`
+  - `@remix-run/server-runtime@2.16.3`
+
 ## 2.16.2
 
 ### Patch Changes