Summary & Key Takeaways ​

• All runtime packages are now ESM-only, requiring Node.js 22.12+.
• Critical SSR XSS vulnerabilities in flow-control memos have been fixed.
• A new componentNames compiler option provides minification-safe component labels for improved diagnostics.
• The "Observe tier" introduces first-class interaction records and router-agnostic navigation attribution.
• Development-only diagnostics are now split from production observability wiring.
• The attribution engine is now a separate, opt-in import for smaller production bundles.
• Support for /* ... */ style comments in tagged JSX templates has been added.
• Nested "use server" function declarations are now correctly extracted.

Our Commentary ​

This RC is a big one. The move to ESM-only and Node 22.12+ is a breaking change that will require some migration effort, but it's a necessary step for modernizing the ecosystem. I'm particularly happy about the SSR XSS fix; security is paramount. The improved diagnostics and observability features are also a huge win for developer experience. It feels like Solid 2.0 is shaping up to be a very robust release.