fix(web): drop the internal scriptNonce/styleNonce exports; examples on vite-plugin next.50

.changeset/drop-internal-nonce-helpers.md

@@ -0,0 +1,5 @@
+---
+"@solidjs/web": patch
+---
+
+Remove the internal `scriptNonce`/`styleNonce` exports from the server build. They stayed exported after #4016 only because `@solidjs/vite-plugin` ≤ 3.0.0-next.49 imported them. 3.0.0-next.50 projects the nonce itself (solidjs/solid-vite-plugin#409). Apps must use `@solidjs/vite-plugin` 3.0.0-next.50 or later with this release.

examples/board/package.json

@@ -20,7 +20,7 @@
     "unstorage": "^1.17.5"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@vitejs/plugin-basic-ssl": "^2.3.0",
     "vite": "^8.0.0"
   }

examples/chat/package.json

@@ -24,7 +24,7 @@
     "unstorage": "^1.17.5"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@vitejs/plugin-basic-ssl": "^2.3.0",
     "vite": "^8.0.0"
   }

examples/effect/package.json

@@ -16,7 +16,7 @@
     "effect": "^3.22.0"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@solidjs/web": "workspace:*",
     "@types/node": "^25.6.0",
     "solid-js": "workspace:*",

examples/hackernews-spa/package.json

@@ -18,7 +18,7 @@
     "solid-js": "workspace:*"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "vite": "^8.0.0"
   }
 }

examples/hackernews/package.json

@@ -18,7 +18,7 @@
     "solid-js": "workspace:*"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "vite": "^8.0.0"
   }
 }

examples/migrating-element/package.json

@@ -13,7 +13,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@solidjs/web": "workspace:*",
     "@types/node": "^25.6.0",
     "solid-js": "workspace:*",

examples/notes/package.json

@@ -21,7 +21,7 @@
     "unstorage": "^1.17.5"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "vite": "^8.0.0"
   }
 }

examples/rendering/package.json

@@ -20,7 +20,7 @@
     "clean": "rimraf */dist/"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@solidjs/web": "workspace:*",
     "@types/node": "^25.6.0",
     "rimraf": "^3.0.2",

examples/room/package.json

@@ -18,7 +18,7 @@
     "solid-js": "workspace:*"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@vitejs/plugin-basic-ssl": "^2.3.0",
     "vite": "^8.0.0"
   }

examples/sierpinski/package.json

@@ -13,7 +13,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@solidjs/web": "workspace:*",
     "@types/node": "^25.6.0",
     "solid-js": "workspace:*",

examples/todos-server/package.json

@@ -19,7 +19,7 @@
     "unstorage": "^1.17.5"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "vite": "^8.0.0"
   }
 }

examples/todos/package.json

@@ -13,7 +13,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "devDependencies": {
-    "@solidjs/vite-plugin": "3.0.0-next.49",
+    "@solidjs/vite-plugin": "3.0.0-next.50",
     "@solidjs/web": "workspace:*",
     "@types/node": "^25.6.0",
     "solid-js": "workspace:*",

packages/web/src/server.ts

@@ -1450,29 +1450,6 @@ function destinationNonce(nonce, destination) {
   return typeof value === "string" && value ? value : undefined;
 }
 
-/**
- * The script half of a `CSPNonce`. The surfaces that emit one script take a
- * `CSPNonce` and project it themselves; this stays exported only for
- * `@solidjs/vite-plugin`'s generated handler, which still imports it.
- * @internal
- */
-export function scriptNonce(nonce?: CSPNonce): string | undefined;
-
-export function scriptNonce(nonce) {
-  return destinationNonce(nonce, "script");
-}
-
-/**
- * The style half of a `CSPNonce`. Exported only for
- * `@solidjs/vite-plugin`'s generated handler, which still imports it.
- * @internal
- */
-export function styleNonce(nonce?: CSPNonce): string | undefined;
-
-export function styleNonce(nonce) {
-  return destinationNonce(nonce, "style");
-}
-
 // Attribute names are ASCII case-insensitive, so a caller-supplied `Nonce`
 // counts as one too.
 function hasNonceProp(props) {
@@ -3502,7 +3479,7 @@ export function HydrationScript(props) {
     nonce: sharedConfig.context && sharedConfig.context.nonce,
     ...props
   };
-  return ssr(hydrationBootstrap(eventNames, scriptNonce(nonce), true));
+  return ssr(hydrationBootstrap(eventNames, destinationNonce(nonce, "script"), true));
 }
 export function ssrGroup<T extends () => any[]>(fn: T, n: number): T;
 
@@ -5895,7 +5872,7 @@ export function generateHydrationScript(options?: {
 // `unhandledrejection` from the inline script alone, and a handler attached
 // later only revokes the report. A consumer still meets the rejection.
 export function generateHydrationScript({ eventNames, nonce } = {}) {
-  return hydrationBootstrap(eventNames, scriptNonce(nonce), false);
+  return hydrationBootstrap(eventNames, destinationNonce(nonce, "script"), false);
 }
 
 // `ledger` (#3971): only an in-render <HydrationScript /> declares `_$HY.s`,