{"id":71173,"name":"@hapi/content","ecosystem":"npm","repository_url":"https://github.com/hapijs/content","issues_count":69,"created_at":"2025-09-26T00:05:35.826Z","updated_at":"2025-09-26T00:05:35.826Z","purl":"pkg:npm/@hapi/content","metadata":{"id":971799,"name":"@hapi/content","ecosystem":"npm","description":"HTTP Content-* headers parsing","homepage":"https://github.com/hapijs/content#readme","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/hapijs/content","keywords_array":["HTTP","header","content","content-type","content-disposition"],"namespace":"hapi","versions_count":6,"first_release_published_at":"2019-04-02T17:53:07.038Z","latest_release_published_at":"2022-05-24T01:59:35.903Z","latest_release_number":"6.0.0","last_synced_at":"2025-10-11T14:20:56.225Z","created_at":"2022-04-07T18:10:40.545Z","updated_at":"2025-10-11T14:20:56.225Z","registry_url":"https://www.npmjs.com/package/@hapi/content","install_command":"npm install @hapi/content","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"6.0.0","lts":"4.1.1"}},"repo_metadata":{"id":500387,"uuid":"103316506","full_name":"hapijs/content","owner":"hapijs","description":"HTTP Content-* headers parsing","archived":false,"fork":false,"pushed_at":"2024-01-06T09:49:09.000Z","size":66,"stargazers_count":8,"open_issues_count":1,"forks_count":12,"subscribers_count":11,"default_branch":"master","last_synced_at":"2024-04-14T00:47:21.202Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hapijs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2017-09-12T20:17:42.000Z","updated_at":"2022-04-13T06:02:33.000Z","dependencies_parsed_at":"2023-11-19T02:06:27.331Z","dependency_job_id":"267c99f6-4d29-4bc7-a0bc-a89a18e26131","html_url":"https://github.com/hapijs/content","commit_stats":{"total_commits":76,"total_committers":16,"mean_commits":4.75,"dds":0.5394736842105263,"last_synced_commit":"85ffdbd44c302074b8bbaa93f4700059f9e26500"},"previous_names":[],"tags_count":27,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hapijs","download_url":"https://codeload.github.com/hapijs/content/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":217598004,"owners_count":16201817,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hapijs","name":"hapi.js","uuid":"3774533","kind":"organization","description":"The Simple, Secure Framework Developers Trust","email":null,"website":"https://hapi.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3774533?v=4","repositories_count":75,"last_synced_at":"2024-04-15T00:21:19.438Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/hapijs","funding_links":[],"total_stars":46244,"followers":116,"following":0,"created_at":"2022-11-02T16:20:46.028Z","updated_at":"2024-04-15T00:21:34.281Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hapijs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hapijs/repositories"},"tags":[{"name":"v3.1.2","sha":"dfbb048373a93669262b6989927258440cac7546","kind":"tag","published_at":"2024-01-06T09:48:57.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.1.2","html_url":"https://github.com/hapijs/content/releases/tag/v3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.2/manifests"},{"name":"v6.0.0","sha":"85ffdbd44c302074b8bbaa93f4700059f9e26500","kind":"tag","published_at":"2022-05-24T01:59:15.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v6.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v6.0.0/manifests"},{"name":"v4.1.1","sha":"5d6ad8e2226032db2e7b62b5f38a391ed0ab93e5","kind":"tag","published_at":"2020-02-13T08:20:40.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.1.1","html_url":"https://github.com/hapijs/content/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.1.1/manifests"},{"name":"v3.1.1","sha":"365ebfd428742196d492ec39c3f36521ecf9a35f","kind":"tag","published_at":"2020-02-13T08:15:38.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.1.1","html_url":"https://github.com/hapijs/content/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.1/manifests"},{"name":"v5.0.2","sha":"640839399fd2792db17652dbb785835059c03abe","kind":"tag","published_at":"2020-02-13T08:06:49.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v5.0.2","html_url":"https://github.com/hapijs/content/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"98ce38514d12d3650384e75937c93266f0c82808","kind":"tag","published_at":"2020-02-13T07:22:23.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v5.0.1","html_url":"https://github.com/hapijs/content/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"2f386a58140dd98084ca86c3106d6e90e4031cfe","kind":"tag","published_at":"2020-01-05T01:02:04.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v5.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v5.0.0/manifests"},{"name":"v4.1.0","sha":"c480cc4b9c31f287fbf232b36d70075c58d1989b","kind":"tag","published_at":"2019-04-02T17:52:43.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.1.0","html_url":"https://github.com/hapijs/content/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.1.0/manifests"},{"name":"v3.1.0","sha":"77aec3b8a612e01a60c4cfd629c267982e6155fa","kind":"tag","published_at":"2019-03-25T18:02:05.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.1.0","html_url":"https://github.com/hapijs/content/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.1.0/manifests"},{"name":"v4.0.6","sha":"2fec92ce429168f6886261fb7103c6e2c0d95773","kind":"tag","published_at":"2018-11-03T00:23:50.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.6","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.6/manifests"},{"name":"v4.0.5","sha":"94f6a07f4223a2c41f576efe25c10c878dcb9aff","kind":"tag","published_at":"2018-03-31T00:02:12.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.5","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.5/manifests"},{"name":"v3.0.7","sha":"dd3901f1732a24ea902452e0bc40f0ccb09ebf46","kind":"tag","published_at":"2018-03-01T09:05:46.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.7","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.7/manifests"},{"name":"v4.0.4","sha":"c9baa4c0d1d24d3bea6a59bfe28b913015973de7","kind":"tag","published_at":"2018-03-01T08:58:30.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.4","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"2fafff7965dcb1e90f40203c5857297724ecb31c","kind":"tag","published_at":"2017-11-03T20:01:59.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.3","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"80af6db05b5ef9dbecda720ef0dd0d7adb7dc175","kind":"tag","published_at":"2017-11-03T07:04:21.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.2","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.2/manifests"},{"name":"v4.0.1","sha":"c310d682f15f78f535c57e73ad715673fcf0af3c","kind":"tag","published_at":"2017-09-26T09:06:53.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.1","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"c90b153e4b09098ea11d939025af42ac95950dd9","kind":"tag","published_at":"2017-09-26T00:11:31.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v4.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v4.0.0/manifests"},{"name":"v3.0.6","sha":"3a8a6cbaf111955ec514019c2122cb278cc36a23","kind":"tag","published_at":"2017-09-12T20:30:11.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.6","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.6/manifests"},{"name":"v3.0.5","sha":"e7f20cc6ff35b5c9787f3ebeebfe82a52f70a50d","kind":"tag","published_at":"2017-07-20T07:56:13.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.5","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.5/manifests"},{"name":"v3.0.4","sha":"de4e15315e0c3814245d1212264ccd15490c7239","kind":"tag","published_at":"2017-05-28T06:08:48.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.4","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.4/manifests"},{"name":"v3.0.3","sha":"7496a0fdafb356ff96a61d866cf56e37fed8bad0","kind":"tag","published_at":"2016-10-26T17:48:34.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.3","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.3/manifests"},{"name":"v3.0.2","sha":"56e53200ec0792391f377da6398c399285362fdf","kind":"tag","published_at":"2016-07-28T19:29:56.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.2","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.2/manifests"},{"name":"v3.0.1","sha":"cb5684aa14d47fbbcc396635c3697f1d7a50df5c","kind":"tag","published_at":"2016-05-07T12:36:02.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.1","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"83be281b8d9e9392ca26768802a4b215ef622b97","kind":"tag","published_at":"2015-11-03T04:38:20.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v3.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"e53f4b2ab59320ceb5abe923ad1b134359ecdd61","kind":"tag","published_at":"2015-10-22T20:21:01.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v2.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"080acaa4c716c0ec961a90abacc139d2bdd1773d","kind":"tag","published_at":"2014-10-02T21:31:58.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v1.0.1","html_url":"https://github.com/hapijs/content/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"21980bb1a9a9e91ddda2ee44b327c33564442b1e","kind":"tag","published_at":"2014-10-02T18:03:17.000Z","download_url":"https://codeload.github.com/hapijs/content/tar.gz/v1.0.0","html_url":"https://github.com/hapijs/content/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2024-09-08T14:10:54.806Z","dependent_packages_count":13,"downloads":3975706,"downloads_period":"last-month","dependent_repos_count":17200,"rankings":{"downloads":0.16108065416003228,"dependent_repos_count":0.20388746558661214,"dependent_packages_count":1.670842085410151,"stargazers_count":10.064530418792806,"forks_count":5.9993287888855535,"docker_downloads_count":0.10430471254368867,"average":3.03399568756314},"purl":"pkg:npm/%40hapi/content","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@hapi/content","docker_dependents_count":289,"docker_downloads_count":431738681,"usage_url":"https://repos.ecosyste.ms/usage/npm/@hapi/content","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@hapi/content/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-09-08T07:34:39.669Z","issues_count":19,"pull_requests_count":18,"avg_time_to_close_issue":389638.8333333333,"avg_time_to_close_pull_request":342954.27777777775,"issues_closed_count":18,"pull_requests_closed_count":18,"pull_request_authors_count":11,"issue_authors_count":6,"avg_comments_per_issue":1.0526315789473684,"avg_comments_per_pull_request":0.4444444444444444,"merged_pull_requests_count":16,"bot_issues_count":1,"bot_pull_requests_count":1,"past_year_issues_count":0,"past_year_pull_requests_count":1,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":256316.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hapijs%2Fcontent/issues","maintainers":[{"login":"Nargonath","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Nargonath"},{"login":"devinivy","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/devinivy"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@hapi%2Fcontent/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@hapi%2Fcontent/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@hapi%2Fcontent/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@hapi%2Fcontent/related_packages","maintainers":[{"uuid":"nlf","login":"nlf","name":null,"email":"quitlahok@gmail.com","url":null,"packages_count":309,"html_url":"https://www.npmjs.com/~nlf","role":null,"created_at":"2022-11-20T16:44:18.842Z","updated_at":"2022-11-20T16:44:18.842Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/nlf/packages"},{"uuid":"marsup","login":"marsup","name":null,"email":"nicolas@morel.io","url":null,"packages_count":170,"html_url":"https://www.npmjs.com/~marsup","role":null,"created_at":"2022-11-20T16:44:18.837Z","updated_at":"2022-11-20T16:44:18.837Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/marsup/packages"},{"uuid":"devinivy","login":"devinivy","name":null,"email":"devinivy@gmail.com","url":null,"packages_count":306,"html_url":"https://www.npmjs.com/~devinivy","role":null,"created_at":"2022-11-20T16:44:18.852Z","updated_at":"2022-11-20T16:44:18.852Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/devinivy/packages"},{"uuid":"wyatt","login":"wyatt","name":null,"email":"wpreul@gmail.com","url":null,"packages_count":185,"html_url":"https://www.npmjs.com/~wyatt","role":null,"created_at":"2022-11-20T16:44:18.893Z","updated_at":"2022-11-20T16:44:18.893Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/wyatt/packages"},{"uuid":"lloydbenson","login":"lloydbenson","name":null,"email":"lloyd.benson@gmail.com","url":null,"packages_count":109,"html_url":"https://www.npmjs.com/~lloydbenson","role":null,"created_at":"2022-11-20T16:44:18.935Z","updated_at":"2022-11-20T16:44:18.935Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/lloydbenson/packages"},{"uuid":"nargonath","login":"nargonath","name":null,"email":"jonas.pauthier@gmail.com","url":null,"packages_count":169,"html_url":"https://www.npmjs.com/~nargonath","role":null,"created_at":"2022-11-20T16:44:18.967Z","updated_at":"2022-11-20T16:44:18.967Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/nargonath/packages"},{"uuid":"cjihrig","login":"cjihrig","name":null,"email":"cjihrig@gmail.com","url":null,"packages_count":172,"html_url":"https://www.npmjs.com/~cjihrig","role":null,"created_at":"2023-01-15T17:34:50.368Z","updated_at":"2023-01-15T17:34:50.368Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/cjihrig/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5175076,"maintainers_count":1064249,"namespaces_count":319870,"keywords_count":739248,"github":"npm","metadata":{"funded_packages_count":158054},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-10-11T06:15:08.058Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":64,"unique_repositories_count_past_30_days":12,"recent_issues":[{"uuid":"4669381022","node_id":"PR_kwDONhlJ1c7mwisE","number":264,"state":"open","title":"feat(deps): Bump the npm_and_yarn group across 27 directories with 14 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-15T22:27:19.000Z","updated_at":"2026-06-15T22:27:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps): Bump","group_name":"npm_and_yarn","update_count":14,"packages":[{"name":"esbuild","old_version":"0.20.0","new_version":"0.28.1","repository_url":"https://github.com/evanw/esbuild"},{"name":"vitest","old_version":"3.2.4","new_version":"3.2.6","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@angular/common","old_version":"14.3.0","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/core","old_version":"14.3.0","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"vite","old_version":"5.4.21","new_version":"6.4.3","repository_url":"https://github.com/vitejs/vite"},{"name":"next","old_version":"14.2.35","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"nuxt","old_version":"3.17.7","new_version":"3.21.6","repository_url":"https://github.com/nuxt/nuxt"},{"name":"react-router","old_version":"7.13.0","new_version":"7.15.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"axios","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/axios/axios"},{"name":"hono","old_version":"4.12.18","new_version":"4.12.21","repository_url":"https://github.com/honojs/hono"},{"name":"ws","old_version":"8.20.1","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"},{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.8.4","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 14 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [esbuild](https://github.com/evanw/esbuild) | `0.20.0` | `0.28.1` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `3.2.6` |\n| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `14.3.0` | `20.3.25` |\n| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `14.3.0` | `20.3.25` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `6.4.3` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `15.5.18` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.17.7` | `3.21.6` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.0` | `7.15.1` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.16.0` |\n| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.21` |\n| [ws](https://github.com/websockets/ws) | `8.20.1` | `8.21.0` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.1` | `6.0.2` |\n| [@hapi/wreck](https://github.com/hapijs/wreck) | `18.1.0` | `18.1.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |\n\nBumps the npm_and_yarn group with 1 update in the /dev-packages/browser-integration-tests directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/angular-17 directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/cloudflare-hono directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [hono](https://github.com/honojs/hono).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev directory: [esbuild](https://github.com/evanw/esbuild) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/debug-id-sourcemaps directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/hydrogen-react-router-7 directory: [esbuild](https://github.com/evanw/esbuild) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/lighthouse-react directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nestjs-basic directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-13 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-14 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-app-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-orpc directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-pages-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/node-profiling-cjs directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/node-profiling-esm directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-node-20-18 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-spa-node-20-18 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/remix-hydrogen directory: [esbuild](https://github.com/evanw/esbuild) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-dynamic-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-spa directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-top-level-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/supabase-nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /packages/nuxt directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\n\nUpdates `esbuild` from 0.20.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog: 2024\u003c/h1\u003e\n\u003cp\u003eThis changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).\u003c/p\u003e\n\u003ch2\u003e0.24.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix regression with \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003eimport.meta\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4010\"\u003e#4010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4012\"\u003e#4012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4013\"\u003e#4013\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous change in version 0.24.1 to use a more expression-like parser for \u003ccode\u003edefine\u003c/code\u003e values to allow quoted property names introduced a regression that removed the ability to use \u003ccode\u003e--define:import.meta=...\u003c/code\u003e. Even though \u003ccode\u003eimport\u003c/code\u003e is normally a keyword that can't be used as an identifier, ES modules special-case the \u003ccode\u003eimport.meta\u003c/code\u003e expression to behave like an identifier anyway. This change fixes the regression.\u003c/p\u003e\n\u003cp\u003eThis fix was contributed by \u003ca href=\"https://github.com/sapphi-red\"\u003e\u003ccode\u003e@​sapphi-red\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.24.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow \u003ccode\u003ees2024\u003c/code\u003e as a target in \u003ccode\u003etsconfig.json\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4004\"\u003e#4004\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eTypeScript recently \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/#support-for---target-es2024-and---lib-es2024\"\u003eadded \u003ccode\u003ees2024\u003c/code\u003e\u003c/a\u003e as a compilation target, so esbuild now supports this in the \u003ccode\u003etarget\u003c/code\u003e field of \u003ccode\u003etsconfig.json\u003c/code\u003e files, such as in the following configuration file:\u003c/p\u003e\n\u003cpre lang=\"json\"\u003e\u003ccode\u003e{\n  \u0026quot;compilerOptions\u0026quot;: {\n    \u0026quot;target\u0026quot;: \u0026quot;ES2024\u0026quot;\n  }\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eAs a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in \u003ca href=\"https://esbuild.github.io/content-types/#tsconfig-json\"\u003ethe documentation\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis fix was contributed by \u003ca href=\"https://github.com/billyjanitsch\"\u003e\u003ccode\u003e@​billyjanitsch\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAllow automatic semicolon insertion after \u003ccode\u003eget\u003c/code\u003e/\u003ccode\u003eset\u003c/code\u003e\u003c/p\u003e\n\u003cp\u003eThis change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eclass Foo {\n  get\n  *x() {}\n  set\n  *y() {}\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe above code will be considered valid starting with this release. This change to esbuild follows a \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/pull/60225\"\u003esimilar change to TypeScript\u003c/a\u003e which will allow this syntax starting with TypeScript 5.7.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAllow quoted property names in \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003e--pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4008\"\u003e#4008\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003edefine\u003c/code\u003e and \u003ccode\u003epure\u003c/code\u003e API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003e--pure\u003c/code\u003e consistent with \u003ccode\u003e--global-name\u003c/code\u003e, which already supported quoted property names. For example, the following is now possible:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/f013f5f99a015bce92ec48d49181d4ad3177b29b\"\u003e\u003ccode\u003ef013f5f\u003c/code\u003e\u003c/a\u003e fix some typos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/aafd6e48b1088336a5f5a17e930be7e840d43d8c\"\u003e\u003ccode\u003eaafd6e4\u003c/code\u003e\u003c/a\u003e chore: fix some minor issues in comments (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4462\"\u003e#4462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/15300c30b5e22f7cfcbed850c246d35095658386\"\u003e\u003ccode\u003e15300c3\u003c/code\u003e\u003c/a\u003e follow up: cjs evaluation fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/1bda0c31d7697c0af44b3ab39b81e599e559a395\"\u003e\u003ccode\u003e1bda0c3\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4467\"\u003e#4467\u003c/a\u003e: esm evaluation fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evanw/esbuild/compare/v0.20.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for esbuild since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 3.2.4 to 3.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin last supported vite-node version  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d05\"\u003e\u003c!-- raw HTML omitted --\u003e(16f12)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.5...v3.2.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e: Add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10445\"\u003evitest-dev/vitest#10445\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d\"\u003e\u003c!-- raw HTML omitted --\u003e(af88b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10456\"\u003evitest-dev/vitest#10456\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd\"\u003e\u003c!-- raw HTML omitted --\u003e(385a1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.4...v3.2.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b6d56f8171ae814ee7571df63a35a0da5203dbaa\"\u003e\u003ccode\u003eb6d56f8\u003c/code\u003e\u003c/a\u003e chore: release v3.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d0585677f6a32bcb3dd01fa61c140e2588\"\u003e\u003ccode\u003e16f120d\u003c/code\u003e\u003c/a\u003e fix: pin last supported vite-node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2cbad0a923c48c6144266df3cd25f93547cb5221\"\u003e\u003ccode\u003e2cbad0a\u003c/code\u003e\u003c/a\u003e chore: release v3.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd4c2bfa5e7d58bf7c6834c929969f2c7\"\u003e\u003ccode\u003e385a1ae\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d82844a4761ea9a977156c98e2b14ca8\"\u003e\u003ccode\u003eaf88b1f\u003c/code\u003e\u003c/a\u003e feat(api): add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/common` from 14.3.0 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/common's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003ccode\u003e06be298\u003c/code\u003e\u003c/a\u003e fix(http): preserve empty referrer option in HttpRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003ccode\u003e9f443bc\u003c/code\u003e\u003c/a\u003e fix(common): Limits date format string length\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003ccode\u003efa940e1\u003c/code\u003e\u003c/a\u003e fix(http): Rejects non-HTTP(S) URLs in JSONP requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003ccode\u003ee2ef1ce\u003c/code\u003e\u003c/a\u003e fix(http): skip transfer cache for fetch credentialed requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/3d135ce59bbf7426825bc493bc681f266846ac79\"\u003e\u003ccode\u003e3d135ce\u003c/code\u003e\u003c/a\u003e fix(common): add upper bounds for digitsInfo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/39a4b4cc8e8d101a566a70658707bc9f53dd5883\"\u003e\u003ccode\u003e39a4b4c\u003c/code\u003e\u003c/a\u003e fix(common): sanitize placeholder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/de7b2a62e7eded747c2a520c177cd41f60a96dcd\"\u003e\u003ccode\u003ede7b2a6\u003c/code\u003e\u003c/a\u003e fix(http): exclude withCredentials requests from transfer cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/4233188d8e70283190ea87dbaa5a872269291b4a\"\u003e\u003ccode\u003e4233188\u003c/code\u003e\u003c/a\u003e fix(http): skip TransferCache for cookie-bearing requests by default\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/core` from 14.3.0 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003ccode\u003eca48b47\u003c/code\u003e\u003c/a\u003e fix(core): validate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003ccode\u003e49368c1\u003c/code\u003e\u003c/a\u003e fix(platform-server): harden platform location origin validation during SSR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003ccode\u003e768a349\u003c/code\u003e\u003c/a\u003e fix(core): harden TransferState restoration against DOM clobbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/7ae6381a4845ad4b13a7a5574c5433b077c93c5c\"\u003e\u003ccode\u003e7ae6381\u003c/code\u003e\u003c/a\u003e test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/65954092483a88fc69cccd3b4c56d96450ac2fe8\"\u003e\u003ccode\u003e6595409\u003c/code\u003e\u003c/a\u003e test(core): update golden symbols and host bindings sanitization spec (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/d86e4e7b2ad0e667aeb0f8ed053e2cb2bd154b81\"\u003e\u003ccode\u003ed86e4e7\u003c/code\u003e\u003c/a\u003e fix(core): reject script element as a dynamic component host (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/b8f1f7276514e258e8c815ec5c7d9b8826ecd372\"\u003e\u003ccode\u003eb8f1f72\u003c/code\u003e\u003c/a\u003e test(core): remove obsolete blockquote cite host binding tests (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/36200bd81a3420d8222dfe10767437c383a20fe8\"\u003e\u003ccode\u003e36200bd\u003c/code\u003e\u003c/a\u003e test(core): update spec files to match 20.3.x limits and actual contexts (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68\"\u003e#68\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 5.4.21 to 6.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.4.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.3 (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576\"\u003e#22576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176\"\u003e96b0c10\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22576\"\u003e#22576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22575\"\u003e#22575\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f\"\u003e8fed5cf\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22575\"\u003e#22575\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.2 (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003efe28e47\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22163\"\u003e#22163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003eca4da5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.1 (2025-10-20)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e1114b5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20968\"\u003e#20968\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20969\"\u003e#20969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.4.0 (2025-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003eca6455e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20932\"\u003e#20932\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.7 (2025-10-14)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003ec59a222\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20940\"\u003e#20940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.6 (2025-09-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply \u003ccode\u003efs.strict\u003c/code\u003e check to HTML files (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20736\"\u003e#20736\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f\"\u003e0ab19ea\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20736\"\u003e#20736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: upgrade sirv to 3.0.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20735\"\u003e#20735\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0\"\u003ee11d240\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20735\"\u003e#20735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: detect ts support via \u003ccode\u003eprocess.features\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20544\"\u003e#20544\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7d9922972b62329d37a71d4da5a4a382d0bf8a79\"\u003e7d99229\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20544\"\u003e#20544\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.5 (2025-05-05)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ssr): handle uninitialized export access as undefined (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19959\"\u003e#19959\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fd38d076fe2455aac1e00a7b15cd51159bf12bb5\"\u003efd38d07\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19959\"\u003e#19959\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.4 (2025-04-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: check static serve file inside sirv (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965\"\u003e#19965\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb\"\u003ec22c43d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19965\"\u003e#19965\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(optimizer): return plain object when using \u003ccode\u003erequire\u003c/code\u003e to import externals in optimized dependenci (\u003ca href=\"https://github.com/vitejs/vite/commit/efc5eab253419fde0a6a48b8d2f233063d6a9643\"\u003eefc5eab\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19940\"\u003e#19940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6c2c881f15495738ff03bc1d67cc052c07e0cac4\"\u003e\u003ccode\u003e6c2c881\u003c/code\u003e\u003c/a\u003e release: v6.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176\"\u003e\u003ccode\u003e96b0c10\u003c/code\u003e\u003c/a\u003e fix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576\"\u003e#22576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f\"\u003e\u003ccode\u003e8fed5cf\u003c/code\u003e\u003c/a\u003e fix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6b3fad02abd550bd7b79934ff92c58dbd7f33045\"\u003e\u003ccode\u003e6b3fad0\u003c/code\u003e\u003c/a\u003e release: v6.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003e\u003ccode\u003eca4da5d\u003c/code\u003e\u003c/a\u003e fix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003e\u003ccode\u003efe28e47\u003c/code\u003e\u003c/a\u003e fix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/5487f4f641f70c47ea05fd101a4319897df048b3\"\u003e\u003ccode\u003e5487f4f\u003c/code\u003e\u003c/a\u003e release: v6.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e\u003ccode\u003e1114b5d\u003c/code\u003e\u003c/a\u003e fix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f12697c0f64b9a37196b9ab218a0911829d5b103\"\u003e\u003ccode\u003ef12697c\u003c/code\u003e\u003c/a\u003e release: v6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003e\u003ccode\u003eca6455e\u003c/code\u003e\u003c/a\u003e feat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v6.4.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.35...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 3.17.7 to 3.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.21.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.6 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v3.21.5...v3.21.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Prefer our own builder/server deps (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Add json extension to payload cache items (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35043\"\u003e#35043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Handle errors fetching app manifest (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Don't strip buildAssetsDir from vite-node SSR ids (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35040\"\u003e#35040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Strip queries in css inline styles map (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35067\"\u003e#35067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Encode html-significant characters in external redirect body (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Validate island request hash matches props (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use regexp to strip query (\u003ca href=\"https://github.com/nuxt/nuxt/commit/042b615e6\"\u003e042b615e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use \u003ccode\u003estatusCode\u003c/code\u003e for nitro v2 compatibility (\u003ca href=\"https://github.com/nuxt/nuxt/commit/82dcd6a31\"\u003e82dcd6a31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render component-less parent routes during client-side nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Run middleware for page islands (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💅 Refactors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Extract same-origin check for dev middleware (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/3505...\n\n_Description has been truncated_","html_url":"https://github.com/SherfeyInv/sentry-javascript/pull/264","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fsentry-javascript/issues/264","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/264/packages"},{"uuid":"4633788096","node_id":"PR_kwDONhlJ1c7k-tZQ","number":259,"state":"closed","title":"feat(deps): Bump the npm_and_yarn group across 24 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T20:41:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-10T18:09:56.000Z","updated_at":"2026-06-12T20:41:59.000Z","time_to_close":181921,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps): Bump","group_name":"npm_and_yarn","update_count":11,"packages":[{"name":"vitest","old_version":"3.2.4","new_version":"3.2.6","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"vite","old_version":"5.4.21","new_version":"6.4.2","repository_url":"https://github.com/vitejs/vite"},{"name":"next","old_version":"14.2.35","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"nuxt","old_version":"3.17.7","new_version":"3.21.6","repository_url":"https://github.com/nuxt/nuxt"},{"name":"react-router","old_version":"7.13.0","new_version":"7.15.0","repository_url":"https://github.com/remix-run/react-router"},{"name":"axios","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/axios/axios"},{"name":"hono","old_version":"4.12.18","new_version":"4.12.21","repository_url":"https://github.com/honojs/hono"},{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.8.4","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `3.2.6` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `6.4.2` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `15.5.18` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.17.7` | `3.21.6` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.0` | `7.15.0` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.16.0` |\n| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.21` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.1` | `6.0.2` |\n| [@hapi/wreck](https://github.com/hapijs/wreck) | `18.1.0` | `18.1.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |\n\nBumps the npm_and_yarn group with 1 update in the /dev-packages/browser-integration-tests directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/cloudflare-hono directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [hono](https://github.com/honojs/hono).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/debug-id-sourcemaps directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/hydrogen-react-router-7 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/lighthouse-react directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nestjs-basic directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-13 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-14 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-app-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-orpc directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-pages-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nuxt-3-min directory: [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-node-20-18 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-spa-node-20-18 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-dynamic-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-spa directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-top-level-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/supabase-nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/sveltekit-2-kit-tracing directory: [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/sveltekit-2-svelte-5 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit).\nBumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /packages/nuxt directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\n\nUpdates `vitest` from 3.2.4 to 3.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin last supported vite-node version  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d05\"\u003e\u003c!-- raw HTML omitted --\u003e(16f12)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.5...v3.2.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e: Add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10445\"\u003evitest-dev/vitest#10445\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d\"\u003e\u003c!-- raw HTML omitted --\u003e(af88b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10456\"\u003evitest-dev/vitest#10456\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd\"\u003e\u003c!-- raw HTML omitted --\u003e(385a1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.4...v3.2.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b6d56f8171ae814ee7571df63a35a0da5203dbaa\"\u003e\u003ccode\u003eb6d56f8\u003c/code\u003e\u003c/a\u003e chore: release v3.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d0585677f6a32bcb3dd01fa61c140e2588\"\u003e\u003ccode\u003e16f120d\u003c/code\u003e\u003c/a\u003e fix: pin last supported vite-node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2cbad0a923c48c6144266df3cd25f93547cb5221\"\u003e\u003ccode\u003e2cbad0a\u003c/code\u003e\u003c/a\u003e chore: release v3.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd4c2bfa5e7d58bf7c6834c929969f2c7\"\u003e\u003ccode\u003e385a1ae\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d82844a4761ea9a977156c98e2b14ca8\"\u003e\u003ccode\u003eaf88b1f\u003c/code\u003e\u003c/a\u003e feat(api): add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 5.4.21 to 6.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.4.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.2 (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003efe28e47\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22163\"\u003e#22163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003eca4da5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.1 (2025-10-20)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e1114b5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20968\"\u003e#20968\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20969\"\u003e#20969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.4.0 (2025-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003eca6455e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20932\"\u003e#20932\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.7 (2025-10-14)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003ec59a222\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20940\"\u003e#20940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.6 (2025-09-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply \u003ccode\u003efs.strict\u003c/code\u003e check to HTML files (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20736\"\u003e#20736\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f\"\u003e0ab19ea\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20736\"\u003e#20736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: upgrade sirv to 3.0.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20735\"\u003e#20735\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0\"\u003ee11d240\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20735\"\u003e#20735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: detect ts support via \u003ccode\u003eprocess.features\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20544\"\u003e#20544\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7d9922972b62329d37a71d4da5a4a382d0bf8a79\"\u003e7d99229\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20544\"\u003e#20544\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.5 (2025-05-05)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ssr): handle uninitialized export access as undefined (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19959\"\u003e#19959\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fd38d076fe2455aac1e00a7b15cd51159bf12bb5\"\u003efd38d07\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19959\"\u003e#19959\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.4 (2025-04-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: check static serve file inside sirv (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965\"\u003e#19965\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb\"\u003ec22c43d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19965\"\u003e#19965\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(optimizer): return plain object when using \u003ccode\u003erequire\u003c/code\u003e to import externals in optimized dependenci (\u003ca href=\"https://github.com/vitejs/vite/commit/efc5eab253419fde0a6a48b8d2f233063d6a9643\"\u003eefc5eab\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19940\"\u003e#19940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: remove duplicate plugin context type (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19935\"\u003e#19935\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/d6d01c2292fa4f9603e05b95d81c8724314c20e0\"\u003ed6d01c2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19935\"\u003e#19935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.3 (2025-04-24)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: ignore malformed uris in tranform middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19853\"\u003e#19853\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e4d520141bcd83ad61f16767348b4a813bf9340a\"\u003ee4d5201\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19853\"\u003e#19853\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6b3fad02abd550bd7b79934ff92c58dbd7f33045\"\u003e\u003ccode\u003e6b3fad0\u003c/code\u003e\u003c/a\u003e release: v6.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003e\u003ccode\u003eca4da5d\u003c/code\u003e\u003c/a\u003e fix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003e\u003ccode\u003efe28e47\u003c/code\u003e\u003c/a\u003e fix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/5487f4f641f70c47ea05fd101a4319897df048b3\"\u003e\u003ccode\u003e5487f4f\u003c/code\u003e\u003c/a\u003e release: v6.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e\u003ccode\u003e1114b5d\u003c/code\u003e\u003c/a\u003e fix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f12697c0f64b9a37196b9ab218a0911829d5b103\"\u003e\u003ccode\u003ef12697c\u003c/code\u003e\u003c/a\u003e release: v6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003e\u003ccode\u003eca6455e\u003c/code\u003e\u003c/a\u003e feat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0e173d83681daa31be10fa8a62d56b1ec84690af\"\u003e\u003ccode\u003e0e173d8\u003c/code\u003e\u003c/a\u003e release: v6.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003e\u003ccode\u003ec59a222\u003c/code\u003e\u003c/a\u003e fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/3f337c5e24504e51188d29c970de1416ee523dbb\"\u003e\u003ccode\u003e3f337c5\u003c/code\u003e\u003c/a\u003e release: v6.3.6\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v6.4.2/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.35...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 3.17.7 to 3.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.21.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.6 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v3.21.5...v3.21.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Prefer our own builder/server deps (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Add json extension to payload cache items (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35043\"\u003e#35043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Handle errors fetching app manifest (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Don't strip buildAssetsDir from vite-node SSR ids (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35040\"\u003e#35040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Strip queries in css inline styles map (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35067\"\u003e#35067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Encode html-significant characters in external redirect body (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Validate island request hash matches props (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use regexp to strip query (\u003ca href=\"https://github.com/nuxt/nuxt/commit/042b615e6\"\u003e042b615e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use \u003ccode\u003estatusCode\u003c/code\u003e for nitro v2 compatibility (\u003ca href=\"https://github.com/nuxt/nuxt/commit/82dcd6a31\"\u003e82dcd6a31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render component-less parent routes during client-side nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Run middleware for page islands (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💅 Refactors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Extract same-origin check for dev middleware (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35051\"\u003e#35051\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📖 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove CSB, set node 22 and use steps for clarity (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35066\"\u003e#35066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIgnore link-like syntax in code (\u003ca href=\"https://github.com/nuxt/nuxt/commit/f9bf11b11\"\u003ef9bf11b11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNarrow engines.node in test (\u003ca href=\"https://github.com/nuxt/nuxt/commit/5ed9a2691\"\u003e5ed9a2691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove unused import (\u003ca href=\"https://github.com/nuxt/nuxt/commit/3a8bb0030\"\u003e3a8bb0030\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelax relative time assertion (\u003ca href=\"https://github.com/nuxt/nuxt/commit/256513eb0\"\u003e256513eb0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMove build assets dir fixture out of \u003ccode\u003eapp/\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/commit/6d2ac69ff\"\u003e6d2ac69ff\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eClean up agent-scan workflow (\u003ca href=\"https://github.com/nuxt/nuxt/commit/31590cf07\"\u003e31590cf07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eContinue autofix workflow when \u003ccode\u003etest:engines\u003c/code\u003e fails (\u003ca href=\"https://github.com/nuxt/nuxt/commit/958abb882\"\u003e958abb882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove workflows (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35088\"\u003e#35088\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDaniel Roe (\u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eJulien Huang (\u003ca href=\"https://github.com/huang-julien\"\u003e\u003ccode\u003e@​huang-julien\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDamian Głowala (\u003ca href=\"https://github.com/DamianGlowala\"\u003e\u003ccode\u003e@​DamianGlowala\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSébastien Chopin (\u003ca href=\"https://github.com/atinux\"\u003e\u003ccode\u003e@​atinux\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdrien Foulon (\u003ca href=\"https://github.com/Tofandel\"\u003e\u003ccode\u003e@​Tofandel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.21.5\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.5 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/1a8fff351be63bdc639a8b0a2f5a9e74dad240c9\"\u003e\u003ccode\u003e1a8fff3\u003c/code\u003e\u003c/a\u003e v3.21.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/d152a5e069b7bcd90200e5d6e2e2c5bbae50e683\"\u003e\u003ccode\u003ed152a5e\u003c/code\u003e\u003c/a\u003e fix(nuxt): run middleware for page islands (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/d6caa8e978e8febb90abaff06a56c68ecb87345a\"\u003e\u003ccode\u003ed6caa8e\u003c/code\u003e\u003c/a\u003e fix(nuxt): render component-less parent routes during client-side nav (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/63e5437fffee6fe9035e0ee5575ccdf0dfd0b5ec\"\u003e\u003ccode\u003e63e5437\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (3.x) (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35076\"\u003e#35076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/21c110acf66d61199df0d1beb94ae8f2776c0433\"\u003e\u003ccode\u003e21c110a\u003c/code\u003e\u003c/a\u003e fix(nitro): validate island request hash matches props (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/17b27b08e180e5012dbeb4b50d1bba2bec93092b\"\u003e\u003ccode\u003e17b27b0\u003c/code\u003e\u003c/a\u003e fix(nuxt): encode html-significant characters in external redirect body (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/c67675c03c8f3c94aa4c3a089eb189780b72a82c\"\u003e\u003ccode\u003ec67675c\u003c/code\u003e\u003c/a\u003e fix(nuxt): mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/702c02b49c884fbe7fda6318d30a50059ab5e193\"\u003e\u003ccode\u003e702c02b\u003c/code\u003e\u003c/a\u003e fix(nuxt): preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/aacb18daadd0b5be8a5190940ffccd845e7f5e11\"\u003e\u003ccode\u003eaacb18d\u003c/code\u003e\u003c/a\u003e fix(nuxt): handle errors fetching app manifest (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/db4b5ff1cd2da44cdf1f9496b6f81c7611a90c1d\"\u003e\u003ccode\u003edb4b5ff\u003c/code\u003e\u003c/a\u003e fix(nuxt): prefer our own builder/server deps (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v3.21.6/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nuxt since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-router` from 7.13.0 to 7.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_defaultShouldRevalidate\u003c/code\u003e as \u003ccode\u003edefaultShouldRevalidate\u003c/code\u003e on \u003ccode\u003e\u0026lt;Link\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;Form\u0026gt;\u003c/code\u003e, \u003ccode\u003euseLinkClickHandler\u003c/code\u003e, \u003ccode\u003euseSubmit\u003c/code\u003e, \u003ccode\u003efetcher.submit\u003c/code\u003e, and \u003ccode\u003esetSearchParams\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize the instrumentation APIs. \u003ccode\u003eunstable_instrumentations\u003c/code\u003e is now \u003ccode\u003einstrumentations\u003c/code\u003e and \u003ccode\u003eunstable_pattern\u003c/code\u003e is now \u003ccode\u003epattern\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eunstable_ServerInstrumentation\u003c/code\u003e, \u003ccode\u003eunstable_ClientInstrumentation\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRequestHandlerFunction\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRouterFunction\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRouteFunction\u003c/code\u003e, and \u003ccode\u003eunstable_InstrumentationHandlerResult\u003c/code\u003e types have had their \u003ccode\u003eunstable_\u003c/code\u003e prefixes removed\u003c/li\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_mask\u003c/code\u003e as \u003ccode\u003emask\u003c/code\u003e on \u003ccode\u003e\u0026lt;Link\u0026gt;\u003c/code\u003e, \u003ccode\u003euseLinkClickHandler\u003c/code\u003e, and \u003ccode\u003euseNavigate\u003c/code\u003e, and rename the corresponding \u003ccode\u003eLocation.unstable_mask\u003c/code\u003e field to \u003ccode\u003eLocation.mask\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize the \u003ccode\u003eunstable_normalizePath\u003c/code\u003e option on \u003ccode\u003estaticHandler.query\u003c/code\u003e and \u003ccode\u003estaticHandler.queryRoute\u003c/code\u003e as \u003ccode\u003enormalizePath\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003efuture.unstable_passThroughRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_passThroughRequests\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003eunstable_subResourceIntegrity\u003c/code\u003e from the runtime \u003ccode\u003eFutureConfig\u003c/code\u003e type; the flag is now controlled by the top-level \u003ccode\u003esubResourceIntegrity\u003c/code\u003e option in \u003ccode\u003ereact-router.config.ts\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_url\u003c/code\u003e as \u003ccode\u003eurl\u003c/code\u003e on \u003ccode\u003eloader\u003c/code\u003e, \u003ccode\u003eaction\u003c/code\u003e, and \u003ccode\u003emiddleware\u003c/code\u003e function args (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_useTransitions\u003c/code\u003e as \u003ccode\u003euseTransitions\u003c/code\u003e on \u003ccode\u003e\u0026lt;BrowserRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HashRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HistoryRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;MemoryRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;Router\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;RouterProvider\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HydratedRouter\u0026gt;\u003c/code\u003e, and \u003ccode\u003euseLinkClickHandler\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd \u003ccode\u003enonce\u003c/code\u003e to \u003ccode\u003e\u0026lt;Scripts\u0026gt;\u003c/code\u003e \u003ccode\u003e\u0026lt;link rel=\u0026quot;modulepreload\u0026quot;\u0026gt;\u003c/code\u003e elements (if provided) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug with \u003ccode\u003eunstable_defaultShouldRevalidate={false}\u003c/code\u003e where parent routes that did not export a \u003ccode\u003eshouldRevalidate\u003c/code\u003e function could be incorrectly included in the single fetch call for new child route data (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15012\"\u003e#15012\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove server-side route matching performance by pre-computing flattened/cached route branches (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14967\"\u003e#14967\u003c/a\u003e) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePerformance benchmarks showed roughly a 10-15% improvement in server-side request handling performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eMark \u003ccode\u003emask\u003c/code\u003e as an optional field in \u003ccode\u003eLocation\u003c/code\u003e for easier mocking in unit tests (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14999\"\u003e#14999\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCache flattened/ranked route branches to optimize server-side route matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14967\"\u003e#14967\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove route matching performance in Framework/Data Mode (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14971\"\u003e#14971\u003c/a\u003e) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAvoiding unnecessary calls to \u003ccode\u003ematchRoutes\u003c/code\u003e in data router scenarios\n\u003cul\u003e\n\u003cli\u003eThis includes adding back the optimization that was removed in \u003ccode\u003e7.6.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/13562\"\u003e#13562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe issues that prompted the revert have been addressed by using the available router \u003ccode\u003ematches\u003c/code\u003e but always updating \u003ccode\u003ematch.route\u003c/code\u003e to the latest route in the \u003ccode\u003emanifest\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eLeverage pre-computed pre-computing flattened/cached route branches during client side route matching\u003c/li\u003e\n\u003cli\u003ePerformance benchmarks showed roughly a 15-30% improvement in server-side request handling performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/97c8de79c38f107acd15f74d8295c7bf75894a5d\"\u003e\u003ccode\u003e97c8de7\u003c/code\u003e\u003c/a\u003e Release v7.15.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15018\"\u003e#15018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b71c15fa502cb0918482597284e8cb39c4\"\u003e\u003ccode\u003eaf5d49b\u003c/code\u003e\u003c/a\u003e Update change files again\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09533fa15bbf01ce734c8c7c116564cf4b7\"\u003e\u003ccode\u003ea993f09\u003c/code\u003e\u003c/a\u003e Update change files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/362635b8fdf020afdf697823ca71ba4c01b40e0d\"\u003e\u003ccode\u003e362635b\u003c/code\u003e\u003c/a\u003e Move chnageset to change file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/e756132b5bcae52b65c504bdac8cec406c746e62\"\u003e\u003ccode\u003ee756132\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/49295b5c220b567cff9934ddf0199877663b552c\"\u003e\u003ccode\u003e49295b5\u003c/code\u003e\u003c/a\u003e Stabilize APIs (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14999\"\u003e#14999\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5f61543c31c442271162b31ee9fe1499e170c68c\"\u003e\u003ccode\u003e5f61543\u003c/code\u003e\u003c/a\u003e Client-side route matching optimizations (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14971\"\u003e#14971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/67518cb61054f1b3eede95dde95480aca962626d\"\u003e\u003ccode\u003e67518cb\u003c/code\u003e\u003c/a\u003e Remove unnecessary hasShouldRevalidate condition for opting out (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15012\"\u003e#15012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6f18edde6b5eac5f7028bfde885bbb8031025480\"\u003e\u003ccode\u003e6f18edd\u003c/code\u003e\u003c/a\u003e Add nonce to scripts \u003ccode\u003emodulepreload\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15002\"\u003e#15002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/10a968671d94a1147d78e766cffae33c6d151162\"\u003e\u003ccode\u003e10a9686\u003c/code\u003e\u003c/a\u003e Migrate changeset to change file\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.15.0/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.2 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFetch adapter now enforces \u003ccode\u003emaxBodyLength\u003c/code\u003e and \u003ccode\u003emaxContentLength\u003c/code\u003e.\u003c/strong\u003e These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy requests now preserve user-supplied \u003ccode\u003eHost\u003c/code\u003e headers.\u003c/strong\u003e Previously, the proxy path could overwrite a custom \u003ccode\u003eHost\u003c/code\u003e. Virtual-host-style routing through a proxy will now behave correctly. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBasic auth credentials embedded in URLs are now URL-decoded.\u003c/strong\u003e If you have percent-encoded credentials in a URL (e.g. \u003ccode\u003ehttps://user:p%40ss@host\u003c/code\u003e), the decoded value is what now goes on the wire. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eparseProtocol\u003c/code\u003e now strictly requires a colon in the protocol separator.\u003c/strong\u003e Strings that loosely parsed as protocols before may no longer match. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecated \u003ccode\u003eunescape()\u003c/code\u003e replaced with modern UTF-8 encoding.\u003c/strong\u003e Non-ASCII URL handling is now spec-correct; consumers depending on legacy \u003ccode\u003eunescape()\u003c/code\u003e quirks may see different output bytes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003etransformRequest\u003c/code\u003e input typing change was reverted.\u003c/strong\u003e The typing change introduced in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e was reverted in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e after follow-up review — net behavior is unchanged from 1.15.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eQUERY HTTP Method:\u003c/strong\u003e Added support for the QUERY HTTP method across adapters and type definitions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10802\"\u003e#10802\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eECONNREFUSED Error Constant:\u003c/strong\u003e Exposed \u003ccode\u003eECONNREFUSED\u003c/code\u003e as a constant on \u003ccode\u003eAxiosError\u003c/code\u003e so callers can match connection-refused failures without comparing string literals (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/6485\"\u003e#6485\u003c/a\u003e). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncode Helper Export:\u003c/strong\u003e Exported the internal \u003ccode\u003eencode\u003c/code\u003e helper from \u003ccode\u003ebuildURL\u003c/code\u003e so userland param serializers can reuse the same encoding logic that axios uses internally. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6897\"\u003e#6897\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Redirects \u0026amp; Headers:\u003c/strong\u003e Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing \u003ccode\u003erequestDetails\u003c/code\u003e argument on \u003ccode\u003ebeforeRedirect\u003c/code\u003e, preserved user-supplied \u003ccode\u003eHost\u003c/code\u003e headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10794\"\u003e#10794\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10800\"\u003e#10800\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6241\"\u003e#6241\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Streams \u0026amp; Timeouts:\u003c/strong\u003e Preserved the partial response object on \u003ccode\u003eAxiosError\u003c/code\u003e when a stream is aborted after headers arrive, honoured the \u003ccode\u003etimeout\u003c/code\u003e option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and \u003ccode\u003emaxRedirects: 0\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10708\"\u003e#10708\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10819\"\u003e#10819\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7149\"\u003e#7149\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Enforced \u003ccode\u003emaxBodyLength\u003c/code\u003e / \u003ccode\u003emaxContentLength\u003c/code\u003e in the fetch adapter, set the \u003ccode\u003eUser-Agent\u003c/code\u003e header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a \u003ccode\u003eTypeError\u003c/code\u003e in restricted environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10772\"\u003e#10772\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10806\"\u003e#10806\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7260\"\u003e#7260\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Adapter:\u003c/strong\u003e Unsubscribed the \u003ccode\u003ecancelToken\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eError Handling:\u003c/strong\u003e Attached the parsed response to \u003ccode\u003eAxiosError\u003c/code\u003e when \u003ccode\u003eJSON.parse\u003c/code\u003e fails inside \u003ccode\u003edispatchRequest\u003c/code\u003e, prevented \u003ccode\u003esettle\u003c/code\u003e from emitting \u003ccode\u003eundefined\u003c/code\u003e error codes, and tightened the \u003ccode\u003eparseProtocol\u003c/code\u003e regex to require a colon in the protocol separator. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10724\"\u003e#10724\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7276\"\u003e#7276\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTypes \u0026amp; Exports:\u003c/strong\u003e Aligned the CommonJS \u003ccode\u003eCancelToken\u003c/code\u003e typings with the ESM build, fixed a compiler error caused by \u003ccode\u003eRawAxiosHeaders\u003c/code\u003e, and re-exported \u003ccode\u003ecreate\u003c/code\u003e from the package index. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7414\"\u003e#7414\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6389\"\u003e#6389\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6460\"\u003e#6460\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUTF-8 Encoding:\u003c/strong\u003e Replaced the deprecated \u003ccode\u003eunescape()\u003c/code\u003e call with a modern UTF-8 encoding implementation. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMisc Cleanup:\u003c/strong\u003e Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10833\"\u003e#10833\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRefactor — ES6 Modernisation:\u003c/strong\u003e Modernised the \u003ccode\u003eutils\u003c/code\u003e module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Hardened the HTTP test server lifecycle to fix flaky \u003ccode\u003eFormData\u003c/code\u003e EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10820\"\u003e#10820\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10791\"\u003e#10791\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10796\"\u003e#10796\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Documented \u003ccode\u003eparamsSerializer.encode\u003c/code\u003e for strict RFC 3986 query encoding, updated the \u003ccode\u003eparseReviver\u003c/code\u003e TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10821\"\u003e#10821\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10782\"\u003e#10782\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10759\"\u003e#10759\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10804\"\u003e#10804\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eReverted:\u003c/strong\u003e Reverted the \u003ccode\u003etransformRequest\u003c/code\u003e input typing change from \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e after follow-up review. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eactions/setup-node\u003c/code\u003e, the \u003ccode\u003egithub-actions\u003c/code\u003e group, and \u003ccode\u003epostcss\u003c/code\u003e (in \u003ccode\u003e/docs\u003c/code\u003e) to their latest versions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10785\"\u003e#10785\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10813\"\u003e#10813\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10814\"\u003e#10814\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRelease:\u003c/strong\u003e Updated changelog and packages, and prepared the 1.16.0 release. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10790\"\u003e#10790\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10834\"\u003e#10834\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/singhankit001\"\u003e\u003ccode\u003e@​singhankit001\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/iruizsalinas\"\u003e\u003ccode\u003e@​iruizsalinas\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/MarcosNocetti\"\u003e\u003ccode\u003e@​MarcosNocetti\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/deepview-autofix\"\u003e\u003ccode\u003e@​deepview-autofix\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFetch adapter now enforces \u003ccode\u003emaxBodyLength\u003c/code\u003e and \u003ccode\u003emaxContentLength\u003c/code\u003e.\u003c/strong\u003e These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy requests now preserve user-supplied \u003ccode\u003eHost\u003c/code\u003e headers.\u003c/strong\u003e Previously, the proxy path could overwrite a custom \u003ccode\u003eHost\u003c/code\u003e. Virtual-host-style routing through a proxy will now behave correctly. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBasic auth credentials embedded in URLs are now URL-decoded.\u003c/strong\u003e If you have percent-encoded credentials in a URL (e.g. \u003ccode\u003ehttps://user:p%40ss@host\u003c/code\u003e), the decoded value is what now goes on the wire. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eparseProtocol\u003c/code\u003e now strictly requires a colon in the protocol separator.\u003c/strong\u003e Strings that loosely parsed as protocols before may no longer match. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecated \u003ccode\u003eunescape()\u003c/code\u003e replaced with modern UTF-8 encoding.\u003c/strong\u003e Non-ASCII URL handling is now spec-correct; consumers depending on legacy \u003ccode\u003eunescape()\u003c/code\u003e quirks may see different output bytes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003etransformRequest\u003c/code\u003e input typing change was reverted.\u003c/strong\u003e The typing change introduced in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e was reverted in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e after follow-up review — net behavior is unchanged from 1.15.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eQUERY HTTP Method:\u003c/strong\u003e Added support for the QUERY HTTP method across adapters and type definitions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10802\"\u003e#10802\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eECONNREFUSED Error Constant:\u003c/strong\u003e Exposed \u003ccode\u003eECONNREFUSED\u003c/code\u003e as a constant on \u003ccode\u003eAxiosError\u003c/code\u003e so callers can match connection-refused failures without comparing string literals (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/6485\"\u003e#6485\u003c/a\u003e). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncode Helper Export:\u003c/strong\u003e Exported the internal \u003ccode\u003eencode\u003c/code\u003e helper from \u003ccode\u003ebuildURL\u003c/code\u003e so userland param serializers can reuse the same encoding logic that axios uses internally. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6897\"\u003e#6897\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Redirects \u0026amp; Headers:\u003c/strong\u003e Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing \u003ccode\u003erequestDetails\u003c/code\u003e argument on \u003ccode\u003ebeforeRedirect\u003c/code\u003e, preserved user-supplied \u003ccode\u003eHost\u003c/code\u003e headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10794\"\u003e#10794\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10800\"\u003e#10800\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6241\"\u003e#6241\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Streams \u0026amp; Timeouts:\u003c/strong\u003e Preserved the partial response object on \u003ccode\u003eAxiosError\u003c/code\u003e when a stream is aborted after headers arrive, honoured the \u003ccode\u003etimeout\u003c/code\u003e option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and \u003ccode\u003emaxRedirects: 0\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10708\"\u003e#10708\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10819\"\u003e#10819\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7149\"\u003e#7149\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Enforced \u003ccode\u003emaxBodyLength\u003c/code\u003e / \u003ccode\u003emaxContentLength\u003c/code\u003e in the fetch adapter, set the \u003ccode\u003eUser-Agent\u003c/code\u003e header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a \u003ccode\u003eTypeError\u003c/code\u003e in restricted environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10772\"\u003e#10772\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10806\"\u003e#10806\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7260\"\u003e#7260\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Adapter:\u003c/strong\u003e Unsubscribed the \u003ccode\u003ecancelToken\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eError Handling:\u003c/strong\u003e Attached the parsed response to \u003ccode\u003eAxiosError\u003c/code\u003e when \u003ccode\u003eJSON.parse\u003c/code\u003e fails inside \u003ccode\u003edispatchRequest\u003c/code\u003e, prevented \u003ccode\u003esettle\u003c/code\u003e from emitting \u003ccode\u003eundefined\u003c/code\u003e error codes, and tightened the \u003ccode\u003eparseProtocol\u003c/code\u003e regex to require a colon in the protocol separator. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10724\"\u003e#10724\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7276\"\u003e#7276\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTypes \u0026amp; Exports:\u003c/strong\u003e Aligned the CommonJS \u003ccode\u003eCancelToken\u003c/code\u003e typings with the ESM build, fixed a compiler error caused by \u003ccode\u003eRawAxiosHeaders\u003c/code\u003e, and re-exported \u003ccode\u003ecreate\u003c/code\u003e from the package index. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7414\"\u003e#7414\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6389\"\u003e#6389\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6460\"\u003e#6460\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUTF-8 Encoding:\u003c/strong\u003e Replaced the deprecated \u003ccode\u003eunescape()\u003c/code\u003e call with a modern UTF-8 encoding implementation. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMisc Cleanup:\u003c/strong\u003e Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10833\"\u003e#10833\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRefactor — ES6 Modernisation:\u003c/strong\u003e Modernised the \u003ccode\u003eutils\u003c/code\u003e module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Hardened the HTTP test server lifecycle to fix flaky \u003ccode\u003eFormData\u003c/code\u003e EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10820\"\u003e#10820\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10791\"\u003e#10791\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10796\"\u003e#10796\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Documented \u003ccode\u003eparamsSerializer.encode\u003c/code\u003e for strict RFC 3986 query encoding, updated the \u003ccode\u003eparseReviver\u003c/code\u003e TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10821\"\u003e#10821\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10782\"\u003e#10782\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10759\"\u003e#10759\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10804\"\u003e#10804\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eReverted:\u003c/strong\u003e Reverted the \u003ccode\u003etransformRequest\u003c/code\u003e input typing change from \u003ca href=\"https://redirect.github.com...\n\n_Description has been truncated_","html_url":"https://github.com/SherfeyInv/sentry-javascript/pull/259","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fsentry-javascript/issues/259","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/259/packages"},{"uuid":"4528632383","node_id":"PR_kwDOPNWXvM7fofot","number":100,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 24 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T01:15:43.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T01:07:24.000Z","updated_at":"2026-05-27T01:15:46.000Z","time_to_close":499,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":9,"packages":[{"name":"js-cookie","old_version":"3.0.5","new_version":"3.0.7","repository_url":"https://github.com/js-cookie/js-cookie"},{"name":"next","old_version":"14.2.25","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"protobufjs","old_version":"7.4.0","new_version":"7.5.8","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"uuid","old_version":"9.0.1","new_version":"14.0.0","repository_url":"https://github.com/uuidjs/uuid"},{"name":"ws","old_version":"8.17.1","new_version":"8.20.1","repository_url":"https://github.com/websockets/ws"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.16.1","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.7` |\n| [next](https://github.com/vercel/next.js) | `14.2.25` | `15.5.18` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.5.8` |\n| [uuid](https://github.com/uuidjs/uuid) | `9.0.1` | `14.0.0` |\n| [ws](https://github.com/websockets/ws) | `8.17.1` | `8.20.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.2` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.16.1` |\n\nBumps the npm_and_yarn group with 1 update in the /bifrost directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 3 updates in the /docs directory: [ws](https://github.com/websockets/ws), [axios](https://github.com/axios/axios) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 2 updates in the /examples/anthropic directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 3 updates in the /examples/asyncExample directory: [ws](https://github.com/websockets/ws), [axios](https://github.com/axios/axios) and [@tootallnate/once](https://github.com/TooTallNate/once).\nBumps the npm_and_yarn group with 1 update in the /examples/azure_sdk directory: [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 1 update in the /examples/chat_session_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/logBuilder directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/logBuilderSingleRequest directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 2 updates in the /examples/openai_to_anthropic directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 1 update in the /examples/prompt-quick-test directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/qawolf directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [uuid](https://github.com/uuidjs/uuid) and [ws](https://github.com/websockets/ws).\nBumps the npm_and_yarn group with 1 update in the /examples/score_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/session_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [uuid](https://github.com/uuidjs/uuid), [ws](https://github.com/websockets/ws) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /examples/vercel-ai-sdk-example directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /examples/vertex directory: [uuid](https://github.com/uuidjs/uuid) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 2 updates in the /helicone-cron directory: [ws](https://github.com/websockets/ws) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `13.5.7` | `15.5.18` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.6.1` |\n| [ws](https://github.com/websockets/ws) | `8.18.0` | `8.21.0` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.16.1` |\n| [qs](https://github.com/ljharb/qs) | `6.11.2` | `removed` |\n| [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `2.0.1` |\n\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript/helpers directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 3 updates in the /valhalla/jawn directory: [protobufjs](https://github.com/protobufjs/protobuf.js), [uuid](https://github.com/uuidjs/uuid) and [ws](https://github.com/websockets/ws).\nBumps the npm_and_yarn group with 1 update in the /web directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /worker directory: [ws](https://github.com/websockets/ws) and [axios](https://github.com/axios/axios).\n\nUpdates `js-cookie` from 3.0.5 to 3.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/js-cookie/js-cookie/releases\"\u003ejs-cookie's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent cookie attribute injection: CVE-2026-46625 (eb3c40e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePartitioned\u003c/code\u003e attribute to readme (b994768)\u003c/li\u003e\n\u003cli\u003ePublish to npm registry via trusted publisher exclusively (4dc71be)\u003c/li\u003e\n\u003cli\u003eEnsure consistent behaviour for \u003ccode\u003eget('name')\u003c/code\u003e + \u003ccode\u003eget()\u003c/code\u003e (1953d30)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/17bacba0171dd022728d8fdeba3203c60791bf58\"\u003e\u003ccode\u003e17bacba\u003c/code\u003e\u003c/a\u003e Craft v3.0.7 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/adb823cb7e95ead47f3af4d4951e589acbde2077\"\u003e\u003ccode\u003eadb823c\u003c/code\u003e\u003c/a\u003e Fix release workflow halting at \u003ccode\u003egit tag\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/5f9e759b07d2752e8407a3a43fb5f879bf384c5e\"\u003e\u003ccode\u003e5f9e759\u003c/code\u003e\u003c/a\u003e May remove Git user config from release workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/6ac921184c7b3b7d9431c88707f56521acd72ab4\"\u003e\u003ccode\u003e6ac9211\u003c/code\u003e\u003c/a\u003e Fix release workflow not able to push commit + tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/2278bc55e1804c4c2d9bd2110a9b449949a52751\"\u003e\u003ccode\u003e2278bc5\u003c/code\u003e\u003c/a\u003e Fix missing package version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020\"\u003e\u003ccode\u003eeb3c40e\u003c/code\u003e\u003c/a\u003e Prevent cookie attribute injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/f6f157f430d707d2ffd0c9c9138227a6cea564e5\"\u003e\u003ccode\u003ef6f157f\u003c/code\u003e\u003c/a\u003e Bump globals from 17.5.0 to 17.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/f409d022da50a0c6fa8724f087fbc50fab9a9533\"\u003e\u003ccode\u003ef409d02\u003c/code\u003e\u003c/a\u003e Bump eslint from 10.2.0 to 10.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/a686883c03a754c04546cfc1653911a70a640b40\"\u003e\u003ccode\u003ea686883\u003c/code\u003e\u003c/a\u003e Bump protobufjs in the npm_and_yarn group across 1 directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/c6112d2d4f2881a12aaf89d9e2996ef6870eb6d0\"\u003e\u003ccode\u003ec6112d2\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​protobufjs/utf8\u003c/code\u003e in the npm_and_yarn group across 1 directory\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/js-cookie/js-cookie/compare/v3.0.5...v3.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for js-cookie since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.25 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `protobufjs` from 7.4.0 to 7.5.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protobufjs/protobuf.js/releases\"\u003eprotobufjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eprotobufjs: v7.5.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.7...protobufjs-v7.5.8\"\u003e7.5.8\u003c/a\u003e (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e54b593f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.6...protobufjs-v7.5.7\"\u003e7.5.7\u003c/a\u003e (2026-05-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRestore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003ecc7d595\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.6\"\u003e7.5.6\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e75392ea\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.5.5\u003c/h2\u003e\n\u003cp\u003eThis release backports two reported security issues to 7.x branch.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: do not allow setting \u003ccode\u003e__proto__\u003c/code\u003e in Message constructor (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2126\"\u003e#2126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: filter invalid characters from the type name (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2127\"\u003e#2127\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.4...protobufjs-v7.5.5\"\u003ehttps://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.4...protobufjs-v7.5.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eprotobufjs: v7.5.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.3...protobufjs-v7.5.4\"\u003e7.5.4\u003c/a\u003e (2025-08-15)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003einvalid syntax in descriptor.proto (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2092\"\u003e#2092\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/5a3769a465fead089a533ad55c21d069299df760\"\u003e5a3769a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.2...protobufjs-v7.5.3\"\u003e7.5.3\u003c/a\u003e (2025-05-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edescriptor extensions handling post-editions (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2075\"\u003e#2075\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6e255d4ad6982cc857f26e1731c2cedcf5796f68\"\u003e6e255d4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.1...protobufjs-v7.5.2\"\u003e7.5.2\u003c/a\u003e (2025-05-14)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md\"\u003eprotobufjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.7...protobufjs-v7.5.8\"\u003e7.5.8\u003c/a\u003e (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e54b593f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.6...protobufjs-v7.5.7\"\u003e7.5.7\u003c/a\u003e (2026-05-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRestore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003ecc7d595\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.6\"\u003e7.5.6\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e75392ea\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.3...protobufjs-v7.5.4\"\u003e7.5.4\u003c/a\u003e (2025-08-15)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003einvalid syntax in descriptor.proto (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2092\"\u003e#2092\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/5a3769a465fead089a533ad55c21d069299df760\"\u003e5a3769a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.2...protobufjs-v7.5.3\"\u003e7.5.3\u003c/a\u003e (2025-05-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edescriptor extensions handling post-editions (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2075\"\u003e#2075\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6e255d4ad6982cc857f26e1731c2cedcf5796f68\"\u003e6e255d4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.1...protobufjs-v7.5.2\"\u003e7.5.2\u003c/a\u003e (2025-05-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eensure that types are always resolved (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2068\"\u003e#2068\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/4b51cb2b8450b77f9f5de1c562e7fae93b19d040\"\u003e4b51cb2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.0...protobufjs-v7.5.1\"\u003e7.5.1\u003c/a\u003e (2025-05-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eoptimize regressions from editions implementations (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2066\"\u003e#2066\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6406d4c18afae309fc7b5f4a24d9674d85da180b\"\u003e6406d4c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereserved field inside group blocks fail parsing (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2058\"\u003e#2058\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/56782bff0c4b5132806eb1a6bc4d08f930c4aaad\"\u003e56782bf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/d7035f9b7f06210ea343cab1f2f1cc18ee5cc1d6\"\u003e\u003ccode\u003ed7035f9\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2248\"\u003e#2248\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e\u003ccode\u003e54b593f\u003c/code\u003e\u003c/a\u003e fix: Backport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/e88fcea1635f79c414e8a070e164d38ea99e104a\"\u003e\u003ccode\u003ee88fcea\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2239\"\u003e#2239\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003e\u003ccode\u003ecc7d595\u003c/code\u003e\u003c/a\u003e fix: Restore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/3abc9b54d67a7102785c6dfd8bf6610f545d445b\"\u003e\u003ccode\u003e3abc9b5\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/a0bf2dfdd8a75aa62ce5a1ff47a52b9b8f1ea793\"\u003e\u003ccode\u003ea0bf2df\u003c/code\u003e\u003c/a\u003e fix: Update CLI peer dependency (7.x) (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2189\"\u003e#2189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/2189e5beeca6a70e4c104dfdb9fb8200bc5f81fe\"\u003e\u003ccode\u003e2189e5b\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2174\"\u003e#2174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e\u003ccode\u003e75392ea\u003c/code\u003e\u003c/a\u003e fix: Backport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/8af8d7c0e9800879625f7d0d4a7fb51beb4410cd\"\u003e\u003ccode\u003e8af8d7c\u003c/code\u003e\u003c/a\u003e chore(ci): Fix 7.x release please configuration (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/e92ca42244ad67203b48d836290062dae037ead6\"\u003e\u003ccode\u003ee92ca42\u003c/code\u003e\u003c/a\u003e chore(ci): Enable release-please for 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2166\"\u003e#2166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.4.0...protobufjs-v7.5.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for protobufjs since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 9.0.1 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v12.0.1\"\u003e12.0.1\u003c/a\u003e (2026-04-29)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.1.0...v12.0.0\"\u003e12.0.0\u003c/a\u003e (2025-09-05)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd node@24 to ci matrix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/879\"\u003e#879\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/42b6178aa21a593257f0a72abacd220f0b7b8a92\"\u003e42b6178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f38cf10366ab074f9328ae2021eea04d5f2e530\"\u003e0f38cf1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ae786e27265f50bcf7cead196c29f1869297c42f\"\u003eae786e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/c7ee40598ed78584d81ab78dffded9fe5ff20b01\"\u003ec7ee405\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove v4() performance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/894\"\u003e#894\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/5fd974c12718c8848035650b69b8948f12ace197\"\u003e5fd974c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore node: prefix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/889\"\u003e#889\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/e1f42a354593093ba0479f0b4047dae82d28c507\"\u003ee1f42a3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0\"\u003e11.1.0\u003c/a\u003e (2025-02-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/7c1ea087a8149b57380fc8bb7f68c3a215cb6e4b\"\u003e\u003ccode\u003e7c1ea08\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.0 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34\"\u003e\u003ccode\u003e3d2c5b0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003e\u003ccode\u003ef2c235f\u003c/code\u003e\u003c/a\u003e fix!: expect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/529ef0899f5dd503d2ee90d690585d63d78bc212\"\u003e\u003ccode\u003e529ef08\u003c/code\u003e\u003c/a\u003e chore: upgrade TypeScript and fixup types (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/086fd7976f11433edf9ac80be876b3ad243fe087\"\u003e\u003ccode\u003e086fd79\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/933\"\u003e#933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003e\u003ccode\u003edc4ddb8\u003c/code\u003e\u003c/a\u003e feat!: drop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f1f9c9c9cedbae5a1d363d5406c5dfbabe81404\"\u003e\u003ccode\u003e0f1f9c9\u003c/code\u003e\u003c/a\u003e chore: switch to Biome for parsing and linting (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/e2879e64bf125add903c1eff6e0860542c605013\"\u003e\u003ccode\u003ee2879e6\u003c/code\u003e\u003c/a\u003e chore: use maintained version of npm-run-all (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003e\u003ccode\u003effa3138\u003c/code\u003e\u003c/a\u003e fix: Use GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0423d49df2dc8efc300c804731d25f4d7e0fccc4\"\u003e\u003ccode\u003e0423d49\u003c/code\u003e\u003c/a\u003e docs: remove obsolete v1 option notes (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/915\"\u003e#915\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v9.0.1...v14.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.17.1 to 8.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.20.1\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an uninitialized memory disclosure issue in \u003ccode\u003ewebsocket.close()\u003c/code\u003e\n(c0327ec1).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eProviding a \u003ccode\u003eTypedArray\u003c/code\u003e (e.g. \u003ccode\u003eFloat32Array\u003c/code\u003e) as the \u003ccode\u003ereason\u003c/code\u003e argument for\n\u003ccode\u003ewebsocket.close()\u003c/code\u003e, rather than the supported string or \u003ccode\u003eBuffer\u003c/code\u003e types, caused\nuninitialized memory to be disclosed to the remote peer.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { deepStrictEqual } from 'node:assert';\r\nimport { WebSocket, WebSocketServer } from 'ws';\r\n\u003cp\u003econst wss = new WebSocketServer(\n{ port: 0, skipUTF8Validation: true },\nfunction () {\nconst { port } = wss.address();\nconst ws = new WebSocket(\u003ccode\u003ews://localhost:${port}\u003c/code\u003e, {\nskipUTF8Validation: true\n});\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003ews.on('close', function (code, reason) {\r\n  deepStrictEqual(reason, Buffer.alloc(80));\r\n});\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e}\n);\u003c/p\u003e\n\u003cp\u003ewss.on('connection', function (ws) {\nws.close(1000, new Float32Array(20));\n});\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe issue was privately reported by \u003ca href=\"https://github.com/ChALkeR\"\u003eNikita Skovoroda\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e8.20.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded exports for the \u003ccode\u003ePerMessageDeflate\u003c/code\u003e class and utilities for the\n\u003ccode\u003eSec-WebSocket-Extensions\u003c/code\u003e and \u003ccode\u003eSec-WebSocket-Protocol\u003c/code\u003e headers (d3503c1f).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.19.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded the \u003ccode\u003ecloseTimeout\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2308\"\u003e#2308\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eHandled a forthcoming breaking change in Node.js core (19984854).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/5d9b316230ea931532a6671cc450f18c11edd02f\"\u003e\u003ccode\u003e5d9b316\u003c/code\u003e\u003c/a\u003e [dist] 8.20.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086\"\u003e\u003ccode\u003ec0327ec\u003c/code\u003e\u003c/a\u003e [security] Fix uninitialized memory disclosure in \u003ccode\u003ewebsocket.close()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/ce2a3d62437995a47e6056d485a33d21b6a8f867\"\u003e\u003ccode\u003ece2a3d6\u003c/code\u003e\u003c/a\u003e [ci] Test on node 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/58e45b872bb0f35a3edd553c27e105300a4f5bd0\"\u003e\u003ccode\u003e58e45b8\u003c/code\u003e\u003c/a\u003e [ci] Do not test on node 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/5f26c245231a4b018479a9269e8c3da4773fe42f\"\u003e\u003ccode\u003e5f26c24\u003c/code\u003e\u003c/a\u003e [ci] Run the lint step on node 24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/843925544e2f4cffe445e0179947f56d6c5b608f\"\u003e\u003ccode\u003e8439255\u003c/code\u003e\u003c/a\u003e [dist] 8.20.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/d3503c1fd36a310985108f62b343bae18346ab67\"\u003e\u003ccode\u003ed3503c1\u003c/code\u003e\u003c/a\u003e [minor] Export the \u003ccode\u003ePerMessageDeflate\u003c/code\u003e class and header utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/3ee5349a0b1580f6e1f347b59ec3371011bd8481\"\u003e\u003ccode\u003e3ee5349\u003c/code\u003e\u003c/a\u003e [api] Convert the \u003ccode\u003eisServer\u003c/code\u003e and \u003ccode\u003emaxPayload\u003c/code\u003e parameters to options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/91707b470ebd803aaa3fd1e896217740f39267d4\"\u003e\u003ccode\u003e91707b4\u003c/code\u003e\u003c/a\u003e [doc] Add missing space\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/8b553192268810a83253e2a4a39ac16768e75bb3\"\u003e\u003ccode\u003e8b55319\u003c/code\u003e\u003c/a\u003e [pkg] Update eslint to version 10.0.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/websockets/ws/compare/8.17.1...8.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.1 — May 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release ships a defence-in-depth fix for prototype pollution in \u003ccode\u003eformDataToJSON\u003c/code\u003e, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePrototype Pollution Defence-in-Depth:\u003c/strong\u003e Hardened \u003ccode\u003eformDataToJSON\u003c/code\u003e against already-polluted \u003ccode\u003eObject.prototype\u003c/code\u003e by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Cleartext Leak:\u003c/strong\u003e Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCI Cache Removal:\u003c/strong\u003e Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eData URI Parsing:\u003c/strong\u003e Updated the \u003ccode\u003efromDataURI\u003c/code\u003e regex to match RFC 2397 more strictly, fixing edge cases in \u003ccode\u003edata:\u003c/code\u003e URL handling. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUnicode Headers:\u003c/strong\u003e Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10850\"\u003e#10850\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Upload Progress:\u003c/strong\u003e Guarded against malformed \u003ccode\u003eProgressEvent\u003c/code\u003e payloads emitted by some environments during XHR upload, preventing crashes when \u003ccode\u003eloaded\u003c/code\u003e / \u003ccode\u003etotal\u003c/code\u003e are missing or invalid. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWebpack 4 Fetch Adapter:\u003c/strong\u003e Fixed an \u0026quot;unexpected token\u0026quot; error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10864\"\u003e#10864\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eType Definitions:\u003c/strong\u003e Made \u003ccode\u003eparseReviver\u003c/code\u003e \u003ccode\u003econtext.source\u003c/code\u003e optional in the type definitions to align with the ES2023 specification. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10837\"\u003e#10837\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURL Object Support Reverted:\u003c/strong\u003e Reverted the change that allowed passing a \u003ccode\u003eURL\u003c/code\u003e object as \u003ccode\u003econfig.url\u003c/code\u003e (originally \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCycle Detection Refactor:\u003c/strong\u003e Replaced the array-based cycle tracker in \u003ccode\u003etoJSONObject\u003c/code\u003e with a \u003ccode\u003eWeakSet\u003c/code\u003e, improving performance and memory behaviour on large nested structures. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10832\"\u003e#10832\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecomposeSignals Cleanup:\u003c/strong\u003e Refactored \u003ccode\u003ecomposeSignals\u003c/code\u003e to use a clearer early-return structure, simplifying the cancellation/abort composition path. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10844\"\u003e#10844\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAI Readiness \u0026amp; Repo Docs:\u003c/strong\u003e Added \u003ccode\u003eAGENTS.md\u003c/code\u003e and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10835\"\u003e#10835\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10841\"\u003e#10841\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs Improvements:\u003c/strong\u003e Clarified the GET request example, fixed the interceptor \u003ccode\u003eeject\u003c/code\u003e example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSponsorship Tooling:\u003c/strong\u003e Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10843\"\u003e#10843\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10859\"\u003e#10859\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@commitlint/cli\u003c/code\u003e from 20.5.0 to 20.5.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10846\"\u003e#10846\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/hpinmetaverse\"\u003e\u003ccode\u003e@​hpinmetaverse\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/tommyhgunz14\"\u003e\u003ccode\u003e@​tommyhgunz14\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/divyanshuraj1095\"\u003e\u003ccode\u003e@​divyanshuraj1095\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/sagodi97\"\u003e\u003ccode\u003e@​sagodi97\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/rkdfx\"\u003e\u003ccode\u003e@​rkdfx\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Liuwei1125\"\u003e\u003ccode\u003e@​Liuwei1125\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.16.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.1 — May 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release ships a defence-in-depth fix for prototype pollution in \u003ccode\u003eformDataToJSON\u003c/code\u003e, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePrototype Pollution Defence-in-Depth:\u003c/strong\u003e Hardened \u003ccode\u003eformDataToJSON\u003c/code\u003e against already-polluted \u003ccode\u003eObject.prototype\u003c/code\u003e by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Cleartext Leak:\u003c/strong\u003e Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCI Cache Removal:\u003c/strong\u003e Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eData URI Parsing:\u003c/strong\u003e Updated the \u003ccode\u003efromDataURI\u003c/code\u003e regex to match RFC 2397 more strictly, fixing edge cases in \u003ccode\u003edata:\u003c/code\u003e URL handling. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUnicode Headers:\u003c/strong\u003e Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10850\"\u003e#10850\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Upload Progress:\u003c/strong\u003e Guarded against malformed \u003ccode\u003eProgressEvent\u003c/code\u003e payloads emitted by some environments during XHR upload, preventing crashes when \u003ccode\u003eloaded\u003c/code\u003e / \u003ccode\u003etotal\u003c/code\u003e are missing or invalid. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWebpack 4 Fetch Adapter:\u003c/strong\u003e Fixed an \u0026quot;unexpected token\u0026quot; error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10864\"\u003e#10864\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eType Definitions:\u003c/strong\u003e Made \u003ccode\u003eparseReviver\u003c/code\u003e \u003ccode\u003econtext.source\u003c/code\u003e optional in the type definitions to align with the ES2023 specification. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10837\"\u003e#10837\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURL Object Support Reverted:\u003c/strong\u003e Reverted the change that allowed passing a \u003ccode\u003eURL\u003c/code\u003e object as \u003ccode\u003econfig.url\u003c/code\u003e (originally \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCycle Detection Refactor:\u003c/strong\u003e Replaced the array-based cycle tracker in \u003ccode\u003etoJSONObject\u003c/code\u003e with a \u003ccode\u003eWeakSet\u003c/code\u003e, improving performance and memory behaviour on large nested structures. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10832\"\u003e#10832\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecomposeSignals Cleanup:\u003c/strong\u003e Refactored \u003ccode\u003ecomposeSignals\u003c/code\u003e to use a clearer early-return structure, simplifying the cancellation/abort composition path. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10844\"\u003e#10844\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAI Readiness \u0026amp; Repo Docs:\u003c/strong\u003e Added \u003ccode\u003eAGENTS.md\u003c/code\u003e and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10835\"\u003e#10835\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10841\"\u003e#10841\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs Improvements:\u003c/strong\u003e Clarified the GET request example, fixed the interceptor \u003ccode\u003eeject\u003c/code\u003e example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSponsorship Tooling:\u003c/strong\u003e Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10843\"\u003e#10843\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10859\"\u003e#10859\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@commitlint/cli\u003c/code\u003e from 20.5.0 to 20.5.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10846\"\u003e#10846\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/hpinmetaverse\"\u003e\u003ccode\u003e@​hpinmetaverse\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/tommyhgunz14\"\u003e\u003ccode\u003e@​tommyhgunz14\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/divyanshuraj1095\"\u003e\u003ccode\u003e@​divyanshuraj1095\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/sagodi97\"\u003e\u003ccode\u003e@​sagodi97\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/rkdfx\"\u003e\u003ccode\u003e@​rkdfx\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Liuwei1125\"\u003e\u003ccode\u003e@​Liuwei1125\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.16.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/1337d6b537afb2d3f501074c8ac4ef4308221197\"\u003e\u003ccode\u003e1337d6b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.16.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10877\"\u003e#10877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/858a790cec06054547d0d3f941916d6fb2a4d18e\"\u003e\u003ccode\u003e858a790\u003c/code\u003e\u003c/a\u003e fix: remove all caches (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/34adfd90efc9c145488399e1cf7fa96de67080fa\"\u003e\u003ccode\u003e34adfd9\u003c/code\u003e\u003c/a\u003e revert: \u0026quot;fix: support URL object as config.url input (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/847d89b43654405d9a231e0b669832c2092b621f\"\u003e\u003ccode\u003e847d89b\u003c/code\u003e\u003c/a\u003e fix: support URL object as config.url input (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/40948863677bb793bfff0293cce7e7b4f8a1b212\"\u003e\u003ccode\u003e4094886\u003c/code\u003e\u003c/a\u003e fix(progress): guard malformed XHR upload events (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/44f0c5bf73c45df6009365141faa394d73596bd7\"\u003e\u003ccode\u003e44f0c5b\u003c/code\u003e\u003c/a\u003e chore: change sponsorship link and add Twicsy advertisement (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/64e1095efedc64c9fecf5176bd9cf2e5e93140d6\"\u003e\u003ccode\u003e64e1095\u003c/code\u003e\u003c/a\u003e chore: update PR and issue template to use h2 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10865\"\u003e#10865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/3e6b4e1f311b43aa1dc77d78150a601d9fe4b280\"\u003e\u003ccode\u003e3e6b4e1\u003c/code\u003e\u003c/a\u003e fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/c4453bab70f53575175903aee60810c821f72129\"\u003e\u003ccode\u003ec4453ba\u003c/code\u003e\u003c/a\u003e fix: add the ability to add additional sponsors to the process sponsors scrip...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/caa00a90b524bb67ed033474abcf4d8645ced793\"\u003e\u003ccode\u003ecaa00a9\u003c/code\u003e\u003c/a\u003e fix: https data in cleartext to proxy (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.25 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summar...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/100","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/100","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/100/packages"},{"uuid":"4528608216","node_id":"PR_kwDOJaQu3s7foaxU","number":266,"state":"open","title":"chore(deps): bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T01:01:52.000Z","updated_at":"2026-05-27T01:01:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx-js/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hyperdxio/hyperdx-js/pull/266","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperdxio%2Fhyperdx-js/issues/266","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/266/packages"},{"uuid":"4528590385","node_id":"PR_kwDOJGWeI87foXPE","number":511,"state":"open","title":"build(deps): bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:57:16.000Z","updated_at":"2026-05-27T00:57:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/core-ds/arui-scripts/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/core-ds/arui-scripts/pull/511","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/core-ds%2Farui-scripts/issues/511","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/511/packages"},{"uuid":"4528579948","node_id":"PR_kwDOKq-aNM7foVC_","number":1215,"state":"open","title":"Chore(deps): Bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:54:54.000Z","updated_at":"2026-05-27T00:57:23.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Chore(deps): Bump","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-runner/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-runner/pull/1215","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-runner/issues/1215","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1215/packages"},{"uuid":"4528572648","node_id":"PR_kwDOQPDBNc7foTee","number":17,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T11:46:23.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T00:53:16.000Z","updated_at":"2026-05-29T11:46:26.000Z","time_to_close":211987,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-audit-publisher-stub/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-audit-publisher-stub/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-audit-publisher-stub/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"},{"uuid":"4528569954","node_id":"PR_kwDOJAtVrM7foS4h","number":23,"state":"open","title":"Bump @hapi/content and serverless-offline in /defi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:49.000Z","updated_at":"2026-05-27T00:53:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"5.0.2","new_version":"6.0.2"},{"name":"serverless-offline","repository_url":"https://github.com/dherault/serverless-offline","old_version":"8.8.1","new_version":"14.7.0"}],"path":"/defi","ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.2 and updates ancestor dependency [serverless-offline](https://github.com/dherault/serverless-offline). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `serverless-offline` from 8.8.1 to 14.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dherault/serverless-offline/releases\"\u003eserverless-offline's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove ruby performance by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1873\"\u003edherault/serverless-offline#1873\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix tests by \u003ca href=\"https://github.com/dherault\"\u003e\u003ccode\u003e@​dherault\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1886\"\u003edherault/serverless-offline#1886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: bump actions/setup-go@v5 by \u003ca href=\"https://github.com/dnalborczyk\"\u003e\u003ccode\u003e@​dnalborczyk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1821\"\u003edherault/serverless-offline#1821\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace fs-extra with native Node.js fs APIs by \u003ca href=\"https://github.com/roli-lpci\"\u003e\u003ccode\u003e@​roli-lpci\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003edherault/serverless-offline#1876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ruby 3.4 support by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1878\"\u003edherault/serverless-offline#1878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version (fixing critical vulnerability) by \u003ca href=\"https://github.com/robertmaier\"\u003e\u003ccode\u003e@​robertmaier\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003edherault/serverless-offline#1884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e by \u003ca href=\"https://github.com/apokryfos\"\u003e\u003ccode\u003e@​apokryfos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003edherault/serverless-offline#1772\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies by \u003ca href=\"https://github.com/dherault\"\u003e\u003ccode\u003e@​dherault\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1889\"\u003edherault/serverless-offline#1889\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/roli-lpci\"\u003e\u003ccode\u003e@​roli-lpci\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003edherault/serverless-offline#1876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/robertmaier\"\u003e\u003ccode\u003e@​robertmaier\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003edherault/serverless-offline#1884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apokryfos\"\u003e\u003ccode\u003e@​apokryfos\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003edherault/serverless-offline#1772\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.5.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLoad TypeScript in ESM mode if package.json type is module by \u003ca href=\"https://github.com/henrist\"\u003e\u003ccode\u003e@​henrist\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1849\"\u003edherault/serverless-offline#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Support CloudFormation Join \u0026amp; Sub function in environment variable by \u003ca href=\"https://github.com/yo-ga\"\u003e\u003ccode\u003e@​yo-ga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1842\"\u003edherault/serverless-offline#1842\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaintenance Updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ruby 3.3 support by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1862\"\u003edherault/serverless-offline#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd python 3.13 support by \u003ca href=\"https://github.com/ppoullain\"\u003e\u003ccode\u003e@​ppoullain\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003edherault/serverless-offline#1865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop pre-NodeJS 20.x support and add support for NodeJS 24.x and Fix broken tests by \u003ca href=\"https://github.com/crespowang\"\u003e\u003ccode\u003e@​crespowang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1867\"\u003edherault/serverless-offline#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/henrist\"\u003e\u003ccode\u003e@​henrist\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1849\"\u003edherault/serverless-offline#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yo-ga\"\u003e\u003ccode\u003e@​yo-ga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1842\"\u003edherault/serverless-offline#1842\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1862\"\u003edherault/serverless-offline#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ppoullain\"\u003e\u003ccode\u003e@​ppoullain\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003edherault/serverless-offline#1865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/crespowang\"\u003e\u003ccode\u003e@​crespowang\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1867\"\u003edherault/serverless-offline#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.4.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd support for nodejs22.x runtime (\u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1837\"\u003e#1837\u003c/a\u003e) (\u003ca href=\"https://github.com/dherault/serverless-offline/commit/1b2193459609e128522568c67fc83ccddfd8d146\"\u003e1b21934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dherault/serverless-offline/blob/master/CHANGELOG.md\"\u003eserverless-offline's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\"\u003ev14.7.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e22 May 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eImprove ruby performance \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1873\"\u003e\u003ccode\u003e[#1873](https://github.com/dherault/serverless-offline/issues/1873)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInstall auto-changelog \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c3f8e85b3031cd8dd5b672de584bee667e556ca8\"\u003e\u003ccode\u003ec3f8e85\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies \u003ca href=\"https://github.com/dherault/serverless-offline/commit/3ff34fbfe1aae91a72382ee5e0f06bcbb83633a4\"\u003e\u003ccode\u003e3ff34fb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate mocha \u003ca href=\"https://github.com/dherault/serverless-offline/commit/bc7fd5bdb5c71de65c94fe33976a60ff3a4c4f12\"\u003e\u003ccode\u003ebc7fd5b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd hot reload \u003ca href=\"https://github.com/dherault/serverless-offline/commit/146b6254110cb2b6889142cd2edbb5c2b875f5dc\"\u003e\u003ccode\u003e146b625\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: address Copilot review feedback on Ruby runner \u003ca href=\"https://github.com/dherault/serverless-offline/commit/1941adec7820c5c0c9b5c7f5c3fd4492e7d11b94\"\u003e\u003ccode\u003e1941ade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c0cc3e48b1bc3f1a690fdbfed424cd15d76c3f11\"\u003e\u003ccode\u003ec0cc3e4\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd watchDires \u003ca href=\"https://github.com/dherault/serverless-offline/commit/1aaa866f78bf9207971a7e6821ae9d3850c11ced\"\u003e\u003ccode\u003e1aaa866\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: address second round of Copilot review feedback on Ruby runner \u003ca href=\"https://github.com/dherault/serverless-offline/commit/6f2f2c4d7ea0c79b84dae42efee524cf9d5b1a1a\"\u003e\u003ccode\u003e6f2f2c4\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ruby): guard against null stdio streams on spawn failure \u003ca href=\"https://github.com/dherault/serverless-offline/commit/d36cab09e1515fa35737952dae7800762bc2db32\"\u003e\u003ccode\u003ed36cab0\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument rubyWatchDirs option in README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/dc45cab4170e73b5ac736f0629ed69620dd86fdd\"\u003e\u003ccode\u003edc45cab\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eApply suggestions from code review \u003ca href=\"https://github.com/dherault/serverless-offline/commit/52d0a3b052f5845619adedf9bb1ec00044dbb62b\"\u003e\u003ccode\u003e52d0a3b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePotential fix for pull request finding \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c2e2303d3faed2f700564004165f1fa77007299c\"\u003e\u003ccode\u003ec2e2303\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: sort defaultOptions keys alphabetically \u003ca href=\"https://github.com/dherault/serverless-offline/commit/50a3dfce121a41c2eaf4aa5a189a31c0f3b61bc8\"\u003e\u003ccode\u003e50a3dfc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove Airbnb style guide mention in README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/3506988178c9d823bdaadbe80ca0ce9301abc4ca\"\u003e\u003ccode\u003e3506988\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\"\u003ev14.6.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e11 May 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate dependencies \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1889\"\u003e\u003ccode\u003e[#1889](https://github.com/dherault/serverless-offline/issues/1889)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003e\u003ccode\u003e[#1772](https://github.com/dherault/serverless-offline/issues/1772)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version (fixing critical vulnerability) \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003e\u003ccode\u003e[#1884](https://github.com/dherault/serverless-offline/issues/1884)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ruby 3.4 support \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1878\"\u003e\u003ccode\u003e[#1878](https://github.com/dherault/serverless-offline/issues/1878)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace fs-extra with native Node.js fs APIs \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003e\u003ccode\u003e[#1876](https://github.com/dherault/serverless-offline/issues/1876)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: bump actions/setup-go@v5 \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1821\"\u003e\u003ccode\u003e[#1821](https://github.com/dherault/serverless-offline/issues/1821)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix tests \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1886\"\u003e\u003ccode\u003e[#1886](https://github.com/dherault/serverless-offline/issues/1886)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge pull request \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1772\"\u003e#1772\u003c/a\u003e from apokryfos/issue-1771 \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e\u003ccode\u003e[#1771](https://github.com/dherault/serverless-offline/issues/1771)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e\u003ccode\u003e[#1771](https://github.com/dherault/serverless-offline/issues/1771)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version \u003ca href=\"https://github.com/dherault/serverless-offline/commit/4ac5858ba26a04872c3b0f01a1f8aa89f5eda7e4\"\u003e\u003ccode\u003e4ac5858\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/a6fac8a01f812ed000cf72b452f9c9f94aa409cf\"\u003e\u003ccode\u003ea6fac8a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit contributors list \u003ca href=\"https://github.com/dherault/serverless-offline/commit/491ad6261a93850ea58c97480646cab47d64c70e\"\u003e\u003ccode\u003e491ad62\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove Symmetrics promotional section from README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/a4bc4726d824ed932a5bd2d8d81822f26aa39df7\"\u003e\u003ccode\u003ea4bc472\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit changelog \u003ca href=\"https://github.com/dherault/serverless-offline/commit/b93ebb5a8e5720261a971149ac0672d0eecdda34\"\u003e\u003ccode\u003eb93ebb5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun prettier \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c1a428f6a3f480d5f33222113ff3208cd9b1fe70\"\u003e\u003ccode\u003ec1a428f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate src/config/supportedRuntimes.js \u003ca href=\"https://github.com/dherault/serverless-offline/commit/11f41975b2213d5c4a327424f2479f9113380cd6\"\u003e\u003ccode\u003e11f4197\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit CI \u003ca href=\"https://github.com/dherault/serverless-offline/commit/8fb75619a8de977c2d8cd56ab3205e3fab6eb05a\"\u003e\u003ccode\u003e8fb7561\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: limit matrix to ubuntu-latest, drop macos/windows \u003ca href=\"https://github.com/dherault/serverless-offline/commit/946bc1ab46b37343cedea5921dc9c13af6d44e67\"\u003e\u003ccode\u003e946bc1a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit LICENSE \u003ca href=\"https://github.com/dherault/serverless-offline/commit/755a375d81b6db408039740e98513a222dc4da23\"\u003e\u003ccode\u003e755a375\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun prettier \u003ca href=\"https://github.com/dherault/serverless-offline/commit/6a5902f0918a5541777f862ed4a9477899fc5d93\"\u003e\u003ccode\u003e6a5902f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\"\u003ev14.5.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e24 February 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eAdd python 3.13 support \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003e\u003ccode\u003e[#1865](https://github.com/dherault/serverless-offline/issues/1865)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/0486ff548f9ed64b3a7544a28ec4cc6a0eaa1da8\"\u003e\u003ccode\u003e0486ff5\u003c/code\u003e\u003c/a\u003e Edit CHANGELOG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/13c38f3499d38a86bafa29bc0c727adb636b7bb2\"\u003e\u003ccode\u003e13c38f3\u003c/code\u003e\u003c/a\u003e 14.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/bc7fd5bdb5c71de65c94fe33976a60ff3a4c4f12\"\u003e\u003ccode\u003ebc7fd5b\u003c/code\u003e\u003c/a\u003e Update mocha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/3ff34fbfe1aae91a72382ee5e0f06bcbb83633a4\"\u003e\u003ccode\u003e3ff34fb\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/c3f8e85b3031cd8dd5b672de584bee667e556ca8\"\u003e\u003ccode\u003ec3f8e85\u003c/code\u003e\u003c/a\u003e Install auto-changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/c0cc3e48b1bc3f1a690fdbfed424cd15d76c3f11\"\u003e\u003ccode\u003ec0cc3e4\u003c/code\u003e\u003c/a\u003e Edit README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/8f12420d1da93df622e00d1948fd3ede1aac8fcb\"\u003e\u003ccode\u003e8f12420\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/improve-ruby-performance'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/04cfde5c0ef03feb99c02249db84a344a1bf3754\"\u003e\u003ccode\u003e04cfde5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1873\"\u003e#1873\u003c/a\u003e from naomichi-y/feature/improve-ruby-performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/dc45cab4170e73b5ac736f0629ed69620dd86fdd\"\u003e\u003ccode\u003edc45cab\u003c/code\u003e\u003c/a\u003e Document rubyWatchDirs option in README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/3506988178c9d823bdaadbe80ca0ce9301abc4ca\"\u003e\u003ccode\u003e3506988\u003c/code\u003e\u003c/a\u003e Remove Airbnb style guide mention in README\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v8.8.1...v14.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ondoprotocol/defillama-server/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ondoprotocol/defillama-server/pull/23","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ondoprotocol%2Fdefillama-server/issues/23","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/23/packages"},{"uuid":"4528568113","node_id":"PR_kwDOPCWuhc7foSe7","number":35,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:27.000Z","updated_at":"2026-05-27T00:53:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-mpdp-backend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-mpdp-backend/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-mpdp-backend/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"},{"uuid":"4528567942","node_id":"PR_kwDOQJEHiM7foScd","number":21,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T11:47:16.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:25.000Z","updated_at":"2026-05-29T11:47:19.000Z","time_to_close":212091,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-fdm-event-publisher-stub/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-fdm-event-publisher-stub/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-fdm-event-publisher-stub/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"},{"uuid":"4528561359","node_id":"PR_kwDOPcG6M87foRJN","number":128,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:51:11.000Z","updated_at":"2026-05-27T00:53:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hal-shu-sato/quiz-web-system/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hal-shu-sato/quiz-web-system/pull/128","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hal-shu-sato%2Fquiz-web-system/issues/128","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/128/packages"},{"uuid":"4528538739","node_id":"PR_kwDOLIBIj87foMhW","number":1042,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.2 in /library","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:45:57.000Z","updated_at":"2026-05-27T00:54:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":"/library","ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AikidoSec/firewall-node/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AikidoSec/firewall-node/pull/1042","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AikidoSec%2Ffirewall-node/issues/1042","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1042/packages"},{"uuid":"4528537117","node_id":"PR_kwDOJlFWwM7foMMt","number":397,"state":"open","title":"chore(deps): bump @hapi/content from 6.0.0 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:45:31.000Z","updated_at":"2026-05-27T00:46:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/credebl/agent-controller/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/credebl/agent-controller/pull/397","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/credebl%2Fagent-controller/issues/397","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/397/packages"},{"uuid":"4272694315","node_id":"PR_kwDOPNWXvM7S04Wt","number":44,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-16T01:49:32.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-16T01:44:52.000Z","updated_at":"2026-04-16T01:49:34.000Z","time_to_close":280,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":13,"packages":[{"name":"next","old_version":"14.2.25","new_version":"15.5.15","repository_url":"https://github.com/vercel/next.js"},{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `14.2.25` | `15.5.15` |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n\nBumps the npm_and_yarn group with 1 update in the /bifrost directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 4 updates in the /docs directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [picomatch](https://github.com/micromatch/picomatch) and [basic-ftp](https://github.com/patrickjuchli/basic-ftp).\nBumps the npm_and_yarn group with 3 updates in the /examples/asyncExample directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios) and [@xmldom/xmldom](https://github.com/xmldom/xmldom).\nBumps the npm_and_yarn group with 1 update in the /examples/qawolf-ws directory: [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [next](https://github.com/vercel/next.js) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `13.5.7` | `15.5.15` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.20` |\n\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript/helpers directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 2 updates in the /web directory: [next](https://github.com/vercel/next.js) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 2 updates in the /worker directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\n\nUpdates `next` from 14.2.25 to 15.5.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(next/image): add lru disk cache and images.maximumDiskCacheSize (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/91660\"\u003e#91660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/90304\"\u003e#90304\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/styfle\"\u003e\u003ccode\u003e@​styfle\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/lllomh\"\u003e\u003ccode\u003e@​lllomh\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev15.5.13\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: patch http-proxy to prevent request smuggling in rewrites (See: \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ggv3-7p47-pfv8\"\u003eCVE-2026-29057\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/ztanner\"\u003e\u003ccode\u003e@​ztanner\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/412eb90b6587ec02e8361c92efa9091487e7348f\"\u003e\u003ccode\u003e412eb90\u003c/code\u003e\u003c/a\u003e v15.5.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/cb90de98be409653f39ec602072740b38689a4e5\"\u003e\u003ccode\u003ecb90de9\u003c/code\u003e\u003c/a\u003e [15.x] Avoid consuming cyclic models multiple times (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/74\"\u003e#74\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fffef9ef3059a4883def5b847315fb6017668846\"\u003e\u003ccode\u003efffef9e\u003c/code\u003e\u003c/a\u003e Fix CI for glibc linux builds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d7b012d787c01e0435f8cdf2a47211891668d13b\"\u003e\u003ccode\u003ed7b012d\u003c/code\u003e\u003c/a\u003e v15.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2b0525123245da5b1b9d1abedc636c5fd3ee1d07\"\u003e\u003ccode\u003e2b05251\u003c/code\u003e\u003c/a\u003e [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f88cee9604f0ec8ab869a2f94ced984194277b9e\"\u003e\u003ccode\u003ef88cee9\u003c/code\u003e\u003c/a\u003e Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/cfd5f533b08df3038476dcd54f1d6d660d85f069\"\u003e\u003ccode\u003ecfd5f53\u003c/code\u003e\u003c/a\u003e v15.5.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/15f28911fd272041707dbf6b7c07d62642593be8\"\u003e\u003ccode\u003e15f2891\u003c/code\u003e\u003c/a\u003e [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d23f41c42506005fe6978e076a1ccbf8979e4925\"\u003e\u003ccode\u003ed23f41c\u003c/code\u003e\u003c/a\u003e v15.5.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8e75765a6544dc0e6b20aefeade7d33190ffcb7c\"\u003e\u003ccode\u003e8e75765\u003c/code\u003e\u003c/a\u003e fix unlock in publish-native\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0 — April 7, 2026\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches targeting header injection and SSRF via proxy bypass, adds official runtime support for Deno and Bun, and includes significant CI security hardening.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eHeader Injection (CRLF):\u003c/strong\u003e Rejects any header value containing \u003ccode\u003e\\r\u003c/code\u003e or \u003ccode\u003e\\n\u003c/code\u003e characters to block CRLF injection chains that could be used to exfiltrate cloud metadata (IMDS). Behavior change: headers with CR/LF now throw \u003ccode\u003e\u0026quot;Invalid character in header content\u0026quot;\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSSRF via \u003ccode\u003eno_proxy\u003c/code\u003e Bypass:\u003c/strong\u003e Introduces a \u003ccode\u003eshouldBypassProxy\u003c/code\u003e helper that normalises hostnames (strips trailing dots, handles bracketed IPv6) before evaluating \u003ccode\u003eno_proxy\u003c/code\u003e/\u003ccode\u003eNO_PROXY\u003c/code\u003e rules, closing a gap that could cause loopback or internal hosts to be inadvertently proxied. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeno \u0026amp; Bun Runtime Support:\u003c/strong\u003e Added full smoke test suites for Deno and Bun, with CI workflows that run both runtimes before any release is cut. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNode.js v22 Compatibility:\u003c/strong\u003e Replaced deprecated \u003ccode\u003eurl.parse()\u003c/code\u003e calls with the WHATWG \u003ccode\u003eURL\u003c/code\u003e/\u003ccode\u003eURLSearchParams\u003c/code\u003e API across examples, sandbox, and tests, eliminating \u003ccode\u003eDEP0169\u003c/code\u003e deprecation warnings on Node.js v22+. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCI Security Hardening:\u003c/strong\u003e Added \u003ca href=\"https://github.com/zizmorcore/zizmor\"\u003ezizmor\u003c/a\u003e GitHub Actions security scanner; switched npm publish to OIDC Trusted Publishing (removing the long-lived \u003ccode\u003eNODE_AUTH_TOKEN\u003c/code\u003e); pinned all action references to full commit SHAs; narrowed workflow permissions to least privilege; gated the publish step behind a dedicated \u003ccode\u003enpm-publish\u003c/code\u003e environment; and blocked the sponsor-block workflow from running on forks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10641\"\u003e#10641\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Clarified HTTP/2 support and the unsupported \u003ccode\u003ehttpVersion\u003c/code\u003e option; added documentation for header case preservation; improved the \u003ccode\u003ebeforeRedirect\u003c/code\u003e example to prevent accidental credential leakage. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e (×3), \u003ccode\u003edenoland/setup-deno\u003c/code\u003e, and 4 additional dev dependencies to latest versions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10564\"\u003e#10564\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10565\"\u003e#10565\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10567\"\u003e#10567\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/shaanmajid\"\u003e\u003ccode\u003e@​shaanmajid\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10617\"\u003e#10617\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10641\"\u003e#10641\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.14.0...v1.15.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003ch2\u003ev1.14.0 — March 27, 2026\u003c/h2\u003e\n\u003cp\u003eThis release fixes a security vulnerability in the \u003ccode\u003eformidable\u003c/code\u003e dependency, resolves a CommonJS compatibility regression, hardens proxy and HTTP/2 handling, and modernises the build and test toolchain.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFormidable Vulnerability:\u003c/strong\u003e Upgraded \u003ccode\u003eformidable\u003c/code\u003e from v2 to v3 to address a reported arbitrary-file vulnerability. Updated test server and assertions to align with the v3 API. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7533\"\u003e#7533\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d30db975bf80c340e7856c1ad3568321\"\u003e\u003ccode\u003e40d7ef4\u003c/code\u003e\u003c/a\u003e fix(defu.d.cts): export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/3d3a7c89ca78f3fa43ec7194b12e44e4b0568697\"\u003e\u003ccode\u003e3d3a7c8\u003c/code\u003e\u003c/a\u003e build: correct the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/001c2906010eb65c1bb13ccd1f4abea09e10405b\"\u003e\u003ccode\u003e001c290\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/407b51645c41a57da6efac5b40967f2c60ce4f12\"\u003e\u003ccode\u003e407b516\u003c/code\u003e\u003c/a\u003e build: fix mixed types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/23e59e684cb6a432aad13f308d142247e31b6315\"\u003e\u003ccode\u003e23e59e6\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/44","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/44","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/44/packages"},{"uuid":"4242734153","node_id":"PR_kwDOPNWXvM7RnV1L","number":26,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 13 directories with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-11T18:56:38.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-11T02:51:40.000Z","updated_at":"2026-04-11T18:56:39.000Z","time_to_close":57898,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.13","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.9","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n\nBumps the npm_and_yarn group with 5 updates in the /docs directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.10` | `0.1.13` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.0.5` | `5.2.2` |\n\nBumps the npm_and_yarn group with 4 updates in the /examples/asyncExample directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [@xmldom/xmldom](https://github.com/xmldom/xmldom).\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.18` |\n\nBumps the npm_and_yarn group with 3 updates in the /sdk/typescript/helpers directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 1 update in the /web directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 4 updates in the /worker directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.13.3\"\u003e1.13.3\u003c/a\u003e (2026-01-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp2:\u003c/strong\u003e Use port 443 for HTTPS connections by default. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7256\"\u003e#7256\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e\"\u003ed7e6065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einterceptor:\u003c/strong\u003e handle the error in the same interceptor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6269\"\u003e#6269\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89\"\u003e5945e40\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emain field in package.json should correspond to cjs artifacts (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5756\"\u003e#5756\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04\"\u003e7373fbf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epackage.json:\u003c/strong\u003e add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5754\"\u003e#5754\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8\"\u003eb89217e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esilentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7257\"\u003e#7257\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf\"\u003e7d19335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eturn AxiosError into a native error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5394\"\u003e#5394\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5558\"\u003e#5558\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b\"\u003e1c6a86d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add handlers to AxiosInterceptorManager interface (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5551\"\u003e#5551\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a\"\u003e8d1271b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e restore AxiosError.cause type from unknown to Error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7327\"\u003e#7327\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b\"\u003ed8233d9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunclear error message is thrown when specifying an empty proxy authorization (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6314\"\u003e#6314\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29\"\u003e6ef867e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eundefined\u003c/code\u003e as a value in AxiosRequestConfig (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5560\"\u003e#5560\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd\"\u003e095033c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd automatic minor and patch upgrades to dependabot (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6053\"\u003e#6053\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed\"\u003e65a7584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Node.js coverage script using c8 (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7289\"\u003e#7289\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7294\"\u003e#7294\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a\"\u003eec9d94e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadded copilot instructions (\u003ca href=\"https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26\"\u003e3f83143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with frozen prototypes (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6265\"\u003e#6265\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012\"\u003e860e033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance pipeFileToResponse with error handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7169\"\u003e#7169\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552\"\u003e88d7884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Intellisense for string literals in a widened union (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6134\"\u003e#6134\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5\"\u003ef73474d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329\"\u003emicrosoft/TypeScript#33471\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: silentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e…\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a\"\u003ea4230f5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7334\"\u003e#7334\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a\"\u003e2d6ad5e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/ashvin2005\" title=\"+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )\"\u003eAshvin Tiwari\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/mochinikunj\" title=\"+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )\"\u003eNikunj Mochi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/imanchalsingh\" title=\"+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )\"\u003eAnchal Singh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/jasonsaayman\" title=\"+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )\"\u003ejasonsaayman\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/brodo\" title=\"+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )\"\u003eJulian Dax\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/AKASHDHARDUBEY\" title=\"+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )\"\u003eAkash Dhar Dubey\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/madhumitaaa\" title=\"+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )\"\u003eMadhumita\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Tackoil\" title=\"+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )\"\u003eTackoil\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/justindhillon\" title=\"+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )\"\u003eJustin Dhillon\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Rudrxxx\" title=\"+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )\"\u003eRudransh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/WuMingDao\" title=\"+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )\"\u003eWuMingDao\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/codenomnom\" title=\"+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )\"\u003ecodenomnom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Nandann018-ux\" title=\"+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )\"\u003eNandan Acharya\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/KernelDeimos\" title=\"+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )\"\u003eEric Dubé\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/tiborpilz\" title=\"+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )\"\u003eTibor Pilz\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/joaoGabriel55\" title=\"+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )\"\u003eGabriel Quaresma\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/turadg\" title=\"+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )\"\u003eTuradg Aleahmad\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6c353caf23beb9644f858eb3fe38d43a68b82898\"\u003e\u003ccode\u003e6c353ca\u003c/code\u003e\u003c/a\u003e 1.1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2\"\u003e\u003ccode\u003e7fd684f\u003c/code\u003e\u003c/a\u003e Backport fix for GHSA-f886-m6hf-6m8v (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/95\"\u003e#95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/44f33b47c5c6a965d507421af43e86cf5971d711\"\u003e\u003ccode\u003e44f33b4\u003c/code\u003e\u003c/a\u003e 1.1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c460dbd68e428d147b2080622d8ce126c7a08570\"\u003e\u003ccode\u003ec460dbd\u003c/code\u003e\u003c/a\u003e pkg: publish on tag 1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ccb8ac6d4292b7661b677fe048ba6690c877f51f\"\u003e\u003ccode\u003eccb8ac6\u003c/code\u003e\u003c/a\u003e fmt\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217\"\u003e\u003ccode\u003ec3c73c8\u003c/code\u003e\u003c/a\u003e Fix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d30db975bf80c340e7856c1ad3568321\"\u003e\u003ccode\u003e40d7ef4\u003c/code\u003e\u003c/a\u003e fix(defu.d.cts): export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/3d3a7c89ca78f3fa43ec7194b12e44e4b0568697\"\u003e\u003ccode\u003e3d3a7c8\u003c/code\u003e\u003c/a\u003e build: correct the \u003ccode\u003etypes\u003c...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/26","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/26","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/26/packages"},{"uuid":"4241658716","node_id":"PR_kwDOPNWXvM7RkOlC","number":24,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 13 directories with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T21:20:03.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T20:48:24.000Z","updated_at":"2026-04-10T21:20:05.000Z","time_to_close":1899,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.13","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.9","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"yaml","old_version":"1.10.2","new_version":"1.10.3","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `1.10.2` | `1.10.3` |\n\nBumps the npm_and_yarn group with 4 updates in the /docs directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 5 updates in the /examples/asyncExample directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.2` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [yaml](https://github.com/eemeli/yaml) | `2.4.5` | `2.8.3` |\n| [@xmldom/xmldom](https://github.com/xmldom/xmldom) | `0.8.10` | `0.8.12` |\n\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\nBumps the npm_and_yarn group with 7 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `2.5.1` | `2.8.3` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.18` |\n\nBumps the npm_and_yarn group with 3 updates in the /sdk/typescript/helpers directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 1 update in the /web directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 5 updates in the /worker directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `2.6.0` | `2.8.3` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.4.0` |\n\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.13.3\"\u003e1.13.3\u003c/a\u003e (2026-01-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp2:\u003c/strong\u003e Use port 443 for HTTPS connections by default. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7256\"\u003e#7256\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e\"\u003ed7e6065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einterceptor:\u003c/strong\u003e handle the error in the same interceptor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6269\"\u003e#6269\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89\"\u003e5945e40\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emain field in package.json should correspond to cjs artifacts (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5756\"\u003e#5756\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04\"\u003e7373fbf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epackage.json:\u003c/strong\u003e add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5754\"\u003e#5754\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8\"\u003eb89217e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esilentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7257\"\u003e#7257\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf\"\u003e7d19335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eturn AxiosError into a native error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5394\"\u003e#5394\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5558\"\u003e#5558\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b\"\u003e1c6a86d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add handlers to AxiosInterceptorManager interface (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5551\"\u003e#5551\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a\"\u003e8d1271b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e restore AxiosError.cause type from unknown to Error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7327\"\u003e#7327\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b\"\u003ed8233d9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunclear error message is thrown when specifying an empty proxy authorization (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6314\"\u003e#6314\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29\"\u003e6ef867e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eundefined\u003c/code\u003e as a value in AxiosRequestConfig (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5560\"\u003e#5560\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd\"\u003e095033c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd automatic minor and patch upgrades to dependabot (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6053\"\u003e#6053\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed\"\u003e65a7584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Node.js coverage script using c8 (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7289\"\u003e#7289\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7294\"\u003e#7294\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a\"\u003eec9d94e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadded copilot instructions (\u003ca href=\"https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26\"\u003e3f83143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with frozen prototypes (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6265\"\u003e#6265\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012\"\u003e860e033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance pipeFileToResponse with error handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7169\"\u003e#7169\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552\"\u003e88d7884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Intellisense for string literals in a widened union (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6134\"\u003e#6134\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5\"\u003ef73474d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329\"\u003emicrosoft/TypeScript#33471\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: silentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e…\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a\"\u003ea4230f5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7334\"\u003e#7334\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a\"\u003e2d6ad5e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/ashvin2005\" title=\"+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )\"\u003eAshvin Tiwari\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/mochinikunj\" title=\"+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )\"\u003eNikunj Mochi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/imanchalsingh\" title=\"+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )\"\u003eAnchal Singh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/jasonsaayman\" title=\"+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )\"\u003ejasonsaayman\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/brodo\" title=\"+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )\"\u003eJulian Dax\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/AKASHDHARDUBEY\" title=\"+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )\"\u003eAkash Dhar Dubey\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/madhumitaaa\" title=\"+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )\"\u003eMadhumita\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Tackoil\" title=\"+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )\"\u003eTackoil\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/justindhillon\" title=\"+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )\"\u003eJustin Dhillon\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Rudrxxx\" title=\"+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )\"\u003eRudransh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/WuMingDao\" title=\"+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )\"\u003eWuMingDao\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/codenomnom\" title=\"+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )\"\u003ecodenomnom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Nandann018-ux\" title=\"+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )\"\u003eNandan Acharya\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/KernelDeimos\" title=\"+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )\"\u003eEric Dubé\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/tiborpilz\" title=\"+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )\"\u003eTibor Pilz\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/joaoGabriel55\" title=\"+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )\"\u003eGabriel Quaresma\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/turadg\" title=\"+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )\"\u003eTuradg Aleahmad\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6c353caf23beb9644f858eb3fe38d43a68b82898\"\u003e\u003ccode\u003e6c353ca\u003c/code\u003e\u003c/a\u003e 1.1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2\"\u003e\u003ccode\u003e7fd684f\u003c/code\u003e\u003c/a\u003e Backport fix for GHSA-f886-m6hf-6m8v (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/95\"\u003e#95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/44f33b47c5c6a965d507421af43e86cf5971d711\"\u003e\u003ccode\u003e44f33b4\u003c/code\u003e\u003c/a\u003e 1.1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c460dbd68e428d147b2080622d8ce126c7a08570\"\u003e\u003ccode\u003ec460dbd\u003c/code\u003e\u003c/a\u003e pkg: publish on tag 1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ccb8ac6d4292b7661b677fe048ba6690c877f51f\"\u003e\u003ccode\u003eccb8ac6\u003c/code\u003e\u003c/a\u003e fmt\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217\"\u003e\u003ccode\u003ec3c73c8\u003c/code\u003e\u003c/a\u003e Fix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/24","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/24","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/24/packages"},{"uuid":"4206421571","node_id":"PR_kwDONn5tdM7QAzlH","number":1,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 8 directories with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-05T04:15:10.000Z","updated_at":"2026-04-05T04:15:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"jsondiffpatch","old_version":"0.4.1","new_version":"0.7.3","repository_url":"https://github.com/benjamine/jsondiffpatch"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"file-type","old_version":"18.7.0","new_version":"22.0.0","repository_url":"https://github.com/sindresorhus/file-type"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"@hapi/content","old_version":"5.0.2","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the /packages/interface-ipfs-core directory: [nanoid](https://github.com/ai/nanoid).\nBumps the npm_and_yarn group with 3 updates in the /packages/ipfs-cli directory: [nanoid](https://github.com/ai/nanoid), [jsondiffpatch](https://github.com/benjamine/jsondiffpatch) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-core directory: [nanoid](https://github.com/ai/nanoid) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-core-utils directory: [nanoid](https://github.com/ai/nanoid) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-grpc-server directory: [nanoid](https://github.com/ai/nanoid).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-http-client directory: [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-http-response directory: [file-type](https://github.com/sindresorhus/file-type).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-http-server directory: [parse-duration](https://github.com/jkroso/parse-duration) and [@hapi/content](https://github.com/hapijs/content).\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jsondiffpatch` from 0.4.1 to 0.7.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/benjamine/jsondiffpatch/releases\"\u003ejsondiffpatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003ch2\u003eBreaking changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThis package is now pure ESM. For more info, please read \u003ca href=\"https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c\"\u003eSindre Sorhus's FAQ\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSupported Node versions are \u003ccode\u003e^18.0.0 || \u0026gt;=20.0.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRequires ES6 support (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThere is no longer a default export. Import this package by using \u003ccode\u003eimport * as jsondiffpatch from 'jsondiffpatch'\u003c/code\u003e or by importing individual methods (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFormatters are no longer exported from the main entry-point and must be imported from subpaths (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e):\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport * as annotatedFormatter from 'jsondiffpatch/formatters/annotated'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as baseFormatter from 'jsondiffpatch/formatters/base'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as consoleFormatter from 'jsondiffpatch/formatters/console'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as htmlFormatter from 'jsondiffpatch/formatters/html'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as jsonpatchFormatter from 'jsondiffpatch/formatters/jsonpatch'\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eUpdated CSS imports (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e):\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport 'jsondiffpatch/formatters/styles/html.css'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport 'jsondiffpatch/formatters/styles/annotated.css'\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eThe main entry-point no longer includes text diffing by default. Either pass in the diff-match-patch library via the \u003ccode\u003etextDiff.diffMatchPatch\u003c/code\u003e option, or use the \u003ccode\u003ejsondiffpatch/with-text-diffs\u003c/code\u003e entry point that is included for convenience (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/352\"\u003e#352\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContext.switchTo()\u003c/code\u003e has been removed (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/345\"\u003e#345\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eBaseFormatter.typeFormattterErrorFormatter()\u003c/code\u003e now throws an error instead of returning a \u003ccode\u003estring\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/345\"\u003e#345\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThe UMD browser bundle has been removed. If you were using a \u003ccode\u003escript\u003c/code\u003e tag to include \u003ccode\u003ejsondiffpatch\u003c/code\u003e in your project, you can now import it inside of your main \u003ccode\u003escript\u003c/code\u003e tag as show below. For a more complete example, see the Visual Diff example \u003ca href=\"https://github.com/benjamine/jsondiffpatch/tree/v0.5.0?tab=readme-ov-file#visual-diff\"\u003ebefore\u003c/a\u003e and \u003ca href=\"https://github.com/benjamine/jsondiffpatch/tree/469f6a7d4660eb9dcbf965271889ad452e86de75?tab=readme-ov-file#visual-diff\"\u003eafter\u003c/a\u003e this change.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"html\"\u003e\u003ccode\u003e\u0026lt;!doctype html\u0026gt;\r\n\u0026lt;html\u0026gt;\r\n  \u0026lt;head\u0026gt;\r\n    \u0026lt;link\r\n      rel=\u0026quot;stylesheet\u0026quot;\r\n      href=\u0026quot;https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/html.css\u0026quot;\r\n      type=\u0026quot;text/css\u0026quot;\r\n    /\u0026gt;\r\n    \u0026lt;link\r\n      rel=\u0026quot;stylesheet\u0026quot;\r\n      href=\u0026quot;https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/annotated.css\u0026quot;\r\n      type=\u0026quot;text/css\u0026quot;\r\n    /\u0026gt;\r\n  \u0026lt;/head\u0026gt;\r\n  \u0026lt;body\u0026gt;\r\n    \u0026lt;script type=\u0026quot;module\u0026quot;\u0026gt;\r\n      import * as jsondiffpatch from 'https://esm.sh/jsondiffpatch@0.6.0';\r\n      import * as annotatedFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/annotated';\r\n      import * as htmlFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/html';\r\n\u003cpre\u003e\u003ccode\u003e  ...\r\n\u0026amp;lt;/script\u0026amp;gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u0026lt;/body\u0026gt;\u003cbr /\u003e\n\u0026lt;/html\u0026gt;\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix demo link in formatters doc by \u003ca href=\"https://github.com/johnrees\"\u003e\u003ccode\u003e@​johnrees\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/pull/311\"\u003ebenjamine/jsondiffpatch#311\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/benjamine/jsondiffpatch/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `file-type` from 18.7.0 to 22.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/file-type/releases\"\u003efile-type's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev22.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eRequires Node.js 22\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDropped Node.js \u003ccode\u003estream.Readable\u003c/code\u003e support from \u003ccode\u003efileTypeFromStream()\u003c/code\u003e and \u003ccode\u003efileTypeStream()\u003c/code\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThese now only accept a web \u003ccode\u003eReadableStream\u003c/code\u003e. Migrate with \u003ca href=\"https://nodejs.org/api/stream.html#streamreadabletowebstreamreadable-options\"\u003e\u003ccode\u003eReadable.toWeb()\u003c/code\u003e\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Before\r\nimport fs from 'node:fs';\r\nfileTypeFromStream(fs.createReadStream('file.mp4'));\r\n\u003cp\u003e// After\u003cbr /\u003e\nimport fs from 'node:fs';\u003cbr /\u003e\nimport {Readable} from 'node:stream';\u003cbr /\u003e\nfileTypeFromStream(Readable.toWeb(fs.createReadStream('file.mp4')));\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSub-exports (e.g. \u003ccode\u003efile-type/core\u003c/code\u003e) have been removed. Import everything from \u003ccode\u003efile-type\u003c/code\u003e directly.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe \u003ccode\u003eReadableStreamWithFileType\u003c/code\u003e type has been removed. Use \u003ccode\u003eAnyWebReadableByteStreamWithFileType\u003c/code\u003e instead.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral MIME types have been corrected or normalized:\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eOld MIME\u003c/th\u003e\n\u003cth\u003eNew MIME\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003elz\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-lzip\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/lzip\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003elnk\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.ms.shortcut\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ms-shortcut\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eApple Alias\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.apple.alias\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-apple.alias\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003efbx\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.autodesk.fbx\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-fbx\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eDraco\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/vnd.google.draco\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-draco\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eMIME subtypes prefixed with \u003ccode\u003ex-ft-\u003c/code\u003e are custom types defined by this package (not IANA-registered).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded detection for Apple iWork files: \u003ccode\u003e.key\u003c/code\u003e (Keynote), \u003ccode\u003e.pages\u003c/code\u003e (Pages), \u003ccode\u003e.numbers\u003c/code\u003e (Numbers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed LibreOffice OOXML files being incorrectly detected as ZIP when reading from streams\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/compare/v21.3.4...v22.0.0\"\u003ehttps://github.com/sindresorhus/file-type/compare/v21.3.4...v22.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev21.3.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHarden parser more  aec20a0\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/compare/v21.3.3...v21.3.4\"\u003ehttps://github.com/sindresorhus/file-type/compare/v21.3.3...v21.3.4\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/2c54d066efdf7511e42fa9f5e4cd160b67fb51e9\"\u003e\u003ccode\u003e2c54d06\u003c/code\u003e\u003c/a\u003e 22.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/0ba6e0b2b76382f9b61e7b9e8610bbf7ca0e5273\"\u003e\u003ccode\u003e0ba6e0b\u003c/code\u003e\u003c/a\u003e Tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/0e679c74a9cab31c7b2aa65f9ba8e241fbc205f1\"\u003e\u003ccode\u003e0e679c7\u003c/code\u003e\u003c/a\u003e Remove sub-exports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/7079af7357c8d0a3651d6aa2015ba3cbe0121b48\"\u003e\u003ccode\u003e7079af7\u003c/code\u003e\u003c/a\u003e Tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/ec77458ce49d89bdf8de808569c2c87b43e8ca73\"\u003e\u003ccode\u003eec77458\u003c/code\u003e\u003c/a\u003e Add support for iWork files (.key, .pages, .numbers)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/d4a975c316429d8ec0bccc6e92483e625be0f6b1\"\u003e\u003ccode\u003ed4a975c\u003c/code\u003e\u003c/a\u003e Fix LibreOffice OOXML files detected as ZIP in streams\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/5de64e26f81ad14b1f07cb5c5108de6e303f3b60\"\u003e\u003ccode\u003e5de64e2\u003c/code\u003e\u003c/a\u003e Normalize MIME types we invented with \u003ccode\u003ex-ft-\u003c/code\u003e prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/7a60fa9dc0b7dad71ad6d3146a28ab92eb079983\"\u003e\u003ccode\u003e7a60fa9\u003c/code\u003e\u003c/a\u003e Require Node.js 22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/6409e17c60c7fc988023c6186008b4986b2602cd\"\u003e\u003ccode\u003e6409e17\u003c/code\u003e\u003c/a\u003e Drop Node.js Readable stream support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/296e37c8c751a8a4a4a9bbdbe4e9579561ef275f\"\u003e\u003ccode\u003e296e37c\u003c/code\u003e\u003c/a\u003e Refactor to smaller files\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sindresorhus/file-type/compare/v18.7.0...v22.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AKJUS/js-ipfs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AKJUS/js-ipfs/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AKJUS%2Fjs-ipfs/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"4203500215","node_id":"PR_kwDOEOPLYs7P63Y9","number":3,"state":"closed","title":"Bump @hapi/content and @hapi/hapi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T00:56:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-04T04:36:20.000Z","updated_at":"2026-05-27T00:56:50.000Z","time_to_close":4566028,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"4.1.1","new_version":"6.0.1"},{"name":"@hapi/hapi","repository_url":"https://github.com/hapijs/hapi","old_version":"18.4.1","new_version":"21.4.8"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.1 and updates ancestor dependency [@hapi/hapi](https://github.com/hapijs/hapi). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 4.1.1 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v4.1.1...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/hapi` from 18.4.1 to 21.4.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hapijs/hapi/releases\"\u003e\u003ccode\u003e@​hapi/hapi\u003c/code\u003e's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.0\u003c/h2\u003e\n\u003cp\u003e⚠️  This release contains security fixes, for more information see \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4425\"\u003ehapijs/hapi#4425\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev21.0.0\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4386\"\u003ehapijs/hapi#4386\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ehapi v21.0.0 is a medium-sized release focused on modernization and miscellaneous API improvements. All modules in the hapi.js ecosystem have been updated to officially support Node.js v18, be compatible with ESM projects, and drop support for Node.js v12. Plugins in the hapi.js ecosystem now support hapi v20+.\u003c/p\u003e\n\u003ch2\u003ev20.2.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.2.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd optional payload authentication skip on credentials injection \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4214\"\u003e#4214\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4274\"\u003e#4274\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix handling of auth scheme/strategy realms \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4218\"\u003e#4218\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4281\"\u003e#4281\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eMiscellaneous\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003etest: Fix tests for node@16 error format change \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4282\"\u003e#4282\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4283\"\u003e#4283\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eCredits\u003c/h1\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/devinivy\"\u003e\u003ccode\u003e@​devinivy\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Nargonath\"\u003e\u003ccode\u003e@​Nargonath\u003c/code\u003e\u003c/a\u003e for contributing.\u003c/p\u003e\n\u003ch2\u003ev20.1.5\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/b9b1ba909992e41b8d0b0d90b6a59a23cd26ce6a\"\u003e\u003ccode\u003eb9b1ba9\u003c/code\u003e\u003c/a\u003e 21.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/924279c7b1fc594ee81ef6b92aa3e7821d40925d\"\u003e\u003ccode\u003e924279c\u003c/code\u003e\u003c/a\u003e chore: bump deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4568\"\u003e#4568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/f2a24f6635c0892842f6eaf9154d3788f2f1d084\"\u003e\u003ccode\u003ef2a24f6\u003c/code\u003e\u003c/a\u003e 21.4.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/ee8475b803f3804a56bbb2e449cb40cd14bf8154\"\u003e\u003ccode\u003eee8475b\u003c/code\u003e\u003c/a\u003e fix: 🐛 request.url getter fails when using IPv6 and HTTP2 \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4560\"\u003e#4560\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4559\"\u003e#4559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/509538273c8168609c283acba95d2ecd03b37bd2\"\u003e\u003ccode\u003e5095382\u003c/code\u003e\u003c/a\u003e 21.4.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/97c435fefea45b4a5ccfdb3873dd52da054f4d66\"\u003e\u003ccode\u003e97c435f\u003c/code\u003e\u003c/a\u003e Fix invalid hostname parsing for ipv6 formatted host header (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4564\"\u003e#4564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/62032e6d3189deb638cac8cd18e18607230f2a06\"\u003e\u003ccode\u003e62032e6\u003c/code\u003e\u003c/a\u003e 21.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/0ead0eca3c4e6d9e579a07353756004ca44c83a6\"\u003e\u003ccode\u003e0ead0ec\u003c/code\u003e\u003c/a\u003e fix: auth typings and reduced type ambiguity (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4562\"\u003e#4562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/303571b833f1d5d513e69d706cfcb79e12367f83\"\u003e\u003ccode\u003e303571b\u003c/code\u003e\u003c/a\u003e 21.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/c4d9c8df86bef76b6bad96cb509e59ac6ba64232\"\u003e\u003ccode\u003ec4d9c8d\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4557\"\u003e#4557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/hapi/compare/v18.4.1...v21.4.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/hapi\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/visualjeff/hapiHoster/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/visualjeff/hapiHoster/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/visualjeff%2FhapiHoster/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"4203496577","node_id":"PR_kwDOG_SJ987P62sP","number":1,"state":"closed","title":"Bump @hapi/content and @hapi/hapi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T00:52:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-04T04:34:07.000Z","updated_at":"2026-05-27T00:52:56.000Z","time_to_close":4565927,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"5.0.2","new_version":"6.0.1"},{"name":"@hapi/hapi","repository_url":"https://github.com/hapijs/hapi","old_version":"20.2.1","new_version":"21.4.8"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.1 and updates ancestor dependency [@hapi/hapi](https://github.com/hapijs/hapi). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/hapi` from 20.2.1 to 21.4.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hapijs/hapi/releases\"\u003e\u003ccode\u003e@​hapi/hapi\u003c/code\u003e's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.0\u003c/h2\u003e\n\u003cp\u003e⚠️  This release contains security fixes, for more information see \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4425\"\u003ehapijs/hapi#4425\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev21.0.0\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4386\"\u003ehapijs/hapi#4386\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ehapi v21.0.0 is a medium-sized release focused on modernization and miscellaneous API improvements. All modules in the hapi.js ecosystem have been updated to officially support Node.js v18, be compatible with ESM projects, and drop support for Node.js v12. Plugins in the hapi.js ecosystem now support hapi v20+.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/b9b1ba909992e41b8d0b0d90b6a59a23cd26ce6a\"\u003e\u003ccode\u003eb9b1ba9\u003c/code\u003e\u003c/a\u003e 21.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/924279c7b1fc594ee81ef6b92aa3e7821d40925d\"\u003e\u003ccode\u003e924279c\u003c/code\u003e\u003c/a\u003e chore: bump deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4568\"\u003e#4568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/f2a24f6635c0892842f6eaf9154d3788f2f1d084\"\u003e\u003ccode\u003ef2a24f6\u003c/code\u003e\u003c/a\u003e 21.4.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/ee8475b803f3804a56bbb2e449cb40cd14bf8154\"\u003e\u003ccode\u003eee8475b\u003c/code\u003e\u003c/a\u003e fix: 🐛 request.url getter fails when using IPv6 and HTTP2 \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4560\"\u003e#4560\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4559\"\u003e#4559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/509538273c8168609c283acba95d2ecd03b37bd2\"\u003e\u003ccode\u003e5095382\u003c/code\u003e\u003c/a\u003e 21.4.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/97c435fefea45b4a5ccfdb3873dd52da054f4d66\"\u003e\u003ccode\u003e97c435f\u003c/code\u003e\u003c/a\u003e Fix invalid hostname parsing for ipv6 formatted host header (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4564\"\u003e#4564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/62032e6d3189deb638cac8cd18e18607230f2a06\"\u003e\u003ccode\u003e62032e6\u003c/code\u003e\u003c/a\u003e 21.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/0ead0eca3c4e6d9e579a07353756004ca44c83a6\"\u003e\u003ccode\u003e0ead0ec\u003c/code\u003e\u003c/a\u003e fix: auth typings and reduced type ambiguity (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4562\"\u003e#4562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/303571b833f1d5d513e69d706cfcb79e12367f83\"\u003e\u003ccode\u003e303571b\u003c/code\u003e\u003c/a\u003e 21.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/c4d9c8df86bef76b6bad96cb509e59ac6ba64232\"\u003e\u003ccode\u003ec4d9c8d\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4557\"\u003e#4557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/hapi/compare/v20.2.1...v21.4.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/hapi\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ryumada/hapi-web-server-new/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ryumada/hapi-web-server-new/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ryumada%2Fhapi-web-server-new/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"4203496429","node_id":"PR_kwDOPeYBOs7P62qZ","number":146,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.1","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-04T04:34:02.000Z","updated_at":"2026-04-04T04:36:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-notify-listener/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-notify-listener/pull/146","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-notify-listener/issues/146","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/146/packages"}],"issue_packages":[{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-06-15T22:27:19.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4669381022","node_id":"PR_kwDONhlJ1c7mwisE","number":264,"state":"open","title":"feat(deps): Bump the npm_and_yarn group across 27 directories with 14 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-06-15T22:27:19.000Z","updated_at":"2026-06-15T22:27:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps): Bump","group_name":"npm_and_yarn","update_count":14,"packages":[{"name":"esbuild","old_version":"0.20.0","new_version":"0.28.1","repository_url":"https://github.com/evanw/esbuild"},{"name":"vitest","old_version":"3.2.4","new_version":"3.2.6","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"@angular/common","old_version":"14.3.0","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"@angular/core","old_version":"14.3.0","new_version":"20.3.25","repository_url":"https://github.com/angular/angular"},{"name":"vite","old_version":"5.4.21","new_version":"6.4.3","repository_url":"https://github.com/vitejs/vite"},{"name":"next","old_version":"14.2.35","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"nuxt","old_version":"3.17.7","new_version":"3.21.6","repository_url":"https://github.com/nuxt/nuxt"},{"name":"react-router","old_version":"7.13.0","new_version":"7.15.1","repository_url":"https://github.com/remix-run/react-router"},{"name":"axios","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/axios/axios"},{"name":"hono","old_version":"4.12.18","new_version":"4.12.21","repository_url":"https://github.com/honojs/hono"},{"name":"ws","old_version":"8.20.1","new_version":"8.21.0","repository_url":"https://github.com/websockets/ws"},{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.8.4","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 14 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [esbuild](https://github.com/evanw/esbuild) | `0.20.0` | `0.28.1` |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `3.2.6` |\n| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `14.3.0` | `20.3.25` |\n| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `14.3.0` | `20.3.25` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `6.4.3` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `15.5.18` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.17.7` | `3.21.6` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.0` | `7.15.1` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.16.0` |\n| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.21` |\n| [ws](https://github.com/websockets/ws) | `8.20.1` | `8.21.0` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.1` | `6.0.2` |\n| [@hapi/wreck](https://github.com/hapijs/wreck) | `18.1.0` | `18.1.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |\n\nBumps the npm_and_yarn group with 1 update in the /dev-packages/browser-integration-tests directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/angular-17 directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/cloudflare-hono directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [hono](https://github.com/honojs/hono).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev directory: [esbuild](https://github.com/evanw/esbuild) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/debug-id-sourcemaps directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/hydrogen-react-router-7 directory: [esbuild](https://github.com/evanw/esbuild) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/lighthouse-react directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nestjs-basic directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-13 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-14 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-app-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-orpc directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-pages-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/node-profiling-cjs directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/node-profiling-esm directory: [esbuild](https://github.com/evanw/esbuild).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-node-20-18 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-spa-node-20-18 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/remix-hydrogen directory: [esbuild](https://github.com/evanw/esbuild) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-dynamic-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-spa directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-top-level-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/supabase-nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /packages/nuxt directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\n\nUpdates `esbuild` from 0.20.0 to 0.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/releases\"\u003eesbuild's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eDisallow \u003ccode\u003e\\\u003c/code\u003e in local development server HTTP requests (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr\"\u003eGHSA-g7r4-m6w7-qqqr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThis release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \u003ccode\u003e\\\u003c/code\u003e backslash character. It happened due to the use of Go's \u003ccode\u003epath.Clean()\u003c/code\u003e function, which only handles Unix-style \u003ccode\u003e/\u003c/code\u003e characters. HTTP requests with paths containing \u003ccode\u003e\\\u003c/code\u003e are no longer allowed.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAdd integrity checks to the Deno API (\u003ca href=\"https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr\"\u003eGHSA-gv7w-rqvm-qjhr\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.\u003c/p\u003e\n\u003cp\u003eNote that esbuild's Deno API installs from \u003ccode\u003eregistry.npmjs.org\u003c/code\u003e by default, but allows the \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e environment variable to override this with a custom package registry. This change means that the esbuild executable served by \u003ccode\u003eNPM_CONFIG_REGISTRY\u003c/code\u003e must now match the expected content.\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/sondt99\"\u003e\u003ccode\u003e@​sondt99\u003c/code\u003e\u003c/a\u003e for reporting this issue.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAvoid inlining \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild's minifier sometimes incorrectly inlined \u003ccode\u003eusing\u003c/code\u003e and \u003ccode\u003eawait using\u003c/code\u003e declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for \u003ccode\u003elet\u003c/code\u003e and \u003ccode\u003econst\u003c/code\u003e declarations by avoiding doing it for \u003ccode\u003evar\u003c/code\u003e declarations, which no longer worked when more declaration types were added. Here's an example:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\n{\r\n  using x = new Resource()\r\n  x.activate()\r\n}\r\n\u003cp\u003e// Old output (with --minify)\u003cbr /\u003e\nnew Resource().activate();\u003c/p\u003e\n\u003cp\u003e// New output (with --minify)\u003cbr /\u003e\n{using e=new Resource;e.activate()}\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix module evaluation when an error is thrown (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4467\"\u003e#4467\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eIf an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e is used to import a module multiple times. The thrown error is supposed to be thrown by every call to \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e, not just the first. With this release, esbuild will now throw the same error every time you call \u003ccode\u003eimport()\u003c/code\u003e or \u003ccode\u003erequire()\u003c/code\u003e on a module that throws during its evaluation.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix some edge cases around the \u003ccode\u003enew\u003c/code\u003e operator (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4477\"\u003e#4477\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003ePreviously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a \u003ccode\u003enew\u003c/code\u003e expression (specifically an optional chain and/or a tagged template literal). The generated code for the \u003ccode\u003enew\u003c/code\u003e target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the \u003ccode\u003enew\u003c/code\u003e target in parentheses. Here is an example of some affected code:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Original code\r\nnew (foo()`bar`)()\r\nnew (foo()?.bar)()\r\n\u003cp\u003e// Old output\u003cbr /\u003e\nnew foo()\u003ccode\u003ebar\u003c/code\u003e();\u003cbr /\u003e\nnew (foo())?.bar();\u003c/p\u003e\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md\"\u003eesbuild's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog: 2024\u003c/h1\u003e\n\u003cp\u003eThis changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).\u003c/p\u003e\n\u003ch2\u003e0.24.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix regression with \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003eimport.meta\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4010\"\u003e#4010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4012\"\u003e#4012\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/evanw/esbuild/pull/4013\"\u003e#4013\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe previous change in version 0.24.1 to use a more expression-like parser for \u003ccode\u003edefine\u003c/code\u003e values to allow quoted property names introduced a regression that removed the ability to use \u003ccode\u003e--define:import.meta=...\u003c/code\u003e. Even though \u003ccode\u003eimport\u003c/code\u003e is normally a keyword that can't be used as an identifier, ES modules special-case the \u003ccode\u003eimport.meta\u003c/code\u003e expression to behave like an identifier anyway. This change fixes the regression.\u003c/p\u003e\n\u003cp\u003eThis fix was contributed by \u003ca href=\"https://github.com/sapphi-red\"\u003e\u003ccode\u003e@​sapphi-red\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.24.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow \u003ccode\u003ees2024\u003c/code\u003e as a target in \u003ccode\u003etsconfig.json\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4004\"\u003e#4004\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eTypeScript recently \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/#support-for---target-es2024-and---lib-es2024\"\u003eadded \u003ccode\u003ees2024\u003c/code\u003e\u003c/a\u003e as a compilation target, so esbuild now supports this in the \u003ccode\u003etarget\u003c/code\u003e field of \u003ccode\u003etsconfig.json\u003c/code\u003e files, such as in the following configuration file:\u003c/p\u003e\n\u003cpre lang=\"json\"\u003e\u003ccode\u003e{\n  \u0026quot;compilerOptions\u0026quot;: {\n    \u0026quot;target\u0026quot;: \u0026quot;ES2024\u0026quot;\n  }\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eAs a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in \u003ca href=\"https://esbuild.github.io/content-types/#tsconfig-json\"\u003ethe documentation\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThis fix was contributed by \u003ca href=\"https://github.com/billyjanitsch\"\u003e\u003ccode\u003e@​billyjanitsch\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAllow automatic semicolon insertion after \u003ccode\u003eget\u003c/code\u003e/\u003ccode\u003eset\u003c/code\u003e\u003c/p\u003e\n\u003cp\u003eThis change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eclass Foo {\n  get\n  *x() {}\n  set\n  *y() {}\n}\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eThe above code will be considered valid starting with this release. This change to esbuild follows a \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/pull/60225\"\u003esimilar change to TypeScript\u003c/a\u003e which will allow this syntax starting with TypeScript 5.7.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eAllow quoted property names in \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003e--pure\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4008\"\u003e#4008\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003edefine\u003c/code\u003e and \u003ccode\u003epure\u003c/code\u003e API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes \u003ccode\u003e--define\u003c/code\u003e and \u003ccode\u003e--pure\u003c/code\u003e consistent with \u003ccode\u003e--global-name\u003c/code\u003e, which already supported quoted property names. For example, the following is now possible:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e\"\u003e\u003ccode\u003ebb9db84\u003c/code\u003e\u003c/a\u003e publish 0.28.1 to npm\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2\"\u003e\u003ccode\u003e9ff053e\u003c/code\u003e\u003c/a\u003e security: add integrity checks to the Deno API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5\"\u003e\u003ccode\u003e0a9bf21\u003c/code\u003e\u003c/a\u003e enforce non-negative size in gzip parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e\"\u003e\u003ccode\u003ee2a1a71\u003c/code\u003e\u003c/a\u003e security: forbid \u003ccode\u003e\\\\\u003c/code\u003e in local dev server requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78\"\u003e\u003ccode\u003e83a2cbf\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4482\"\u003e#4482\u003c/a\u003e: don't inline \u003ccode\u003eusing\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38\"\u003e\u003ccode\u003e308ad74\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4471\"\u003e#4471\u003c/a\u003e: renaming of nested \u003ccode\u003evar\u003c/code\u003e declarations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/f013f5f99a015bce92ec48d49181d4ad3177b29b\"\u003e\u003ccode\u003ef013f5f\u003c/code\u003e\u003c/a\u003e fix some typos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/aafd6e48b1088336a5f5a17e930be7e840d43d8c\"\u003e\u003ccode\u003eaafd6e4\u003c/code\u003e\u003c/a\u003e chore: fix some minor issues in comments (\u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4462\"\u003e#4462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/15300c30b5e22f7cfcbed850c246d35095658386\"\u003e\u003ccode\u003e15300c3\u003c/code\u003e\u003c/a\u003e follow up: cjs evaluation fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/evanw/esbuild/commit/1bda0c31d7697c0af44b3ab39b81e599e559a395\"\u003e\u003ccode\u003e1bda0c3\u003c/code\u003e\u003c/a\u003e fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4461\"\u003e#4461\u003c/a\u003e, fix \u003ca href=\"https://redirect.github.com/evanw/esbuild/issues/4467\"\u003e#4467\u003c/a\u003e: esm evaluation fixes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/evanw/esbuild/compare/v0.20.0...v0.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for esbuild since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 3.2.4 to 3.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin last supported vite-node version  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d05\"\u003e\u003c!-- raw HTML omitted --\u003e(16f12)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.5...v3.2.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e: Add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10445\"\u003evitest-dev/vitest#10445\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d\"\u003e\u003c!-- raw HTML omitted --\u003e(af88b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10456\"\u003evitest-dev/vitest#10456\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd\"\u003e\u003c!-- raw HTML omitted --\u003e(385a1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.4...v3.2.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b6d56f8171ae814ee7571df63a35a0da5203dbaa\"\u003e\u003ccode\u003eb6d56f8\u003c/code\u003e\u003c/a\u003e chore: release v3.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d0585677f6a32bcb3dd01fa61c140e2588\"\u003e\u003ccode\u003e16f120d\u003c/code\u003e\u003c/a\u003e fix: pin last supported vite-node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2cbad0a923c48c6144266df3cd25f93547cb5221\"\u003e\u003ccode\u003e2cbad0a\u003c/code\u003e\u003c/a\u003e chore: release v3.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd4c2bfa5e7d58bf7c6834c929969f2c7\"\u003e\u003ccode\u003e385a1ae\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d82844a4761ea9a977156c98e2b14ca8\"\u003e\u003ccode\u003eaf88b1f\u003c/code\u003e\u003c/a\u003e feat(api): add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/common` from 14.3.0 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/common/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/common's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003ccode\u003e06be298\u003c/code\u003e\u003c/a\u003e fix(http): preserve empty referrer option in HttpRequest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003ccode\u003e9f443bc\u003c/code\u003e\u003c/a\u003e fix(common): Limits date format string length\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003ccode\u003efa940e1\u003c/code\u003e\u003c/a\u003e fix(http): Rejects non-HTTP(S) URLs in JSONP requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003ccode\u003ee2ef1ce\u003c/code\u003e\u003c/a\u003e fix(http): skip transfer cache for fetch credentialed requests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/3d135ce59bbf7426825bc493bc681f266846ac79\"\u003e\u003ccode\u003e3d135ce\u003c/code\u003e\u003c/a\u003e fix(common): add upper bounds for digitsInfo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/39a4b4cc8e8d101a566a70658707bc9f53dd5883\"\u003e\u003ccode\u003e39a4b4c\u003c/code\u003e\u003c/a\u003e fix(common): sanitize placeholder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/de7b2a62e7eded747c2a520c177cd41f60a96dcd\"\u003e\u003ccode\u003ede7b2a6\u003c/code\u003e\u003c/a\u003e fix(http): exclude withCredentials requests from transfer cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/4233188d8e70283190ea87dbaa5a872269291b4a\"\u003e\u003ccode\u003e4233188\u003c/code\u003e\u003c/a\u003e fix(http): skip TransferCache for cookie-bearing requests by default\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@angular/core` from 14.3.0 to 20.3.25\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/releases\"\u003e@​angular/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.25\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e\u003cimg src=\"https://img.shields.io/badge/9f443bc24c-fix-green\" alt=\"fix - 9f443bc24c\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003cimg src=\"https://img.shields.io/badge/566ad05f20-fix-green\" alt=\"fix - 566ad05f20\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003cimg src=\"https://img.shields.io/badge/1a62130a6b-fix-green\" alt=\"fix - 1a62130a6b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003e\u003cimg src=\"https://img.shields.io/badge/a68ec702a0-fix-green\" alt=\"fix - a68ec702a0\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003cimg src=\"https://img.shields.io/badge/768a349e6e-fix-green\" alt=\"fix - 768a349e6e\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003cimg src=\"https://img.shields.io/badge/ca48b4728d-fix-green\" alt=\"fix - ca48b4728d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e\u003cimg src=\"https://img.shields.io/badge/06be298267-fix-green\" alt=\"fix - 06be298267\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003e\u003cimg src=\"https://img.shields.io/badge/fa940e1f4d-fix-green\" alt=\"fix - fa940e1f4d\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003e\u003cimg src=\"https://img.shields.io/badge/e2ef1ce72a-fix-green\" alt=\"fix - e2ef1ce72a\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003cimg src=\"https://img.shields.io/badge/49368c1859-fix-green\" alt=\"fix - 49368c1859\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003e\u003cimg src=\"https://img.shields.io/badge/d55c94ad81-refactor-yellow\" alt=\"refactor - d55c94ad81\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d65a5f457b-fix-green\" alt=\"fix - d65a5f457b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e20.3.24\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/6ca433e56bcf74fdb6ad01d3afdf59628fba69b6\"\u003e\u003cimg src=\"https://img.shields.io/badge/6ca433e56b-fix-green\" alt=\"fix - 6ca433e56b\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003ethrow on suspicious URLs and restrict protocol-relative URLs\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/8680b5152fe58ebde81e331b74ba806fc86514cc\"\u003e\u003cimg src=\"https://img.shields.io/badge/8680b5152f-fix-green\" alt=\"fix - 8680b5152f\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eupdate domino to latest version\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.23\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d40acc6431997b304ec54c951e55d2e52ed6f6dc\"\u003e\u003cimg src=\"https://img.shields.io/badge/d40acc6431-fix-green\" alt=\"fix - d40acc6431\" /\u003e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eprevent namespaced SVG \u003c!-- raw HTML omitted --\u003e elements from being stripped\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2\u003e20.3.22\u003c/h2\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/angular/angular/blob/main/CHANGELOG.md\"\u003e@​angular/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e20.3.25 (2026-06-10)\u003c/h1\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eXHR support in \u003ccode\u003e@angular/platform-server\u003c/code\u003e is deprecated. Use standard \u003ccode\u003efetch\u003c/code\u003e APIs instead.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecommon\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/9f443bc24c79dca998c9434d1e235dc19dc29bba\"\u003e9f443bc24c\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eLimits date format string length\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e566ad05f20\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for uncacheable HTTP traffic\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e1a62130a6b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003euse cryptographically secure SHA-256 for transfer cache key generation\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/a68ec702a056a2706a152fce29081241fd276f12\"\u003ea68ec702a0\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003esanitize two-way properties\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ecore\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e768a349e6e\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden TransferState restoration against DOM clobbering\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003eca48b4728d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003evalidate lowercase SVG animation attribute names (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69270\"\u003e#69270\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003ehttp\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/06be29826741212ca00e21efb6abff653e4541b5\"\u003e06be298267\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003epreserve empty referrer option in HttpRequest\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/fa940e1f4de75c33ccca50357d941be53a5a0950\"\u003efa940e1f4d\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eRejects non-HTTP(S) URLs in JSONP requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/e2ef1ce72ae084e01a76950c731052f4fa97fcdd\"\u003ee2ef1ce72a\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eskip transfer cache for fetch credentialed requests\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eplatform-server\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e49368c1859\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eharden platform location origin validation during SSR\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d55c94ad811a15c9c255164a0d66892c645f602e\"\u003ed55c94ad81\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003erefactor\u003c/td\u003e\n\u003ctd\u003edeprecate ServerXhr (\u003ca href=\"https://redirect.github.com/angular/angular/pull/69256\"\u003e#69256\u003c/a\u003e)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3\u003eservice-worker\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eCommit\u003c/th\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eDescription\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/angular/angular/commit/d65a5f457b1afd6bdd4d952d3f213c6aa1aabcbc\"\u003ed65a5f457b\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003efix\u003c/td\u003e\n\u003ctd\u003eStrips sensitive headers on cross-origin redirects\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch1\u003e22.0.0 (2026-06-03)\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://goo.gle/angular-v22-blog\"\u003eBlog post \u0026quot;Announcing Angular v22\u0026quot;\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003ecompiler\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThis change will trigger the \u003ccode\u003enullishCoalescingNotNullable\u003c/code\u003e and \u003ccode\u003eoptionalChainNotNullable\u003c/code\u003e diagnostics on exisiting projects.\nYou might want to disable those 2 diagnotiscs in your \u003ccode\u003etsconfig\u003c/code\u003e temporarily.\u003c/li\u003e\n\u003cli\u003edata prefixed attribute no-longer bind inputs nor outputs.\u003c/li\u003e\n\u003cli\u003eThe compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ein\u003c/code\u003e variables will throw in template expressions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ecompiler-cli\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/ca48b4728d5f6770be63a08f64a6432207ad54c0\"\u003e\u003ccode\u003eca48b47\u003c/code\u003e\u003c/a\u003e fix(core): validate lowercase SVG animation attribute names (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/69270\"\u003e#69270\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/1a62130a6bb313e4441f005e480768a360c71be5\"\u003e\u003ccode\u003e1a62130\u003c/code\u003e\u003c/a\u003e fix(common): use cryptographically secure SHA-256 for transfer cache key gene...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/49368c185907edb48467074c56e305abbfa3544a\"\u003e\u003ccode\u003e49368c1\u003c/code\u003e\u003c/a\u003e fix(platform-server): harden platform location origin validation during SSR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/566ad05f20732c38855353c3e73771ef9a34dadc\"\u003e\u003ccode\u003e566ad05\u003c/code\u003e\u003c/a\u003e fix(common): skip transfer cache for uncacheable HTTP traffic\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/768a349e6e54ff16deba4c1bfe12be9d0f55f443\"\u003e\u003ccode\u003e768a349\u003c/code\u003e\u003c/a\u003e fix(core): harden TransferState restoration against DOM clobbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/7ae6381a4845ad4b13a7a5574c5433b077c93c5c\"\u003e\u003ccode\u003e7ae6381\u003c/code\u003e\u003c/a\u003e test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/65954092483a88fc69cccd3b4c56d96450ac2fe8\"\u003e\u003ccode\u003e6595409\u003c/code\u003e\u003c/a\u003e test(core): update golden symbols and host bindings sanitization spec (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/d86e4e7b2ad0e667aeb0f8ed053e2cb2bd154b81\"\u003e\u003ccode\u003ed86e4e7\u003c/code\u003e\u003c/a\u003e fix(core): reject script element as a dynamic component host (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/b8f1f7276514e258e8c815ec5c7d9b8826ecd372\"\u003e\u003ccode\u003eb8f1f72\u003c/code\u003e\u003c/a\u003e test(core): remove obsolete blockquote cite host binding tests (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68926\"\u003e#68926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/angular/angular/commit/36200bd81a3420d8222dfe10767437c383a20fe8\"\u003e\u003ccode\u003e36200bd\u003c/code\u003e\u003c/a\u003e test(core): update spec files to match 20.3.x limits and actual contexts (\u003ca href=\"https://github.com/angular/angular/tree/HEAD/packages/core/issues/68\"\u003e#68\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/angular/angular/commits/v20.3.25/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 5.4.21 to 6.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.4.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.3 (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576\"\u003e#22576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176\"\u003e96b0c10\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22576\"\u003e#22576\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22575\"\u003e#22575\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f\"\u003e8fed5cf\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22575\"\u003e#22575\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.2 (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003efe28e47\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22163\"\u003e#22163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003eca4da5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.1 (2025-10-20)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e1114b5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20968\"\u003e#20968\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20969\"\u003e#20969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.4.0 (2025-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003eca6455e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20932\"\u003e#20932\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.7 (2025-10-14)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003ec59a222\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20940\"\u003e#20940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.6 (2025-09-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply \u003ccode\u003efs.strict\u003c/code\u003e check to HTML files (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20736\"\u003e#20736\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f\"\u003e0ab19ea\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20736\"\u003e#20736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: upgrade sirv to 3.0.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20735\"\u003e#20735\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0\"\u003ee11d240\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20735\"\u003e#20735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: detect ts support via \u003ccode\u003eprocess.features\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20544\"\u003e#20544\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7d9922972b62329d37a71d4da5a4a382d0bf8a79\"\u003e7d99229\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20544\"\u003e#20544\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.5 (2025-05-05)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ssr): handle uninitialized export access as undefined (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19959\"\u003e#19959\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fd38d076fe2455aac1e00a7b15cd51159bf12bb5\"\u003efd38d07\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19959\"\u003e#19959\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.4 (2025-04-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: check static serve file inside sirv (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965\"\u003e#19965\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb\"\u003ec22c43d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19965\"\u003e#19965\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(optimizer): return plain object when using \u003ccode\u003erequire\u003c/code\u003e to import externals in optimized dependenci (\u003ca href=\"https://github.com/vitejs/vite/commit/efc5eab253419fde0a6a48b8d2f233063d6a9643\"\u003eefc5eab\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19940\"\u003e#19940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6c2c881f15495738ff03bc1d67cc052c07e0cac4\"\u003e\u003ccode\u003e6c2c881\u003c/code\u003e\u003c/a\u003e release: v6.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/96b0c10162e9c55485d922db2cfc6b8227cbc176\"\u003e\u003ccode\u003e96b0c10\u003c/code\u003e\u003c/a\u003e fix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22576\"\u003e#22576\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8fed5cf540c0d475266787f52072f258478cd42f\"\u003e\u003ccode\u003e8fed5cf\u003c/code\u003e\u003c/a\u003e fix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6b3fad02abd550bd7b79934ff92c58dbd7f33045\"\u003e\u003ccode\u003e6b3fad0\u003c/code\u003e\u003c/a\u003e release: v6.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003e\u003ccode\u003eca4da5d\u003c/code\u003e\u003c/a\u003e fix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003e\u003ccode\u003efe28e47\u003c/code\u003e\u003c/a\u003e fix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/5487f4f641f70c47ea05fd101a4319897df048b3\"\u003e\u003ccode\u003e5487f4f\u003c/code\u003e\u003c/a\u003e release: v6.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e\u003ccode\u003e1114b5d\u003c/code\u003e\u003c/a\u003e fix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f12697c0f64b9a37196b9ab218a0911829d5b103\"\u003e\u003ccode\u003ef12697c\u003c/code\u003e\u003c/a\u003e release: v6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003e\u003ccode\u003eca6455e\u003c/code\u003e\u003c/a\u003e feat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v6.4.3/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.35...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 3.17.7 to 3.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.21.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.6 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v3.21.5...v3.21.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Prefer our own builder/server deps (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Add json extension to payload cache items (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35043\"\u003e#35043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Handle errors fetching app manifest (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Don't strip buildAssetsDir from vite-node SSR ids (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35040\"\u003e#35040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Strip queries in css inline styles map (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35067\"\u003e#35067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Encode html-significant characters in external redirect body (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Validate island request hash matches props (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use regexp to strip query (\u003ca href=\"https://github.com/nuxt/nuxt/commit/042b615e6\"\u003e042b615e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use \u003ccode\u003estatusCode\u003c/code\u003e for nitro v2 compatibility (\u003ca href=\"https://github.com/nuxt/nuxt/commit/82dcd6a31\"\u003e82dcd6a31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render component-less parent routes during client-side nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Run middleware for page islands (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💅 Refactors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Extract same-origin check for dev middleware (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/3505...\n\n_Description has been truncated_","html_url":"https://github.com/SherfeyInv/sentry-javascript/pull/264","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fsentry-javascript/issues/264","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/264/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-06-10T18:09:56.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4633788096","node_id":"PR_kwDONhlJ1c7k-tZQ","number":259,"state":"closed","title":"feat(deps): Bump the npm_and_yarn group across 24 directories with 11 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-12T20:41:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-10T18:09:56.000Z","updated_at":"2026-06-12T20:41:59.000Z","time_to_close":181921,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"feat(deps): Bump","group_name":"npm_and_yarn","update_count":11,"packages":[{"name":"vitest","old_version":"3.2.4","new_version":"3.2.6","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"vite","old_version":"5.4.21","new_version":"6.4.2","repository_url":"https://github.com/vitejs/vite"},{"name":"next","old_version":"14.2.35","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"nuxt","old_version":"3.17.7","new_version":"3.21.6","repository_url":"https://github.com/nuxt/nuxt"},{"name":"react-router","old_version":"7.13.0","new_version":"7.15.0","repository_url":"https://github.com/remix-run/react-router"},{"name":"axios","old_version":"1.15.2","new_version":"1.16.0","repository_url":"https://github.com/axios/axios"},{"name":"hono","old_version":"4.12.18","new_version":"4.12.21","repository_url":"https://github.com/honojs/hono"},{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.8.4","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `3.2.6` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `6.4.2` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `15.5.18` |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.17.7` | `3.21.6` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.0` | `7.15.0` |\n| [axios](https://github.com/axios/axios) | `1.15.2` | `1.16.0` |\n| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.21` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.1` | `6.0.2` |\n| [@hapi/wreck](https://github.com/hapijs/wreck) | `18.1.0` | `18.1.2` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |\n\nBumps the npm_and_yarn group with 1 update in the /dev-packages/browser-integration-tests directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/cloudflare-hono directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [hono](https://github.com/honojs/hono).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/debug-id-sourcemaps directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/hydrogen-react-router-7 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/lighthouse-react directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nestjs-basic directory: [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-13 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-14 directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-app-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-orpc directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nextjs-pages-dir directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/nuxt-3-min directory: [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-node-20-18 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/react-router-7-framework-spa-node-20-18 directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-dynamic-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-spa directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/solidstart-top-level-import directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/supabase-nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 1 update in the /dev-packages/e2e-tests/test-applications/sveltekit-2-kit-tracing directory: [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit).\nBumps the npm_and_yarn group with 2 updates in the /dev-packages/e2e-tests/test-applications/sveltekit-2-svelte-5 directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit).\nBumps the npm_and_yarn group with 1 update in the /packages/nextjs directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /packages/nuxt directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).\n\nUpdates `vitest` from 3.2.4 to 3.2.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePin last supported vite-node version  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d05\"\u003e\u003c!-- raw HTML omitted --\u003e(16f12)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.5...v3.2.6\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.5\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e: Add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10445\"\u003evitest-dev/vitest#10445\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d\"\u003e\u003c!-- raw HTML omitted --\u003e(af88b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e: Disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [backport to v3]  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCodex\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/10456\"\u003evitest-dev/vitest#10456\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd\"\u003e\u003c!-- raw HTML omitted --\u003e(385a1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v3.2.4...v3.2.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b6d56f8171ae814ee7571df63a35a0da5203dbaa\"\u003e\u003ccode\u003eb6d56f8\u003c/code\u003e\u003c/a\u003e chore: release v3.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/16f120d0585677f6a32bcb3dd01fa61c140e2588\"\u003e\u003ccode\u003e16f120d\u003c/code\u003e\u003c/a\u003e fix: pin last supported vite-node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/2cbad0a923c48c6144266df3cd25f93547cb5221\"\u003e\u003ccode\u003e2cbad0a\u003c/code\u003e\u003c/a\u003e chore: release v3.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/385a1aefd4c2bfa5e7d58bf7c6834c929969f2c7\"\u003e\u003ccode\u003e385a1ae\u003c/code\u003e\u003c/a\u003e fix(browser): disable client \u003ccode\u003ecdp\u003c/code\u003e API when \u003ccode\u003eallowWrite/allowExec: false\u003c/code\u003e [ba...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/af88b1f5d82844a4761ea9a977156c98e2b14ca8\"\u003e\u003ccode\u003eaf88b1f\u003c/code\u003e\u003c/a\u003e feat(api): add \u003ccode\u003eallowWrite\u003c/code\u003e and \u003ccode\u003eallowExec\u003c/code\u003e options to \u003ccode\u003eapi\u003c/code\u003e [backport to v3]...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for vitest since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 5.4.21 to 6.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.4.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.4.0\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.0/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.2 (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003efe28e47\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22163\"\u003e#22163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003eca4da5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.4.1 (2025-10-20)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e1114b5d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20968\"\u003e#20968\u003c/a\u003e \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20969\"\u003e#20969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e6.4.0 (2025-10-15)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003eca6455e\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20932\"\u003e#20932\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.7 (2025-10-14)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003ec59a222\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20940\"\u003e#20940\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.6 (2025-09-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: apply \u003ccode\u003efs.strict\u003c/code\u003e check to HTML files (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20736\"\u003e#20736\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f\"\u003e0ab19ea\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20736\"\u003e#20736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: upgrade sirv to 3.0.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20735\"\u003e#20735\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0\"\u003ee11d240\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20735\"\u003e#20735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: detect ts support via \u003ccode\u003eprocess.features\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20544\"\u003e#20544\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7d9922972b62329d37a71d4da5a4a382d0bf8a79\"\u003e7d99229\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/20544\"\u003e#20544\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.5 (2025-05-05)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(ssr): handle uninitialized export access as undefined (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19959\"\u003e#19959\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/fd38d076fe2455aac1e00a7b15cd51159bf12bb5\"\u003efd38d07\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19959\"\u003e#19959\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.4 (2025-04-30)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: check static serve file inside sirv (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965\"\u003e#19965\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb\"\u003ec22c43d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19965\"\u003e#19965\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(optimizer): return plain object when using \u003ccode\u003erequire\u003c/code\u003e to import externals in optimized dependenci (\u003ca href=\"https://github.com/vitejs/vite/commit/efc5eab253419fde0a6a48b8d2f233063d6a9643\"\u003eefc5eab\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19940\"\u003e#19940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: remove duplicate plugin context type (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19935\"\u003e#19935\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/d6d01c2292fa4f9603e05b95d81c8724314c20e0\"\u003ed6d01c2\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19935\"\u003e#19935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e6.3.3 (2025-04-24)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: ignore malformed uris in tranform middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19853\"\u003e#19853\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/e4d520141bcd83ad61f16767348b4a813bf9340a\"\u003ee4d5201\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/19853\"\u003e#19853\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6b3fad02abd550bd7b79934ff92c58dbd7f33045\"\u003e\u003ccode\u003e6b3fad0\u003c/code\u003e\u003c/a\u003e release: v6.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca4da5d1fb45c9cfdce606aa30825095791b164b\"\u003e\u003ccode\u003eca4da5d\u003c/code\u003e\u003c/a\u003e fix: avoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161\"\u003e#22161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/fe28e47e9463e4c9619f94bfa06d2f8f1411b44b\"\u003e\u003ccode\u003efe28e47\u003c/code\u003e\u003c/a\u003e fix: apply server.fs check to env transport (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159\"\u003e#22159\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22163\"\u003e#22163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/5487f4f641f70c47ea05fd101a4319897df048b3\"\u003e\u003ccode\u003e5487f4f\u003c/code\u003e\u003c/a\u003e release: v6.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/1114b5d7ea03e26572708715343bec69db4536e8\"\u003e\u003ccode\u003e1114b5d\u003c/code\u003e\u003c/a\u003e fix(dev): trim trailing slash before \u003ccode\u003eserver.fs.deny\u003c/code\u003e check (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968\"\u003e#20968\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20969\"\u003e#20969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f12697c0f64b9a37196b9ab218a0911829d5b103\"\u003e\u003ccode\u003ef12697c\u003c/code\u003e\u003c/a\u003e release: v6.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/ca6455ee9eb6111a9caa9810506a1b9ac96a520a\"\u003e\u003ccode\u003eca6455e\u003c/code\u003e\u003c/a\u003e feat: allow passing down resolved config to vite's createServer (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20932\"\u003e#20932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0e173d83681daa31be10fa8a62d56b1ec84690af\"\u003e\u003ccode\u003e0e173d8\u003c/code\u003e\u003c/a\u003e release: v6.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/c59a222aa584c087cfe710173de1b9ecb597a3ff\"\u003e\u003ccode\u003ec59a222\u003c/code\u003e\u003c/a\u003e fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20940\"\u003e#20940\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/3f337c5e24504e51188d29c970de1416ee523dbb\"\u003e\u003ccode\u003e3f337c5\u003c/code\u003e\u003c/a\u003e release: v6.3.6\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v6.4.2/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.35...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 3.17.7 to 3.21.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.21.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.6 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v3.21.5...v3.21.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Prefer our own builder/server deps (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Add json extension to payload cache items (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35043\"\u003e#35043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Handle errors fetching app manifest (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Don't strip buildAssetsDir from vite-node SSR ids (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35040\"\u003e#35040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Strip queries in css inline styles map (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35067\"\u003e#35067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Encode html-significant characters in external redirect body (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Validate island request hash matches props (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use regexp to strip query (\u003ca href=\"https://github.com/nuxt/nuxt/commit/042b615e6\"\u003e042b615e6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Use \u003ccode\u003estatusCode\u003c/code\u003e for nitro v2 compatibility (\u003ca href=\"https://github.com/nuxt/nuxt/commit/82dcd6a31\"\u003e82dcd6a31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render component-less parent routes during client-side nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Run middleware for page islands (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e💅 Refactors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Extract same-origin check for dev middleware (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35051\"\u003e#35051\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📖 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove CSB, set node 22 and use steps for clarity (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35066\"\u003e#35066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIgnore link-like syntax in code (\u003ca href=\"https://github.com/nuxt/nuxt/commit/f9bf11b11\"\u003ef9bf11b11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNarrow engines.node in test (\u003ca href=\"https://github.com/nuxt/nuxt/commit/5ed9a2691\"\u003e5ed9a2691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove unused import (\u003ca href=\"https://github.com/nuxt/nuxt/commit/3a8bb0030\"\u003e3a8bb0030\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelax relative time assertion (\u003ca href=\"https://github.com/nuxt/nuxt/commit/256513eb0\"\u003e256513eb0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMove build assets dir fixture out of \u003ccode\u003eapp/\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/commit/6d2ac69ff\"\u003e6d2ac69ff\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eClean up agent-scan workflow (\u003ca href=\"https://github.com/nuxt/nuxt/commit/31590cf07\"\u003e31590cf07\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eContinue autofix workflow when \u003ccode\u003etest:engines\u003c/code\u003e fails (\u003ca href=\"https://github.com/nuxt/nuxt/commit/958abb882\"\u003e958abb882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove workflows (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35088\"\u003e#35088\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDaniel Roe (\u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eJulien Huang (\u003ca href=\"https://github.com/huang-julien\"\u003e\u003ccode\u003e@​huang-julien\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDamian Głowala (\u003ca href=\"https://github.com/DamianGlowala\"\u003e\u003ccode\u003e@​DamianGlowala\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSébastien Chopin (\u003ca href=\"https://github.com/atinux\"\u003e\u003ccode\u003e@​atinux\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdrien Foulon (\u003ca href=\"https://github.com/Tofandel\"\u003e\u003ccode\u003e@​Tofandel\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.21.5\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.21.5 is the next patch release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/1a8fff351be63bdc639a8b0a2f5a9e74dad240c9\"\u003e\u003ccode\u003e1a8fff3\u003c/code\u003e\u003c/a\u003e v3.21.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/d152a5e069b7bcd90200e5d6e2e2c5bbae50e683\"\u003e\u003ccode\u003ed152a5e\u003c/code\u003e\u003c/a\u003e fix(nuxt): run middleware for page islands (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35092\"\u003e#35092\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/d6caa8e978e8febb90abaff06a56c68ecb87345a\"\u003e\u003ccode\u003ed6caa8e\u003c/code\u003e\u003c/a\u003e fix(nuxt): render component-less parent routes during client-side nav (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35036\"\u003e#35036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/63e5437fffee6fe9035e0ee5575ccdf0dfd0b5ec\"\u003e\u003ccode\u003e63e5437\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (3.x) (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35076\"\u003e#35076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/21c110acf66d61199df0d1beb94ae8f2776c0433\"\u003e\u003ccode\u003e21c110a\u003c/code\u003e\u003c/a\u003e fix(nitro): validate island request hash matches props (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35077\"\u003e#35077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/17b27b08e180e5012dbeb4b50d1bba2bec93092b\"\u003e\u003ccode\u003e17b27b0\u003c/code\u003e\u003c/a\u003e fix(nuxt): encode html-significant characters in external redirect body (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35052\"\u003e#35052\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/c67675c03c8f3c94aa4c3a089eb189780b72a82c\"\u003e\u003ccode\u003ec67675c\u003c/code\u003e\u003c/a\u003e fix(nuxt): mark \u003ccode\u003euseLoadingIndicator\u003c/code\u003e properties as readonly (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/702c02b49c884fbe7fda6318d30a50059ab5e193\"\u003e\u003ccode\u003e702c02b\u003c/code\u003e\u003c/a\u003e fix(nuxt): preserve \u003ccode\u003esetPageLayout\u003c/code\u003e props on same-path navigation (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35055\"\u003e#35055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/aacb18daadd0b5be8a5190940ffccd845e7f5e11\"\u003e\u003ccode\u003eaacb18d\u003c/code\u003e\u003c/a\u003e fix(nuxt): handle errors fetching app manifest (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35050\"\u003e#35050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/db4b5ff1cd2da44cdf1f9496b6f81c7611a90c1d\"\u003e\u003ccode\u003edb4b5ff\u003c/code\u003e\u003c/a\u003e fix(nuxt): prefer our own builder/server deps (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35029\"\u003e#35029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v3.21.6/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nuxt since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-router` from 7.13.0 to 7.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/releases\"\u003ereact-router's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.14.0\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.2\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev7.13.1\u003c/h2\u003e\n\u003cp\u003eSee the changelog for release notes: \u003ca href=\"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\"\u003ehttps://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md\"\u003ereact-router's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.15.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_defaultShouldRevalidate\u003c/code\u003e as \u003ccode\u003edefaultShouldRevalidate\u003c/code\u003e on \u003ccode\u003e\u0026lt;Link\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;Form\u0026gt;\u003c/code\u003e, \u003ccode\u003euseLinkClickHandler\u003c/code\u003e, \u003ccode\u003euseSubmit\u003c/code\u003e, \u003ccode\u003efetcher.submit\u003c/code\u003e, and \u003ccode\u003esetSearchParams\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize the instrumentation APIs. \u003ccode\u003eunstable_instrumentations\u003c/code\u003e is now \u003ccode\u003einstrumentations\u003c/code\u003e and \u003ccode\u003eunstable_pattern\u003c/code\u003e is now \u003ccode\u003epattern\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eunstable_ServerInstrumentation\u003c/code\u003e, \u003ccode\u003eunstable_ClientInstrumentation\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRequestHandlerFunction\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRouterFunction\u003c/code\u003e, \u003ccode\u003eunstable_InstrumentRouteFunction\u003c/code\u003e, and \u003ccode\u003eunstable_InstrumentationHandlerResult\u003c/code\u003e types have had their \u003ccode\u003eunstable_\u003c/code\u003e prefixes removed\u003c/li\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_mask\u003c/code\u003e as \u003ccode\u003emask\u003c/code\u003e on \u003ccode\u003e\u0026lt;Link\u0026gt;\u003c/code\u003e, \u003ccode\u003euseLinkClickHandler\u003c/code\u003e, and \u003ccode\u003euseNavigate\u003c/code\u003e, and rename the corresponding \u003ccode\u003eLocation.unstable_mask\u003c/code\u003e field to \u003ccode\u003eLocation.mask\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize the \u003ccode\u003eunstable_normalizePath\u003c/code\u003e option on \u003ccode\u003estaticHandler.query\u003c/code\u003e and \u003ccode\u003estaticHandler.queryRoute\u003c/code\u003e as \u003ccode\u003enormalizePath\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003efuture.unstable_passThroughRequests\u003c/code\u003e as \u003ccode\u003efuture.v8_passThroughRequests\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eRemove \u003ccode\u003eunstable_subResourceIntegrity\u003c/code\u003e from the runtime \u003ccode\u003eFutureConfig\u003c/code\u003e type; the flag is now controlled by the top-level \u003ccode\u003esubResourceIntegrity\u003c/code\u003e option in \u003ccode\u003ereact-router.config.ts\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_url\u003c/code\u003e as \u003ccode\u003eurl\u003c/code\u003e on \u003ccode\u003eloader\u003c/code\u003e, \u003ccode\u003eaction\u003c/code\u003e, and \u003ccode\u003emiddleware\u003c/code\u003e function args (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eStabilize \u003ccode\u003eunstable_useTransitions\u003c/code\u003e as \u003ccode\u003euseTransitions\u003c/code\u003e on \u003ccode\u003e\u0026lt;BrowserRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HashRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HistoryRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;MemoryRouter\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;Router\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;RouterProvider\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;HydratedRouter\u0026gt;\u003c/code\u003e, and \u003ccode\u003euseLinkClickHandler\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09\"\u003ea993f09\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e⚠️ This is a breaking change if you have already opted into the unstable version - you will need to update your code accordingly\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd \u003ccode\u003enonce\u003c/code\u003e to \u003ccode\u003e\u0026lt;Scripts\u0026gt;\u003c/code\u003e \u003ccode\u003e\u0026lt;link rel=\u0026quot;modulepreload\u0026quot;\u0026gt;\u003c/code\u003e elements (if provided) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix a bug with \u003ccode\u003eunstable_defaultShouldRevalidate={false}\u003c/code\u003e where parent routes that did not export a \u003ccode\u003eshouldRevalidate\u003c/code\u003e function could be incorrectly included in the single fetch call for new child route data (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/15012\"\u003e#15012\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove server-side route matching performance by pre-computing flattened/cached route branches (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14967\"\u003e#14967\u003c/a\u003e) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePerformance benchmarks showed roughly a 10-15% improvement in server-side request handling performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eMark \u003ccode\u003emask\u003c/code\u003e as an optional field in \u003ccode\u003eLocation\u003c/code\u003e for easier mocking in unit tests (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14999\"\u003e#14999\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCache flattened/ranked route branches to optimize server-side route matching (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14967\"\u003e#14967\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove route matching performance in Framework/Data Mode (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/14971\"\u003e#14971\u003c/a\u003e) (\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b\"\u003eaf5d49b\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAvoiding unnecessary calls to \u003ccode\u003ematchRoutes\u003c/code\u003e in data router scenarios\n\u003cul\u003e\n\u003cli\u003eThis includes adding back the optimization that was removed in \u003ccode\u003e7.6.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/remix-run/react-router/pull/13562\"\u003e#13562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe issues that prompted the revert have been addressed by using the available router \u003ccode\u003ematches\u003c/code\u003e but always updating \u003ccode\u003ematch.route\u003c/code\u003e to the latest route in the \u003ccode\u003emanifest\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eLeverage pre-computed pre-computing flattened/cached route branches during client side route matching\u003c/li\u003e\n\u003cli\u003ePerformance benchmarks showed roughly a 15-30% improvement in server-side request handling performance\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.14.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/97c8de79c38f107acd15f74d8295c7bf75894a5d\"\u003e\u003ccode\u003e97c8de7\u003c/code\u003e\u003c/a\u003e Release v7.15.0 (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15018\"\u003e#15018\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/af5d49b71c15fa502cb0918482597284e8cb39c4\"\u003e\u003ccode\u003eaf5d49b\u003c/code\u003e\u003c/a\u003e Update change files again\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/a993f09533fa15bbf01ce734c8c7c116564cf4b7\"\u003e\u003ccode\u003ea993f09\u003c/code\u003e\u003c/a\u003e Update change files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/362635b8fdf020afdf697823ca71ba4c01b40e0d\"\u003e\u003ccode\u003e362635b\u003c/code\u003e\u003c/a\u003e Move chnageset to change file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/e756132b5bcae52b65c504bdac8cec406c746e62\"\u003e\u003ccode\u003ee756132\u003c/code\u003e\u003c/a\u003e chore: format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/49295b5c220b567cff9934ddf0199877663b552c\"\u003e\u003ccode\u003e49295b5\u003c/code\u003e\u003c/a\u003e Stabilize APIs (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14999\"\u003e#14999\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/5f61543c31c442271162b31ee9fe1499e170c68c\"\u003e\u003ccode\u003e5f61543\u003c/code\u003e\u003c/a\u003e Client-side route matching optimizations (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14971\"\u003e#14971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/67518cb61054f1b3eede95dde95480aca962626d\"\u003e\u003ccode\u003e67518cb\u003c/code\u003e\u003c/a\u003e Remove unnecessary hasShouldRevalidate condition for opting out (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15012\"\u003e#15012\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/6f18edde6b5eac5f7028bfde885bbb8031025480\"\u003e\u003ccode\u003e6f18edd\u003c/code\u003e\u003c/a\u003e Add nonce to scripts \u003ccode\u003emodulepreload\u003c/code\u003e (\u003ca href=\"https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15002\"\u003e#15002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/remix-run/react-router/commit/10a968671d94a1147d78e766cffae33c6d151162\"\u003e\u003ccode\u003e10a9686\u003c/code\u003e\u003c/a\u003e Migrate changeset to change file\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/remix-run/react-router/commits/react-router@7.15.0/packages/react-router\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.2 to 1.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFetch adapter now enforces \u003ccode\u003emaxBodyLength\u003c/code\u003e and \u003ccode\u003emaxContentLength\u003c/code\u003e.\u003c/strong\u003e These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy requests now preserve user-supplied \u003ccode\u003eHost\u003c/code\u003e headers.\u003c/strong\u003e Previously, the proxy path could overwrite a custom \u003ccode\u003eHost\u003c/code\u003e. Virtual-host-style routing through a proxy will now behave correctly. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBasic auth credentials embedded in URLs are now URL-decoded.\u003c/strong\u003e If you have percent-encoded credentials in a URL (e.g. \u003ccode\u003ehttps://user:p%40ss@host\u003c/code\u003e), the decoded value is what now goes on the wire. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eparseProtocol\u003c/code\u003e now strictly requires a colon in the protocol separator.\u003c/strong\u003e Strings that loosely parsed as protocols before may no longer match. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecated \u003ccode\u003eunescape()\u003c/code\u003e replaced with modern UTF-8 encoding.\u003c/strong\u003e Non-ASCII URL handling is now spec-correct; consumers depending on legacy \u003ccode\u003eunescape()\u003c/code\u003e quirks may see different output bytes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003etransformRequest\u003c/code\u003e input typing change was reverted.\u003c/strong\u003e The typing change introduced in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e was reverted in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e after follow-up review — net behavior is unchanged from 1.15.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eQUERY HTTP Method:\u003c/strong\u003e Added support for the QUERY HTTP method across adapters and type definitions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10802\"\u003e#10802\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eECONNREFUSED Error Constant:\u003c/strong\u003e Exposed \u003ccode\u003eECONNREFUSED\u003c/code\u003e as a constant on \u003ccode\u003eAxiosError\u003c/code\u003e so callers can match connection-refused failures without comparing string literals (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/6485\"\u003e#6485\u003c/a\u003e). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncode Helper Export:\u003c/strong\u003e Exported the internal \u003ccode\u003eencode\u003c/code\u003e helper from \u003ccode\u003ebuildURL\u003c/code\u003e so userland param serializers can reuse the same encoding logic that axios uses internally. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6897\"\u003e#6897\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Redirects \u0026amp; Headers:\u003c/strong\u003e Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing \u003ccode\u003erequestDetails\u003c/code\u003e argument on \u003ccode\u003ebeforeRedirect\u003c/code\u003e, preserved user-supplied \u003ccode\u003eHost\u003c/code\u003e headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10794\"\u003e#10794\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10800\"\u003e#10800\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6241\"\u003e#6241\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Streams \u0026amp; Timeouts:\u003c/strong\u003e Preserved the partial response object on \u003ccode\u003eAxiosError\u003c/code\u003e when a stream is aborted after headers arrive, honoured the \u003ccode\u003etimeout\u003c/code\u003e option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and \u003ccode\u003emaxRedirects: 0\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10708\"\u003e#10708\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10819\"\u003e#10819\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7149\"\u003e#7149\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Enforced \u003ccode\u003emaxBodyLength\u003c/code\u003e / \u003ccode\u003emaxContentLength\u003c/code\u003e in the fetch adapter, set the \u003ccode\u003eUser-Agent\u003c/code\u003e header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a \u003ccode\u003eTypeError\u003c/code\u003e in restricted environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10772\"\u003e#10772\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10806\"\u003e#10806\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7260\"\u003e#7260\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Adapter:\u003c/strong\u003e Unsubscribed the \u003ccode\u003ecancelToken\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eError Handling:\u003c/strong\u003e Attached the parsed response to \u003ccode\u003eAxiosError\u003c/code\u003e when \u003ccode\u003eJSON.parse\u003c/code\u003e fails inside \u003ccode\u003edispatchRequest\u003c/code\u003e, prevented \u003ccode\u003esettle\u003c/code\u003e from emitting \u003ccode\u003eundefined\u003c/code\u003e error codes, and tightened the \u003ccode\u003eparseProtocol\u003c/code\u003e regex to require a colon in the protocol separator. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10724\"\u003e#10724\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7276\"\u003e#7276\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTypes \u0026amp; Exports:\u003c/strong\u003e Aligned the CommonJS \u003ccode\u003eCancelToken\u003c/code\u003e typings with the ESM build, fixed a compiler error caused by \u003ccode\u003eRawAxiosHeaders\u003c/code\u003e, and re-exported \u003ccode\u003ecreate\u003c/code\u003e from the package index. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7414\"\u003e#7414\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6389\"\u003e#6389\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6460\"\u003e#6460\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUTF-8 Encoding:\u003c/strong\u003e Replaced the deprecated \u003ccode\u003eunescape()\u003c/code\u003e call with a modern UTF-8 encoding implementation. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMisc Cleanup:\u003c/strong\u003e Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10833\"\u003e#10833\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRefactor — ES6 Modernisation:\u003c/strong\u003e Modernised the \u003ccode\u003eutils\u003c/code\u003e module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Hardened the HTTP test server lifecycle to fix flaky \u003ccode\u003eFormData\u003c/code\u003e EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10820\"\u003e#10820\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10791\"\u003e#10791\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10796\"\u003e#10796\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Documented \u003ccode\u003eparamsSerializer.encode\u003c/code\u003e for strict RFC 3986 query encoding, updated the \u003ccode\u003eparseReviver\u003c/code\u003e TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10821\"\u003e#10821\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10782\"\u003e#10782\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10759\"\u003e#10759\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10804\"\u003e#10804\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eReverted:\u003c/strong\u003e Reverted the \u003ccode\u003etransformRequest\u003c/code\u003e input typing change from \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e after follow-up review. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eactions/setup-node\u003c/code\u003e, the \u003ccode\u003egithub-actions\u003c/code\u003e group, and \u003ccode\u003epostcss\u003c/code\u003e (in \u003ccode\u003e/docs\u003c/code\u003e) to their latest versions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10785\"\u003e#10785\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10813\"\u003e#10813\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10814\"\u003e#10814\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRelease:\u003c/strong\u003e Updated changelog and packages, and prepared the 1.16.0 release. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10790\"\u003e#10790\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10834\"\u003e#10834\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/singhankit001\"\u003e\u003ccode\u003e@​singhankit001\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/iruizsalinas\"\u003e\u003ccode\u003e@​iruizsalinas\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/MarcosNocetti\"\u003e\u003ccode\u003e@​MarcosNocetti\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/deepview-autofix\"\u003e\u003ccode\u003e@​deepview-autofix\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFetch adapter now enforces \u003ccode\u003emaxBodyLength\u003c/code\u003e and \u003ccode\u003emaxContentLength\u003c/code\u003e.\u003c/strong\u003e These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy requests now preserve user-supplied \u003ccode\u003eHost\u003c/code\u003e headers.\u003c/strong\u003e Previously, the proxy path could overwrite a custom \u003ccode\u003eHost\u003c/code\u003e. Virtual-host-style routing through a proxy will now behave correctly. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBasic auth credentials embedded in URLs are now URL-decoded.\u003c/strong\u003e If you have percent-encoded credentials in a URL (e.g. \u003ccode\u003ehttps://user:p%40ss@host\u003c/code\u003e), the decoded value is what now goes on the wire. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003eparseProtocol\u003c/code\u003e now strictly requires a colon in the protocol separator.\u003c/strong\u003e Strings that loosely parsed as protocols before may no longer match. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecated \u003ccode\u003eunescape()\u003c/code\u003e replaced with modern UTF-8 encoding.\u003c/strong\u003e Non-ASCII URL handling is now spec-correct; consumers depending on legacy \u003ccode\u003eunescape()\u003c/code\u003e quirks may see different output bytes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003etransformRequest\u003c/code\u003e input typing change was reverted.\u003c/strong\u003e The typing change introduced in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e was reverted in \u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e after follow-up review — net behavior is unchanged from 1.15.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10745\"\u003e#10745\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10810\"\u003e#10810\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eQUERY HTTP Method:\u003c/strong\u003e Added support for the QUERY HTTP method across adapters and type definitions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10802\"\u003e#10802\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eECONNREFUSED Error Constant:\u003c/strong\u003e Exposed \u003ccode\u003eECONNREFUSED\u003c/code\u003e as a constant on \u003ccode\u003eAxiosError\u003c/code\u003e so callers can match connection-refused failures without comparing string literals (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/6485\"\u003e#6485\u003c/a\u003e). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10680\"\u003e#10680\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncode Helper Export:\u003c/strong\u003e Exported the internal \u003ccode\u003eencode\u003c/code\u003e helper from \u003ccode\u003ebuildURL\u003c/code\u003e so userland param serializers can reuse the same encoding logic that axios uses internally. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6897\"\u003e#6897\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Redirects \u0026amp; Headers:\u003c/strong\u003e Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing \u003ccode\u003erequestDetails\u003c/code\u003e argument on \u003ccode\u003ebeforeRedirect\u003c/code\u003e, preserved user-supplied \u003ccode\u003eHost\u003c/code\u003e headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10794\"\u003e#10794\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10800\"\u003e#10800\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6241\"\u003e#6241\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10822\"\u003e#10822\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10825\"\u003e#10825\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP Adapter — Streams \u0026amp; Timeouts:\u003c/strong\u003e Preserved the partial response object on \u003ccode\u003eAxiosError\u003c/code\u003e when a stream is aborted after headers arrive, honoured the \u003ccode\u003etimeout\u003c/code\u003e option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and \u003ccode\u003emaxRedirects: 0\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10708\"\u003e#10708\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10819\"\u003e#10819\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7149\"\u003e#7149\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Enforced \u003ccode\u003emaxBodyLength\u003c/code\u003e / \u003ccode\u003emaxContentLength\u003c/code\u003e in the fetch adapter, set the \u003ccode\u003eUser-Agent\u003c/code\u003e header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a \u003ccode\u003eTypeError\u003c/code\u003e in restricted environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10795\"\u003e#10795\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10772\"\u003e#10772\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10806\"\u003e#10806\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7260\"\u003e#7260\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Adapter:\u003c/strong\u003e Unsubscribed the \u003ccode\u003ecancelToken\u003c/code\u003e and \u003ccode\u003eAbortSignal\u003c/code\u003e listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10787\"\u003e#10787\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eError Handling:\u003c/strong\u003e Attached the parsed response to \u003ccode\u003eAxiosError\u003c/code\u003e when \u003ccode\u003eJSON.parse\u003c/code\u003e fails inside \u003ccode\u003edispatchRequest\u003c/code\u003e, prevented \u003ccode\u003esettle\u003c/code\u003e from emitting \u003ccode\u003eundefined\u003c/code\u003e error codes, and tightened the \u003ccode\u003eparseProtocol\u003c/code\u003e regex to require a colon in the protocol separator. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10724\"\u003e#10724\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7276\"\u003e#7276\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10729\"\u003e#10729\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTypes \u0026amp; Exports:\u003c/strong\u003e Aligned the CommonJS \u003ccode\u003eCancelToken\u003c/code\u003e typings with the ESM build, fixed a compiler error caused by \u003ccode\u003eRawAxiosHeaders\u003c/code\u003e, and re-exported \u003ccode\u003ecreate\u003c/code\u003e from the package index. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7414\"\u003e#7414\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6389\"\u003e#6389\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/6460\"\u003e#6460\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUTF-8 Encoding:\u003c/strong\u003e Replaced the deprecated \u003ccode\u003eunescape()\u003c/code\u003e call with a modern UTF-8 encoding implementation. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7378\"\u003e#7378\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMisc Cleanup:\u003c/strong\u003e Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10833\"\u003e#10833\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRefactor — ES6 Modernisation:\u003c/strong\u003e Modernised the \u003ccode\u003eutils\u003c/code\u003e module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10588\"\u003e#10588\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7419\"\u003e#7419\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Hardened the HTTP test server lifecycle to fix flaky \u003ccode\u003eFormData\u003c/code\u003e EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10820\"\u003e#10820\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10791\"\u003e#10791\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10796\"\u003e#10796\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Documented \u003ccode\u003eparamsSerializer.encode\u003c/code\u003e for strict RFC 3986 query encoding, updated the \u003ccode\u003eparseReviver\u003c/code\u003e TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10821\"\u003e#10821\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10782\"\u003e#10782\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10759\"\u003e#10759\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10804\"\u003e#10804\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eReverted:\u003c/strong\u003e Reverted the \u003ccode\u003etransformRequest\u003c/code\u003e input typing change from \u003ca href=\"https://redirect.github.com...\n\n_Description has been truncated_","html_url":"https://github.com/SherfeyInv/sentry-javascript/pull/259","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SherfeyInv%2Fsentry-javascript/issues/259","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/259/packages"}},{"old_version":"6.0.0","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T01:07:24.000Z","version_change":"6.0.0 → 6.0.2","issue":{"uuid":"4528632383","node_id":"PR_kwDOPNWXvM7fofot","number":100,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 24 directories with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T01:15:43.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T01:07:24.000Z","updated_at":"2026-05-27T01:15:46.000Z","time_to_close":499,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":9,"packages":[{"name":"js-cookie","old_version":"3.0.5","new_version":"3.0.7","repository_url":"https://github.com/js-cookie/js-cookie"},{"name":"next","old_version":"14.2.25","new_version":"15.5.18","repository_url":"https://github.com/vercel/next.js"},{"name":"protobufjs","old_version":"7.4.0","new_version":"7.5.8","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"uuid","old_version":"9.0.1","new_version":"14.0.0","repository_url":"https://github.com/uuidjs/uuid"},{"name":"ws","old_version":"8.17.1","new_version":"8.20.1","repository_url":"https://github.com/websockets/ws"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.16.1","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.7` |\n| [next](https://github.com/vercel/next.js) | `14.2.25` | `15.5.18` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.5.8` |\n| [uuid](https://github.com/uuidjs/uuid) | `9.0.1` | `14.0.0` |\n| [ws](https://github.com/websockets/ws) | `8.17.1` | `8.20.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.2` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.16.1` |\n\nBumps the npm_and_yarn group with 1 update in the /bifrost directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 3 updates in the /docs directory: [ws](https://github.com/websockets/ws), [axios](https://github.com/axios/axios) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 2 updates in the /examples/anthropic directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 3 updates in the /examples/asyncExample directory: [ws](https://github.com/websockets/ws), [axios](https://github.com/axios/axios) and [@tootallnate/once](https://github.com/TooTallNate/once).\nBumps the npm_and_yarn group with 1 update in the /examples/azure_sdk directory: [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 1 update in the /examples/chat_session_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/logBuilder directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/logBuilderSingleRequest directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 2 updates in the /examples/openai_to_anthropic directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 1 update in the /examples/prompt-quick-test directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/qawolf directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [uuid](https://github.com/uuidjs/uuid) and [ws](https://github.com/websockets/ws).\nBumps the npm_and_yarn group with 1 update in the /examples/score_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 1 update in the /examples/session_example directory: [uuid](https://github.com/uuidjs/uuid).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [uuid](https://github.com/uuidjs/uuid), [ws](https://github.com/websockets/ws) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 1 update in the /examples/vercel-ai-sdk-example directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /examples/vertex directory: [uuid](https://github.com/uuidjs/uuid) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 2 updates in the /helicone-cron directory: [ws](https://github.com/websockets/ws) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `13.5.7` | `15.5.18` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.6.1` |\n| [ws](https://github.com/websockets/ws) | `8.18.0` | `8.21.0` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.16.1` |\n| [qs](https://github.com/ljharb/qs) | `6.11.2` | `removed` |\n| [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `2.0.1` |\n\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript/helpers directory: [uuid](https://github.com/uuidjs/uuid) and [qs](https://github.com/ljharb/qs).\nBumps the npm_and_yarn group with 3 updates in the /valhalla/jawn directory: [protobufjs](https://github.com/protobufjs/protobuf.js), [uuid](https://github.com/uuidjs/uuid) and [ws](https://github.com/websockets/ws).\nBumps the npm_and_yarn group with 1 update in the /web directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 2 updates in the /worker directory: [ws](https://github.com/websockets/ws) and [axios](https://github.com/axios/axios).\n\nUpdates `js-cookie` from 3.0.5 to 3.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/js-cookie/js-cookie/releases\"\u003ejs-cookie's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent cookie attribute injection: CVE-2026-46625 (eb3c40e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePartitioned\u003c/code\u003e attribute to readme (b994768)\u003c/li\u003e\n\u003cli\u003ePublish to npm registry via trusted publisher exclusively (4dc71be)\u003c/li\u003e\n\u003cli\u003eEnsure consistent behaviour for \u003ccode\u003eget('name')\u003c/code\u003e + \u003ccode\u003eget()\u003c/code\u003e (1953d30)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/17bacba0171dd022728d8fdeba3203c60791bf58\"\u003e\u003ccode\u003e17bacba\u003c/code\u003e\u003c/a\u003e Craft v3.0.7 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/adb823cb7e95ead47f3af4d4951e589acbde2077\"\u003e\u003ccode\u003eadb823c\u003c/code\u003e\u003c/a\u003e Fix release workflow halting at \u003ccode\u003egit tag\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/5f9e759b07d2752e8407a3a43fb5f879bf384c5e\"\u003e\u003ccode\u003e5f9e759\u003c/code\u003e\u003c/a\u003e May remove Git user config from release workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/6ac921184c7b3b7d9431c88707f56521acd72ab4\"\u003e\u003ccode\u003e6ac9211\u003c/code\u003e\u003c/a\u003e Fix release workflow not able to push commit + tag\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/2278bc55e1804c4c2d9bd2110a9b449949a52751\"\u003e\u003ccode\u003e2278bc5\u003c/code\u003e\u003c/a\u003e Fix missing package version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020\"\u003e\u003ccode\u003eeb3c40e\u003c/code\u003e\u003c/a\u003e Prevent cookie attribute injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/f6f157f430d707d2ffd0c9c9138227a6cea564e5\"\u003e\u003ccode\u003ef6f157f\u003c/code\u003e\u003c/a\u003e Bump globals from 17.5.0 to 17.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/f409d022da50a0c6fa8724f087fbc50fab9a9533\"\u003e\u003ccode\u003ef409d02\u003c/code\u003e\u003c/a\u003e Bump eslint from 10.2.0 to 10.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/a686883c03a754c04546cfc1653911a70a640b40\"\u003e\u003ccode\u003ea686883\u003c/code\u003e\u003c/a\u003e Bump protobufjs in the npm_and_yarn group across 1 directory\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/js-cookie/js-cookie/commit/c6112d2d4f2881a12aaf89d9e2996ef6870eb6d0\"\u003e\u003ccode\u003ec6112d2\u003c/code\u003e\u003c/a\u003e Bump \u003ccode\u003e@​protobufjs/utf8\u003c/code\u003e in the npm_and_yarn group across 1 directory\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/js-cookie/js-cookie/compare/v3.0.5...v3.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for js-cookie since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.25 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `protobufjs` from 7.4.0 to 7.5.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protobufjs/protobuf.js/releases\"\u003eprotobufjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eprotobufjs: v7.5.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.7...protobufjs-v7.5.8\"\u003e7.5.8\u003c/a\u003e (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e54b593f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.6...protobufjs-v7.5.7\"\u003e7.5.7\u003c/a\u003e (2026-05-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRestore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003ecc7d595\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.6\"\u003e7.5.6\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e75392ea\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.5.5\u003c/h2\u003e\n\u003cp\u003eThis release backports two reported security issues to 7.x branch.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efix: do not allow setting \u003ccode\u003e__proto__\u003c/code\u003e in Message constructor (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2126\"\u003e#2126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: filter invalid characters from the type name (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2127\"\u003e#2127\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.4...protobufjs-v7.5.5\"\u003ehttps://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.4...protobufjs-v7.5.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eprotobufjs: v7.5.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.3...protobufjs-v7.5.4\"\u003e7.5.4\u003c/a\u003e (2025-08-15)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003einvalid syntax in descriptor.proto (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2092\"\u003e#2092\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/5a3769a465fead089a533ad55c21d069299df760\"\u003e5a3769a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.2...protobufjs-v7.5.3\"\u003e7.5.3\u003c/a\u003e (2025-05-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edescriptor extensions handling post-editions (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2075\"\u003e#2075\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6e255d4ad6982cc857f26e1731c2cedcf5796f68\"\u003e6e255d4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eprotobufjs: v7.5.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.1...protobufjs-v7.5.2\"\u003e7.5.2\u003c/a\u003e (2025-05-14)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md\"\u003eprotobufjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.7...protobufjs-v7.5.8\"\u003e7.5.8\u003c/a\u003e (2026-05-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e54b593f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.6...protobufjs-v7.5.7\"\u003e7.5.7\u003c/a\u003e (2026-05-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRestore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003ecc7d595\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.6\"\u003e7.5.6\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e75392ea\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.3...protobufjs-v7.5.4\"\u003e7.5.4\u003c/a\u003e (2025-08-15)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003einvalid syntax in descriptor.proto (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2092\"\u003e#2092\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/5a3769a465fead089a533ad55c21d069299df760\"\u003e5a3769a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.2...protobufjs-v7.5.3\"\u003e7.5.3\u003c/a\u003e (2025-05-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edescriptor extensions handling post-editions (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2075\"\u003e#2075\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6e255d4ad6982cc857f26e1731c2cedcf5796f68\"\u003e6e255d4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.1...protobufjs-v7.5.2\"\u003e7.5.2\u003c/a\u003e (2025-05-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eensure that types are always resolved (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2068\"\u003e#2068\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/4b51cb2b8450b77f9f5de1c562e7fae93b19d040\"\u003e4b51cb2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.0...protobufjs-v7.5.1\"\u003e7.5.1\u003c/a\u003e (2025-05-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eoptimize regressions from editions implementations (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2066\"\u003e#2066\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/6406d4c18afae309fc7b5f4a24d9674d85da180b\"\u003e6406d4c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereserved field inside group blocks fail parsing (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2058\"\u003e#2058\u003c/a\u003e) (\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/56782bff0c4b5132806eb1a6bc4d08f930c4aaad\"\u003e56782bf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/d7035f9b7f06210ea343cab1f2f1cc18ee5cc1d6\"\u003e\u003ccode\u003ed7035f9\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2248\"\u003e#2248\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/54b593ffd960f7fe4b0c448a12542c3de0a0cf26\"\u003e\u003ccode\u003e54b593f\u003c/code\u003e\u003c/a\u003e fix: Backport parser hardening to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2245\"\u003e#2245\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/e88fcea1635f79c414e8a070e164d38ea99e104a\"\u003e\u003ccode\u003ee88fcea\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2239\"\u003e#2239\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/cc7d59559d4e8c533a35218310c67f4a5dda54f5\"\u003e\u003ccode\u003ecc7d595\u003c/code\u003e\u003c/a\u003e fix: Restore first-match namespace lookup (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2236\"\u003e#2236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/3abc9b54d67a7102785c6dfd8bf6610f545d445b\"\u003e\u003ccode\u003e3abc9b5\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/a0bf2dfdd8a75aa62ce5a1ff47a52b9b8f1ea793\"\u003e\u003ccode\u003ea0bf2df\u003c/code\u003e\u003c/a\u003e fix: Update CLI peer dependency (7.x) (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2189\"\u003e#2189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/2189e5beeca6a70e4c104dfdb9fb8200bc5f81fe\"\u003e\u003ccode\u003e2189e5b\u003c/code\u003e\u003c/a\u003e chore: release protobufjs-v7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2174\"\u003e#2174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/75392ea1b78bdc4faba027b5db44ad7c50e9c454\"\u003e\u003ccode\u003e75392ea\u003c/code\u003e\u003c/a\u003e fix: Backport input hardening and CLI fixes to 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2173\"\u003e#2173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/8af8d7c0e9800879625f7d0d4a7fb51beb4410cd\"\u003e\u003ccode\u003e8af8d7c\u003c/code\u003e\u003c/a\u003e chore(ci): Fix 7.x release please configuration (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/protobufjs/protobuf.js/commit/e92ca42244ad67203b48d836290062dae037ead6\"\u003e\u003ccode\u003ee92ca42\u003c/code\u003e\u003c/a\u003e chore(ci): Enable release-please for 7.x (\u003ca href=\"https://redirect.github.com/protobufjs/protobuf.js/issues/2166\"\u003e#2166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.4.0...protobufjs-v7.5.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for protobufjs since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 9.0.1 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v12.0.1\"\u003e12.0.1\u003c/a\u003e (2026-04-29)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.1.0...v12.0.0\"\u003e12.0.0\u003c/a\u003e (2025-09-05)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd node@24 to ci matrix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/879\"\u003e#879\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/42b6178aa21a593257f0a72abacd220f0b7b8a92\"\u003e42b6178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f38cf10366ab074f9328ae2021eea04d5f2e530\"\u003e0f38cf1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ae786e27265f50bcf7cead196c29f1869297c42f\"\u003eae786e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/c7ee40598ed78584d81ab78dffded9fe5ff20b01\"\u003ec7ee405\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove v4() performance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/894\"\u003e#894\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/5fd974c12718c8848035650b69b8948f12ace197\"\u003e5fd974c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore node: prefix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/889\"\u003e#889\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/e1f42a354593093ba0479f0b4047dae82d28c507\"\u003ee1f42a3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0\"\u003e11.1.0\u003c/a\u003e (2025-02-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/7c1ea087a8149b57380fc8bb7f68c3a215cb6e4b\"\u003e\u003ccode\u003e7c1ea08\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.0 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34\"\u003e\u003ccode\u003e3d2c5b0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003e\u003ccode\u003ef2c235f\u003c/code\u003e\u003c/a\u003e fix!: expect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/529ef0899f5dd503d2ee90d690585d63d78bc212\"\u003e\u003ccode\u003e529ef08\u003c/code\u003e\u003c/a\u003e chore: upgrade TypeScript and fixup types (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/086fd7976f11433edf9ac80be876b3ad243fe087\"\u003e\u003ccode\u003e086fd79\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/933\"\u003e#933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003e\u003ccode\u003edc4ddb8\u003c/code\u003e\u003c/a\u003e feat!: drop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f1f9c9c9cedbae5a1d363d5406c5dfbabe81404\"\u003e\u003ccode\u003e0f1f9c9\u003c/code\u003e\u003c/a\u003e chore: switch to Biome for parsing and linting (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/e2879e64bf125add903c1eff6e0860542c605013\"\u003e\u003ccode\u003ee2879e6\u003c/code\u003e\u003c/a\u003e chore: use maintained version of npm-run-all (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003e\u003ccode\u003effa3138\u003c/code\u003e\u003c/a\u003e fix: Use GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0423d49df2dc8efc300c804731d25f4d7e0fccc4\"\u003e\u003ccode\u003e0423d49\u003c/code\u003e\u003c/a\u003e docs: remove obsolete v1 option notes (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/915\"\u003e#915\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v9.0.1...v14.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ws` from 8.17.1 to 8.20.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/websockets/ws/releases\"\u003ews's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.20.1\u003c/h2\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an uninitialized memory disclosure issue in \u003ccode\u003ewebsocket.close()\u003c/code\u003e\n(c0327ec1).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eProviding a \u003ccode\u003eTypedArray\u003c/code\u003e (e.g. \u003ccode\u003eFloat32Array\u003c/code\u003e) as the \u003ccode\u003ereason\u003c/code\u003e argument for\n\u003ccode\u003ewebsocket.close()\u003c/code\u003e, rather than the supported string or \u003ccode\u003eBuffer\u003c/code\u003e types, caused\nuninitialized memory to be disclosed to the remote peer.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { deepStrictEqual } from 'node:assert';\r\nimport { WebSocket, WebSocketServer } from 'ws';\r\n\u003cp\u003econst wss = new WebSocketServer(\n{ port: 0, skipUTF8Validation: true },\nfunction () {\nconst { port } = wss.address();\nconst ws = new WebSocket(\u003ccode\u003ews://localhost:${port}\u003c/code\u003e, {\nskipUTF8Validation: true\n});\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003ews.on('close', function (code, reason) {\r\n  deepStrictEqual(reason, Buffer.alloc(80));\r\n});\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e}\n);\u003c/p\u003e\n\u003cp\u003ewss.on('connection', function (ws) {\nws.close(1000, new Float32Array(20));\n});\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe issue was privately reported by \u003ca href=\"https://github.com/ChALkeR\"\u003eNikita Skovoroda\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e8.20.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded exports for the \u003ccode\u003ePerMessageDeflate\u003c/code\u003e class and utilities for the\n\u003ccode\u003eSec-WebSocket-Extensions\u003c/code\u003e and \u003ccode\u003eSec-WebSocket-Protocol\u003c/code\u003e headers (d3503c1f).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.19.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdded the \u003ccode\u003ecloseTimeout\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/websockets/ws/issues/2308\"\u003e#2308\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eHandled a forthcoming breaking change in Node.js core (19984854).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/5d9b316230ea931532a6671cc450f18c11edd02f\"\u003e\u003ccode\u003e5d9b316\u003c/code\u003e\u003c/a\u003e [dist] 8.20.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086\"\u003e\u003ccode\u003ec0327ec\u003c/code\u003e\u003c/a\u003e [security] Fix uninitialized memory disclosure in \u003ccode\u003ewebsocket.close()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/ce2a3d62437995a47e6056d485a33d21b6a8f867\"\u003e\u003ccode\u003ece2a3d6\u003c/code\u003e\u003c/a\u003e [ci] Test on node 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/58e45b872bb0f35a3edd553c27e105300a4f5bd0\"\u003e\u003ccode\u003e58e45b8\u003c/code\u003e\u003c/a\u003e [ci] Do not test on node 25\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/5f26c245231a4b018479a9269e8c3da4773fe42f\"\u003e\u003ccode\u003e5f26c24\u003c/code\u003e\u003c/a\u003e [ci] Run the lint step on node 24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/843925544e2f4cffe445e0179947f56d6c5b608f\"\u003e\u003ccode\u003e8439255\u003c/code\u003e\u003c/a\u003e [dist] 8.20.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/d3503c1fd36a310985108f62b343bae18346ab67\"\u003e\u003ccode\u003ed3503c1\u003c/code\u003e\u003c/a\u003e [minor] Export the \u003ccode\u003ePerMessageDeflate\u003c/code\u003e class and header utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/3ee5349a0b1580f6e1f347b59ec3371011bd8481\"\u003e\u003ccode\u003e3ee5349\u003c/code\u003e\u003c/a\u003e [api] Convert the \u003ccode\u003eisServer\u003c/code\u003e and \u003ccode\u003emaxPayload\u003c/code\u003e parameters to options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/91707b470ebd803aaa3fd1e896217740f39267d4\"\u003e\u003ccode\u003e91707b4\u003c/code\u003e\u003c/a\u003e [doc] Add missing space\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/commit/8b553192268810a83253e2a4a39ac16768e75bb3\"\u003e\u003ccode\u003e8b55319\u003c/code\u003e\u003c/a\u003e [pkg] Update eslint to version 10.0.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/websockets/ws/compare/8.17.1...8.20.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.1 — May 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release ships a defence-in-depth fix for prototype pollution in \u003ccode\u003eformDataToJSON\u003c/code\u003e, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePrototype Pollution Defence-in-Depth:\u003c/strong\u003e Hardened \u003ccode\u003eformDataToJSON\u003c/code\u003e against already-polluted \u003ccode\u003eObject.prototype\u003c/code\u003e by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Cleartext Leak:\u003c/strong\u003e Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCI Cache Removal:\u003c/strong\u003e Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eData URI Parsing:\u003c/strong\u003e Updated the \u003ccode\u003efromDataURI\u003c/code\u003e regex to match RFC 2397 more strictly, fixing edge cases in \u003ccode\u003edata:\u003c/code\u003e URL handling. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUnicode Headers:\u003c/strong\u003e Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10850\"\u003e#10850\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Upload Progress:\u003c/strong\u003e Guarded against malformed \u003ccode\u003eProgressEvent\u003c/code\u003e payloads emitted by some environments during XHR upload, preventing crashes when \u003ccode\u003eloaded\u003c/code\u003e / \u003ccode\u003etotal\u003c/code\u003e are missing or invalid. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWebpack 4 Fetch Adapter:\u003c/strong\u003e Fixed an \u0026quot;unexpected token\u0026quot; error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10864\"\u003e#10864\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eType Definitions:\u003c/strong\u003e Made \u003ccode\u003eparseReviver\u003c/code\u003e \u003ccode\u003econtext.source\u003c/code\u003e optional in the type definitions to align with the ES2023 specification. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10837\"\u003e#10837\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURL Object Support Reverted:\u003c/strong\u003e Reverted the change that allowed passing a \u003ccode\u003eURL\u003c/code\u003e object as \u003ccode\u003econfig.url\u003c/code\u003e (originally \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCycle Detection Refactor:\u003c/strong\u003e Replaced the array-based cycle tracker in \u003ccode\u003etoJSONObject\u003c/code\u003e with a \u003ccode\u003eWeakSet\u003c/code\u003e, improving performance and memory behaviour on large nested structures. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10832\"\u003e#10832\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecomposeSignals Cleanup:\u003c/strong\u003e Refactored \u003ccode\u003ecomposeSignals\u003c/code\u003e to use a clearer early-return structure, simplifying the cancellation/abort composition path. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10844\"\u003e#10844\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAI Readiness \u0026amp; Repo Docs:\u003c/strong\u003e Added \u003ccode\u003eAGENTS.md\u003c/code\u003e and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10835\"\u003e#10835\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10841\"\u003e#10841\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs Improvements:\u003c/strong\u003e Clarified the GET request example, fixed the interceptor \u003ccode\u003eeject\u003c/code\u003e example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSponsorship Tooling:\u003c/strong\u003e Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10843\"\u003e#10843\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10859\"\u003e#10859\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@commitlint/cli\u003c/code\u003e from 20.5.0 to 20.5.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10846\"\u003e#10846\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/hpinmetaverse\"\u003e\u003ccode\u003e@​hpinmetaverse\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/tommyhgunz14\"\u003e\u003ccode\u003e@​tommyhgunz14\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/divyanshuraj1095\"\u003e\u003ccode\u003e@​divyanshuraj1095\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/sagodi97\"\u003e\u003ccode\u003e@​sagodi97\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/rkdfx\"\u003e\u003ccode\u003e@​rkdfx\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Liuwei1125\"\u003e\u003ccode\u003e@​Liuwei1125\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.16.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.16.1 — May 13, 2026\u003c/h2\u003e\n\u003cp\u003eThis release ships a defence-in-depth fix for prototype pollution in \u003ccode\u003eformDataToJSON\u003c/code\u003e, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePrototype Pollution Defence-in-Depth:\u003c/strong\u003e Hardened \u003ccode\u003eformDataToJSON\u003c/code\u003e against already-polluted \u003ccode\u003eObject.prototype\u003c/code\u003e by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Cleartext Leak:\u003c/strong\u003e Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCI Cache Removal:\u003c/strong\u003e Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eData URI Parsing:\u003c/strong\u003e Updated the \u003ccode\u003efromDataURI\u003c/code\u003e regex to match RFC 2397 more strictly, fixing edge cases in \u003ccode\u003edata:\u003c/code\u003e URL handling. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eUnicode Headers:\u003c/strong\u003e Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10850\"\u003e#10850\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eXHR Upload Progress:\u003c/strong\u003e Guarded against malformed \u003ccode\u003eProgressEvent\u003c/code\u003e payloads emitted by some environments during XHR upload, preventing crashes when \u003ccode\u003eloaded\u003c/code\u003e / \u003ccode\u003etotal\u003c/code\u003e are missing or invalid. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWebpack 4 Fetch Adapter:\u003c/strong\u003e Fixed an \u0026quot;unexpected token\u0026quot; error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10864\"\u003e#10864\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eType Definitions:\u003c/strong\u003e Made \u003ccode\u003eparseReviver\u003c/code\u003e \u003ccode\u003econtext.source\u003c/code\u003e optional in the type definitions to align with the ES2023 specification. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10837\"\u003e#10837\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURL Object Support Reverted:\u003c/strong\u003e Reverted the change that allowed passing a \u003ccode\u003eURL\u003c/code\u003e object as \u003ccode\u003econfig.url\u003c/code\u003e (originally \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCycle Detection Refactor:\u003c/strong\u003e Replaced the array-based cycle tracker in \u003ccode\u003etoJSONObject\u003c/code\u003e with a \u003ccode\u003eWeakSet\u003c/code\u003e, improving performance and memory behaviour on large nested structures. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10832\"\u003e#10832\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecomposeSignals Cleanup:\u003c/strong\u003e Refactored \u003ccode\u003ecomposeSignals\u003c/code\u003e to use a clearer early-return structure, simplifying the cancellation/abort composition path. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10844\"\u003e#10844\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAI Readiness \u0026amp; Repo Docs:\u003c/strong\u003e Added \u003ccode\u003eAGENTS.md\u003c/code\u003e and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10835\"\u003e#10835\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10841\"\u003e#10841\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocs Improvements:\u003c/strong\u003e Clarified the GET request example, fixed the interceptor \u003ccode\u003eeject\u003c/code\u003e example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSponsorship Tooling:\u003c/strong\u003e Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10843\"\u003e#10843\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10859\"\u003e#10859\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003e@commitlint/cli\u003c/code\u003e from 20.5.0 to 20.5.2. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10846\"\u003e#10846\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/hpinmetaverse\"\u003e\u003ccode\u003e@​hpinmetaverse\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10836\"\u003e#10836\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/tommyhgunz14\"\u003e\u003ccode\u003e@​tommyhgunz14\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7413\"\u003e#7413\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10829\"\u003e#10829\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/divyanshuraj1095\"\u003e\u003ccode\u003e@​divyanshuraj1095\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10853\"\u003e#10853\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/sagodi97\"\u003e\u003ccode\u003e@​sagodi97\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10856\"\u003e#10856\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/rkdfx\"\u003e\u003ccode\u003e@​rkdfx\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Liuwei1125\"\u003e\u003ccode\u003e@​Liuwei1125\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.16.1\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.16.0 — May 2, 2026\u003c/h2\u003e\n\u003cp\u003eThis release adds support for the QUERY HTTP method and a new \u003ccode\u003eECONNREFUSED\u003c/code\u003e error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.\u003c/p\u003e\n\u003ch2\u003e⚠️ Notable Changes\u003c/h2\u003e\n\u003cp\u003eA handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/1337d6b537afb2d3f501074c8ac4ef4308221197\"\u003e\u003ccode\u003e1337d6b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.16.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10877\"\u003e#10877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/858a790cec06054547d0d3f941916d6fb2a4d18e\"\u003e\u003ccode\u003e858a790\u003c/code\u003e\u003c/a\u003e fix: remove all caches (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10882\"\u003e#10882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/34adfd90efc9c145488399e1cf7fa96de67080fa\"\u003e\u003ccode\u003e34adfd9\u003c/code\u003e\u003c/a\u003e revert: \u0026quot;fix: support URL object as config.url input (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10874\"\u003e#10874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/847d89b43654405d9a231e0b669832c2092b621f\"\u003e\u003ccode\u003e847d89b\u003c/code\u003e\u003c/a\u003e fix: support URL object as config.url input (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10866\"\u003e#10866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/40948863677bb793bfff0293cce7e7b4f8a1b212\"\u003e\u003ccode\u003e4094886\u003c/code\u003e\u003c/a\u003e fix(progress): guard malformed XHR upload events (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10868\"\u003e#10868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/44f0c5bf73c45df6009365141faa394d73596bd7\"\u003e\u003ccode\u003e44f0c5b\u003c/code\u003e\u003c/a\u003e chore: change sponsorship link and add Twicsy advertisement (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10869\"\u003e#10869\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/64e1095efedc64c9fecf5176bd9cf2e5e93140d6\"\u003e\u003ccode\u003e64e1095\u003c/code\u003e\u003c/a\u003e chore: update PR and issue template to use h2 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10865\"\u003e#10865\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/3e6b4e1f311b43aa1dc77d78150a601d9fe4b280\"\u003e\u003ccode\u003e3e6b4e1\u003c/code\u003e\u003c/a\u003e fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/c4453bab70f53575175903aee60810c821f72129\"\u003e\u003ccode\u003ec4453ba\u003c/code\u003e\u003c/a\u003e fix: add the ability to add additional sponsors to the process sponsors scrip...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/caa00a90b524bb67ed033474abcf4d8645ced793\"\u003e\u003ccode\u003ecaa00a9\u003c/code\u003e\u003c/a\u003e fix: https data in cleartext to proxy (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10858\"\u003e#10858\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.25 to 15.5.18\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.18\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6\"\u003eGHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.16\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj\"\u003eGHSA-8h8q-6873-q5fj: Denial of Service with Server Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f\"\u003eGHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx\"\u003eGHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv\"\u003eGHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r\"\u003eGHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5\"\u003eGHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eModerate:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q\"\u003eGHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h\"\u003eGHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh\"\u003eGHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7\"\u003eGHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949\"\u003eGHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq\"\u003eGHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/9ff92cebcaa6ba4e7463b6fd037a8510ba9b81ec\"\u003e\u003ccode\u003e9ff92ce\u003c/code\u003e\u003c/a\u003e v15.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/00ebe23562bd7eb32dd78730984bfadb47138bcf\"\u003e\u003ccode\u003e00ebe23\u003c/code\u003e\u003c/a\u003e [backport] Disable build caches for production/staging/force-preview deploys ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/62c97ab0b5825e2cbc15f6b682d8286a8dd6a038\"\u003e\u003ccode\u003e62c97ab\u003c/code\u003e\u003c/a\u003e v15.5.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/423623ae38c106273085b66946ee5bf9aab77f2c\"\u003e\u003ccode\u003e423623a\u003c/code\u003e\u003c/a\u003e Turbopack: Match proxy matchers with webpack implementation (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93594\"\u003e#93594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fa787399b38d9aa702118f9bd23a8315b9f0ecc6\"\u003e\u003ccode\u003efa78739\u003c/code\u003e\u003c/a\u003e Turbopack: Fix middleware matcher suffix (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93590\"\u003e#93590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36e62c6eb7813e42d409eb487f93b829f4ad77e8\"\u003e\u003ccode\u003e36e62c6\u003c/code\u003e\u003c/a\u003e [backport] Turbopack: more strict vergen setup (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93588\"\u003e#93588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/36589b5db512b7704cdadd873cbe49b6dbcc9261\"\u003e\u003ccode\u003e36589b5\u003c/code\u003e\u003c/a\u003e [backport][test] Pin package manager to patch versions (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93596\"\u003e#93596\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ad6fd4e50e5aba20b60d283c42b89273a3167ccd\"\u003e\u003ccode\u003ead6fd4e\u003c/code\u003e\u003c/a\u003e v15.5.16\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/79d7dff1448483f0c8f187f98887b31019f6e494\"\u003e\u003ccode\u003e79d7dff\u003c/code\u003e\u003c/a\u003e Ignore malformed CSP nonce headers (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/103\"\u003e#103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c4f69086cc8dcbd81b1dbc321c98ea874d90d6f8\"\u003e\u003ccode\u003ec4f6908\u003c/code\u003e\u003c/a\u003e router-server: guard upgrade proxy against absolute-url SSRF (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/77\"\u003e#77\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/102\"\u003e#102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.18\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summar...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/100","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/100","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/100/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T01:01:52.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528608216","node_id":"PR_kwDOJaQu3s7foaxU","number":266,"state":"open","title":"chore(deps): bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T01:01:52.000Z","updated_at":"2026-05-27T01:01:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hyperdxio/hyperdx-js/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hyperdxio/hyperdx-js/pull/266","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperdxio%2Fhyperdx-js/issues/266","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/266/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:57:16.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528590385","node_id":"PR_kwDOJGWeI87foXPE","number":511,"state":"open","title":"build(deps): bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:57:16.000Z","updated_at":"2026-05-27T00:57:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/core-ds/arui-scripts/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/core-ds/arui-scripts/pull/511","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/core-ds%2Farui-scripts/issues/511","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/511/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:54:54.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528579948","node_id":"PR_kwDOKq-aNM7foVC_","number":1215,"state":"open","title":"Chore(deps): Bump @hapi/content from 6.0.1 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:54:54.000Z","updated_at":"2026-05-27T00:57:23.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Chore(deps): Bump","packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.1 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.1\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-runner/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-runner/pull/1215","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-runner/issues/1215","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1215/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:53:16.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528572648","node_id":"PR_kwDOQPDBNc7foTee","number":17,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T11:46:23.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T00:53:16.000Z","updated_at":"2026-05-29T11:46:26.000Z","time_to_close":211987,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-audit-publisher-stub/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-audit-publisher-stub/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-audit-publisher-stub/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"}},{"old_version":"5.0.2","new_version":"6.0.2","update_type":"major","path":"/defi","pr_created_at":"2026-05-27T00:52:49.000Z","version_change":"5.0.2 → 6.0.2","issue":{"uuid":"4528569954","node_id":"PR_kwDOJAtVrM7foS4h","number":23,"state":"open","title":"Bump @hapi/content and serverless-offline in /defi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:49.000Z","updated_at":"2026-05-27T00:53:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"5.0.2","new_version":"6.0.2"},{"name":"serverless-offline","repository_url":"https://github.com/dherault/serverless-offline","old_version":"8.8.1","new_version":"14.7.0"}],"path":"/defi","ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.2 and updates ancestor dependency [serverless-offline](https://github.com/dherault/serverless-offline). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `serverless-offline` from 8.8.1 to 14.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dherault/serverless-offline/releases\"\u003eserverless-offline's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove ruby performance by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1873\"\u003edherault/serverless-offline#1873\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix tests by \u003ca href=\"https://github.com/dherault\"\u003e\u003ccode\u003e@​dherault\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1886\"\u003edherault/serverless-offline#1886\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: bump actions/setup-go@v5 by \u003ca href=\"https://github.com/dnalborczyk\"\u003e\u003ccode\u003e@​dnalborczyk\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1821\"\u003edherault/serverless-offline#1821\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace fs-extra with native Node.js fs APIs by \u003ca href=\"https://github.com/roli-lpci\"\u003e\u003ccode\u003e@​roli-lpci\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003edherault/serverless-offline#1876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ruby 3.4 support by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1878\"\u003edherault/serverless-offline#1878\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version (fixing critical vulnerability) by \u003ca href=\"https://github.com/robertmaier\"\u003e\u003ccode\u003e@​robertmaier\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003edherault/serverless-offline#1884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e by \u003ca href=\"https://github.com/apokryfos\"\u003e\u003ccode\u003e@​apokryfos\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003edherault/serverless-offline#1772\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies by \u003ca href=\"https://github.com/dherault\"\u003e\u003ccode\u003e@​dherault\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1889\"\u003edherault/serverless-offline#1889\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/roli-lpci\"\u003e\u003ccode\u003e@​roli-lpci\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003edherault/serverless-offline#1876\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/robertmaier\"\u003e\u003ccode\u003e@​robertmaier\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003edherault/serverless-offline#1884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/apokryfos\"\u003e\u003ccode\u003e@​apokryfos\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003edherault/serverless-offline#1772\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.5.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eLoad TypeScript in ESM mode if package.json type is module by \u003ca href=\"https://github.com/henrist\"\u003e\u003ccode\u003e@​henrist\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1849\"\u003edherault/serverless-offline#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Support CloudFormation Join \u0026amp; Sub function in environment variable by \u003ca href=\"https://github.com/yo-ga\"\u003e\u003ccode\u003e@​yo-ga\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1842\"\u003edherault/serverless-offline#1842\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaintenance Updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ruby 3.3 support by \u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1862\"\u003edherault/serverless-offline#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd python 3.13 support by \u003ca href=\"https://github.com/ppoullain\"\u003e\u003ccode\u003e@​ppoullain\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003edherault/serverless-offline#1865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop pre-NodeJS 20.x support and add support for NodeJS 24.x and Fix broken tests by \u003ca href=\"https://github.com/crespowang\"\u003e\u003ccode\u003e@​crespowang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1867\"\u003edherault/serverless-offline#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/henrist\"\u003e\u003ccode\u003e@​henrist\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1849\"\u003edherault/serverless-offline#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yo-ga\"\u003e\u003ccode\u003e@​yo-ga\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1842\"\u003edherault/serverless-offline#1842\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/naomichi-y\"\u003e\u003ccode\u003e@​naomichi-y\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1862\"\u003edherault/serverless-offline#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ppoullain\"\u003e\u003ccode\u003e@​ppoullain\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003edherault/serverless-offline#1865\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/crespowang\"\u003e\u003ccode\u003e@​crespowang\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1867\"\u003edherault/serverless-offline#1867\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\"\u003ehttps://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev14.4.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd support for nodejs22.x runtime (\u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1837\"\u003e#1837\u003c/a\u003e) (\u003ca href=\"https://github.com/dherault/serverless-offline/commit/1b2193459609e128522568c67fc83ccddfd8d146\"\u003e1b21934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dherault/serverless-offline/blob/master/CHANGELOG.md\"\u003eserverless-offline's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.6.0...v14.7.0\"\u003ev14.7.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e22 May 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eImprove ruby performance \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1873\"\u003e\u003ccode\u003e[#1873](https://github.com/dherault/serverless-offline/issues/1873)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInstall auto-changelog \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c3f8e85b3031cd8dd5b672de584bee667e556ca8\"\u003e\u003ccode\u003ec3f8e85\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies \u003ca href=\"https://github.com/dherault/serverless-offline/commit/3ff34fbfe1aae91a72382ee5e0f06bcbb83633a4\"\u003e\u003ccode\u003e3ff34fb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate mocha \u003ca href=\"https://github.com/dherault/serverless-offline/commit/bc7fd5bdb5c71de65c94fe33976a60ff3a4c4f12\"\u003e\u003ccode\u003ebc7fd5b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd hot reload \u003ca href=\"https://github.com/dherault/serverless-offline/commit/146b6254110cb2b6889142cd2edbb5c2b875f5dc\"\u003e\u003ccode\u003e146b625\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: address Copilot review feedback on Ruby runner \u003ca href=\"https://github.com/dherault/serverless-offline/commit/1941adec7820c5c0c9b5c7f5c3fd4492e7d11b94\"\u003e\u003ccode\u003e1941ade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c0cc3e48b1bc3f1a690fdbfed424cd15d76c3f11\"\u003e\u003ccode\u003ec0cc3e4\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd watchDires \u003ca href=\"https://github.com/dherault/serverless-offline/commit/1aaa866f78bf9207971a7e6821ae9d3850c11ced\"\u003e\u003ccode\u003e1aaa866\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: address second round of Copilot review feedback on Ruby runner \u003ca href=\"https://github.com/dherault/serverless-offline/commit/6f2f2c4d7ea0c79b84dae42efee524cf9d5b1a1a\"\u003e\u003ccode\u003e6f2f2c4\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ruby): guard against null stdio streams on spawn failure \u003ca href=\"https://github.com/dherault/serverless-offline/commit/d36cab09e1515fa35737952dae7800762bc2db32\"\u003e\u003ccode\u003ed36cab0\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument rubyWatchDirs option in README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/dc45cab4170e73b5ac736f0629ed69620dd86fdd\"\u003e\u003ccode\u003edc45cab\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eApply suggestions from code review \u003ca href=\"https://github.com/dherault/serverless-offline/commit/52d0a3b052f5845619adedf9bb1ec00044dbb62b\"\u003e\u003ccode\u003e52d0a3b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePotential fix for pull request finding \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c2e2303d3faed2f700564004165f1fa77007299c\"\u003e\u003ccode\u003ec2e2303\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: sort defaultOptions keys alphabetically \u003ca href=\"https://github.com/dherault/serverless-offline/commit/50a3dfce121a41c2eaf4aa5a189a31c0f3b61bc8\"\u003e\u003ccode\u003e50a3dfc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove Airbnb style guide mention in README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/3506988178c9d823bdaadbe80ca0ce9301abc4ca\"\u003e\u003ccode\u003e3506988\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.5.0...v14.6.0\"\u003ev14.6.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e11 May 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate dependencies \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1889\"\u003e\u003ccode\u003e[#1889](https://github.com/dherault/serverless-offline/issues/1889)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1772\"\u003e\u003ccode\u003e[#1772](https://github.com/dherault/serverless-offline/issues/1772)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version (fixing critical vulnerability) \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1884\"\u003e\u003ccode\u003e[#1884](https://github.com/dherault/serverless-offline/issues/1884)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ruby 3.4 support \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1878\"\u003e\u003ccode\u003e[#1878](https://github.com/dherault/serverless-offline/issues/1878)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: replace fs-extra with native Node.js fs APIs \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1876\"\u003e\u003ccode\u003e[#1876](https://github.com/dherault/serverless-offline/issues/1876)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: bump actions/setup-go@v5 \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1821\"\u003e\u003ccode\u003e[#1821](https://github.com/dherault/serverless-offline/issues/1821)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix tests \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1886\"\u003e\u003ccode\u003e[#1886](https://github.com/dherault/serverless-offline/issues/1886)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge pull request \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1772\"\u003e#1772\u003c/a\u003e from apokryfos/issue-1771 \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e\u003ccode\u003e[#1771](https://github.com/dherault/serverless-offline/issues/1771)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolves \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e#1771\u003c/a\u003e \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1771\"\u003e\u003ccode\u003e[#1771](https://github.com/dherault/serverless-offline/issues/1771)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(aws-sdk): bump client-lambda version \u003ca href=\"https://github.com/dherault/serverless-offline/commit/4ac5858ba26a04872c3b0f01a1f8aa89f5eda7e4\"\u003e\u003ccode\u003e4ac5858\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/a6fac8a01f812ed000cf72b452f9c9f94aa409cf\"\u003e\u003ccode\u003ea6fac8a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit contributors list \u003ca href=\"https://github.com/dherault/serverless-offline/commit/491ad6261a93850ea58c97480646cab47d64c70e\"\u003e\u003ccode\u003e491ad62\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove Symmetrics promotional section from README \u003ca href=\"https://github.com/dherault/serverless-offline/commit/a4bc4726d824ed932a5bd2d8d81822f26aa39df7\"\u003e\u003ccode\u003ea4bc472\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit changelog \u003ca href=\"https://github.com/dherault/serverless-offline/commit/b93ebb5a8e5720261a971149ac0672d0eecdda34\"\u003e\u003ccode\u003eb93ebb5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun prettier \u003ca href=\"https://github.com/dherault/serverless-offline/commit/c1a428f6a3f480d5f33222113ff3208cd9b1fe70\"\u003e\u003ccode\u003ec1a428f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate src/config/supportedRuntimes.js \u003ca href=\"https://github.com/dherault/serverless-offline/commit/11f41975b2213d5c4a327424f2479f9113380cd6\"\u003e\u003ccode\u003e11f4197\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit CI \u003ca href=\"https://github.com/dherault/serverless-offline/commit/8fb75619a8de977c2d8cd56ab3205e3fab6eb05a\"\u003e\u003ccode\u003e8fb7561\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: limit matrix to ubuntu-latest, drop macos/windows \u003ca href=\"https://github.com/dherault/serverless-offline/commit/946bc1ab46b37343cedea5921dc9c13af6d44e67\"\u003e\u003ccode\u003e946bc1a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEdit LICENSE \u003ca href=\"https://github.com/dherault/serverless-offline/commit/755a375d81b6db408039740e98513a222dc4da23\"\u003e\u003ccode\u003e755a375\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun prettier \u003ca href=\"https://github.com/dherault/serverless-offline/commit/6a5902f0918a5541777f862ed4a9477899fc5d93\"\u003e\u003ccode\u003e6a5902f\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/compare/v14.4.0...v14.5.0\"\u003ev14.5.0\u003c/a\u003e\u003c/h4\u003e\n\u003cblockquote\u003e\n\u003cp\u003e24 February 2026\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cul\u003e\n\u003cli\u003eAdd python 3.13 support \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/pull/1865\"\u003e\u003ccode\u003e[#1865](https://github.com/dherault/serverless-offline/issues/1865)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/0486ff548f9ed64b3a7544a28ec4cc6a0eaa1da8\"\u003e\u003ccode\u003e0486ff5\u003c/code\u003e\u003c/a\u003e Edit CHANGELOG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/13c38f3499d38a86bafa29bc0c727adb636b7bb2\"\u003e\u003ccode\u003e13c38f3\u003c/code\u003e\u003c/a\u003e 14.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/bc7fd5bdb5c71de65c94fe33976a60ff3a4c4f12\"\u003e\u003ccode\u003ebc7fd5b\u003c/code\u003e\u003c/a\u003e Update mocha\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/3ff34fbfe1aae91a72382ee5e0f06bcbb83633a4\"\u003e\u003ccode\u003e3ff34fb\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/c3f8e85b3031cd8dd5b672de584bee667e556ca8\"\u003e\u003ccode\u003ec3f8e85\u003c/code\u003e\u003c/a\u003e Install auto-changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/c0cc3e48b1bc3f1a690fdbfed424cd15d76c3f11\"\u003e\u003ccode\u003ec0cc3e4\u003c/code\u003e\u003c/a\u003e Edit README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/8f12420d1da93df622e00d1948fd3ede1aac8fcb\"\u003e\u003ccode\u003e8f12420\u003c/code\u003e\u003c/a\u003e Merge branch 'feature/improve-ruby-performance'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/04cfde5c0ef03feb99c02249db84a344a1bf3754\"\u003e\u003ccode\u003e04cfde5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/dherault/serverless-offline/issues/1873\"\u003e#1873\u003c/a\u003e from naomichi-y/feature/improve-ruby-performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/dc45cab4170e73b5ac736f0629ed69620dd86fdd\"\u003e\u003ccode\u003edc45cab\u003c/code\u003e\u003c/a\u003e Document rubyWatchDirs option in README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dherault/serverless-offline/commit/3506988178c9d823bdaadbe80ca0ce9301abc4ca\"\u003e\u003ccode\u003e3506988\u003c/code\u003e\u003c/a\u003e Remove Airbnb style guide mention in README\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dherault/serverless-offline/compare/v8.8.1...v14.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ondoprotocol/defillama-server/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ondoprotocol/defillama-server/pull/23","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ondoprotocol%2Fdefillama-server/issues/23","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/23/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:52:27.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528568113","node_id":"PR_kwDOPCWuhc7foSe7","number":35,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:27.000Z","updated_at":"2026-05-27T00:53:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-mpdp-backend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-mpdp-backend/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-mpdp-backend/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"}},{"old_version":"6.0.1","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:52:25.000Z","version_change":"6.0.1 → 6.0.2","issue":{"uuid":"4528567942","node_id":"PR_kwDOQJEHiM7foScd","number":21,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-29T11:47:16.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-27T00:52:25.000Z","updated_at":"2026-05-29T11:47:19.000Z","time_to_close":212091,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"@hapi/content","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"},{"name":"@hapi/wreck","old_version":"18.1.0","new_version":"18.1.2","repository_url":"https://github.com/hapijs/wreck"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [@hapi/content](https://github.com/hapijs/content) and [@hapi/wreck](https://github.com/hapijs/wreck).\n\nUpdates `@hapi/content` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.1...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/wreck` from 18.1.0 to 18.1.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/68ec5e8414d8f1c8f17407d846cb72199260b4b2\"\u003e\u003ccode\u003e68ec5e8\u003c/code\u003e\u003c/a\u003e 18.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e\"\u003e\u003ccode\u003eb93323b\u003c/code\u003e\u003c/a\u003e fix: cross-origin redirect should also remove sensitive headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/ffeabc4cf97003a0717e41910c4698479b4bbed8\"\u003e\u003ccode\u003effeabc4\u003c/code\u003e\u003c/a\u003e 18.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/71cbf4c949cb241ba53a5dc40b9c909dc66693f7\"\u003e\u003ccode\u003e71cbf4c\u003c/code\u003e\u003c/a\u003e chore: fix DeprecationWarning\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/04fc449b9b0970999f573eb0fb2c7f4f460cd75c\"\u003e\u003ccode\u003e04fc449\u003c/code\u003e\u003c/a\u003e chore: solve Windows CI issue\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/36031476e7e9b5ee59b2c48418cdea51fa144603\"\u003e\u003ccode\u003e3603147\u003c/code\u003e\u003c/a\u003e chore: fix coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/wreck/commit/a5b6fac9c684621c1d5733d10a0257697cfea373\"\u003e\u003ccode\u003ea5b6fac\u003c/code\u003e\u003c/a\u003e fix: properly handle proxy-authorization\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/wreck/compare/v18.1.0...v18.1.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/fcp-fdm-event-publisher-stub/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/fcp-fdm-event-publisher-stub/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Ffcp-fdm-event-publisher-stub/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"}},{"old_version":"6.0.0","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:51:11.000Z","version_change":"6.0.0 → 6.0.2","issue":{"uuid":"4528561359","node_id":"PR_kwDOPcG6M87foRJN","number":128,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:51:11.000Z","updated_at":"2026-05-27T00:53:12.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hal-shu-sato/quiz-web-system/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hal-shu-sato/quiz-web-system/pull/128","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hal-shu-sato%2Fquiz-web-system/issues/128","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/128/packages"}},{"old_version":"6.0.0","new_version":"6.0.2","update_type":"patch","path":"/library","pr_created_at":"2026-05-27T00:45:57.000Z","version_change":"6.0.0 → 6.0.2","issue":{"uuid":"4528538739","node_id":"PR_kwDOLIBIj87foMhW","number":1042,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.2 in /library","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:45:57.000Z","updated_at":"2026-05-27T00:54:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":"/library","ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AikidoSec/firewall-node/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AikidoSec/firewall-node/pull/1042","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AikidoSec%2Ffirewall-node/issues/1042","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1042/packages"}},{"old_version":"6.0.0","new_version":"6.0.2","update_type":"patch","path":null,"pr_created_at":"2026-05-27T00:45:31.000Z","version_change":"6.0.0 → 6.0.2","issue":{"uuid":"4528537117","node_id":"PR_kwDOJlFWwM7foMMt","number":397,"state":"open","title":"chore(deps): bump @hapi/content from 6.0.0 to 6.0.2","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-27T00:45:31.000Z","updated_at":"2026-05-27T00:46:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.2","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/6fed62114f940896005ea4ee622030830da9cb56\"\u003e\u003ccode\u003e6fed621\u003c/code\u003e\u003c/a\u003e 6.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f\"\u003e\u003ccode\u003e3850079\u003c/code\u003e\u003c/a\u003e fix: error on duplicate parameters\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/credebl/agent-controller/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/credebl/agent-controller/pull/397","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/credebl%2Fagent-controller/issues/397","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/397/packages"}},{"old_version":"6.0.0","new_version":"6.0.1","update_type":"patch","path":null,"pr_created_at":"2026-04-16T01:44:52.000Z","version_change":"6.0.0 → 6.0.1","issue":{"uuid":"4272694315","node_id":"PR_kwDOPNWXvM7S04Wt","number":44,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 14 directories with 13 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-16T01:49:32.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-16T01:44:52.000Z","updated_at":"2026-04-16T01:49:34.000Z","time_to_close":280,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":13,"packages":[{"name":"next","old_version":"14.2.25","new_version":"15.5.15","repository_url":"https://github.com/vercel/next.js"},{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `14.2.25` | `15.5.15` |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n\nBumps the npm_and_yarn group with 1 update in the /bifrost directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 4 updates in the /docs directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [picomatch](https://github.com/micromatch/picomatch) and [basic-ftp](https://github.com/patrickjuchli/basic-ftp).\nBumps the npm_and_yarn group with 3 updates in the /examples/asyncExample directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios) and [@xmldom/xmldom](https://github.com/xmldom/xmldom).\nBumps the npm_and_yarn group with 1 update in the /examples/qawolf-ws directory: [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [next](https://github.com/vercel/next.js) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [next](https://github.com/vercel/next.js) | `13.5.7` | `15.5.15` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.20` |\n\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript/helpers directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 2 updates in the /web directory: [next](https://github.com/vercel/next.js) and [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 2 updates in the /worker directory: [axios](https://github.com/axios/axios) and [picomatch](https://github.com/micromatch/picomatch).\n\nUpdates `next` from 14.2.25 to 15.5.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.15\u003c/h2\u003e\n\u003cp\u003ePlease refer the following changelogs for more information about this security release:\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://vercel.com/changelog/summary-of-cve-2026-23869\"\u003ehttps://vercel.com/changelog/summary-of-cve-2026-23869\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.14\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(next/image): add lru disk cache and images.maximumDiskCacheSize (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/91660\"\u003e#91660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/90304\"\u003e#90304\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/styfle\"\u003e\u003ccode\u003e@​styfle\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/lllomh\"\u003e\u003ccode\u003e@​lllomh\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev15.5.13\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix: patch http-proxy to prevent request smuggling in rewrites (See: \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-ggv3-7p47-pfv8\"\u003eCVE-2026-29057\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/ztanner\"\u003e\u003ccode\u003e@​ztanner\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/412eb90b6587ec02e8361c92efa9091487e7348f\"\u003e\u003ccode\u003e412eb90\u003c/code\u003e\u003c/a\u003e v15.5.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/cb90de98be409653f39ec602072740b38689a4e5\"\u003e\u003ccode\u003ecb90de9\u003c/code\u003e\u003c/a\u003e [15.x] Avoid consuming cyclic models multiple times (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/74\"\u003e#74\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fffef9ef3059a4883def5b847315fb6017668846\"\u003e\u003ccode\u003efffef9e\u003c/code\u003e\u003c/a\u003e Fix CI for glibc linux builds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d7b012d787c01e0435f8cdf2a47211891668d13b\"\u003e\u003ccode\u003ed7b012d\u003c/code\u003e\u003c/a\u003e v15.5.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2b0525123245da5b1b9d1abedc636c5fd3ee1d07\"\u003e\u003ccode\u003e2b05251\u003c/code\u003e\u003c/a\u003e [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f88cee9604f0ec8ab869a2f94ced984194277b9e\"\u003e\u003ccode\u003ef88cee9\u003c/code\u003e\u003c/a\u003e Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/cfd5f533b08df3038476dcd54f1d6d660d85f069\"\u003e\u003ccode\u003ecfd5f53\u003c/code\u003e\u003c/a\u003e v15.5.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/15f28911fd272041707dbf6b7c07d62642593be8\"\u003e\u003ccode\u003e15f2891\u003c/code\u003e\u003c/a\u003e [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d23f41c42506005fe6978e076a1ccbf8979e4925\"\u003e\u003ccode\u003ed23f41c\u003c/code\u003e\u003c/a\u003e v15.5.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8e75765a6544dc0e6b20aefeade7d33190ffcb7c\"\u003e\u003ccode\u003e8e75765\u003c/code\u003e\u003c/a\u003e fix unlock in publish-native\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v14.2.25...v15.5.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0 — April 7, 2026\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches targeting header injection and SSRF via proxy bypass, adds official runtime support for Deno and Bun, and includes significant CI security hardening.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eHeader Injection (CRLF):\u003c/strong\u003e Rejects any header value containing \u003ccode\u003e\\r\u003c/code\u003e or \u003ccode\u003e\\n\u003c/code\u003e characters to block CRLF injection chains that could be used to exfiltrate cloud metadata (IMDS). Behavior change: headers with CR/LF now throw \u003ccode\u003e\u0026quot;Invalid character in header content\u0026quot;\u003c/code\u003e. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSSRF via \u003ccode\u003eno_proxy\u003c/code\u003e Bypass:\u003c/strong\u003e Introduces a \u003ccode\u003eshouldBypassProxy\u003c/code\u003e helper that normalises hostnames (strips trailing dots, handles bracketed IPv6) before evaluating \u003ccode\u003eno_proxy\u003c/code\u003e/\u003ccode\u003eNO_PROXY\u003c/code\u003e rules, closing a gap that could cause loopback or internal hosts to be inadvertently proxied. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeno \u0026amp; Bun Runtime Support:\u003c/strong\u003e Added full smoke test suites for Deno and Bun, with CI workflows that run both runtimes before any release is cut. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNode.js v22 Compatibility:\u003c/strong\u003e Replaced deprecated \u003ccode\u003eurl.parse()\u003c/code\u003e calls with the WHATWG \u003ccode\u003eURL\u003c/code\u003e/\u003ccode\u003eURLSearchParams\u003c/code\u003e API across examples, sandbox, and tests, eliminating \u003ccode\u003eDEP0169\u003c/code\u003e deprecation warnings on Node.js v22+. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCI Security Hardening:\u003c/strong\u003e Added \u003ca href=\"https://github.com/zizmorcore/zizmor\"\u003ezizmor\u003c/a\u003e GitHub Actions security scanner; switched npm publish to OIDC Trusted Publishing (removing the long-lived \u003ccode\u003eNODE_AUTH_TOKEN\u003c/code\u003e); pinned all action references to full commit SHAs; narrowed workflow permissions to least privilege; gated the publish step behind a dedicated \u003ccode\u003enpm-publish\u003c/code\u003e environment; and blocked the sponsor-block workflow from running on forks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10641\"\u003e#10641\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDocs:\u003c/strong\u003e Clarified HTTP/2 support and the unsupported \u003ccode\u003ehttpVersion\u003c/code\u003e option; added documentation for header case preservation; improved the \u003ccode\u003ebeforeRedirect\u003c/code\u003e example to prevent accidental credential leakage. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e (×3), \u003ccode\u003edenoland/setup-deno\u003c/code\u003e, and 4 additional dev dependencies to latest versions. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10564\"\u003e#10564\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10565\"\u003e#10565\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10567\"\u003e#10567\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/shaanmajid\"\u003e\u003ccode\u003e@​shaanmajid\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10617\"\u003e#10617\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10641\"\u003e#10641\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.14.0...v1.15.0\"\u003eFull Changelog\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003ch2\u003ev1.14.0 — March 27, 2026\u003c/h2\u003e\n\u003cp\u003eThis release fixes a security vulnerability in the \u003ccode\u003eformidable\u003c/code\u003e dependency, resolves a CommonJS compatibility regression, hardens proxy and HTTP/2 handling, and modernises the build and test toolchain.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eFormidable Vulnerability:\u003c/strong\u003e Upgraded \u003ccode\u003eformidable\u003c/code\u003e from v2 to v3 to address a reported arbitrary-file vulnerability. Updated test server and assertions to align with the v3 API. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7533\"\u003e#7533\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d30db975bf80c340e7856c1ad3568321\"\u003e\u003ccode\u003e40d7ef4\u003c/code\u003e\u003c/a\u003e fix(defu.d.cts): export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/3d3a7c89ca78f3fa43ec7194b12e44e4b0568697\"\u003e\u003ccode\u003e3d3a7c8\u003c/code\u003e\u003c/a\u003e build: correct the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/001c2906010eb65c1bb13ccd1f4abea09e10405b\"\u003e\u003ccode\u003e001c290\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/407b51645c41a57da6efac5b40967f2c60ce4f12\"\u003e\u003ccode\u003e407b516\u003c/code\u003e\u003c/a\u003e build: fix mixed types\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/23e59e684cb6a432aad13f308d142247e31b6315\"\u003e\u003ccode\u003e23e59e6\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/44","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/44","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/44/packages"}},{"old_version":"6.0.0","new_version":"6.0.1","update_type":"patch","path":null,"pr_created_at":"2026-04-11T02:51:40.000Z","version_change":"6.0.0 → 6.0.1","issue":{"uuid":"4242734153","node_id":"PR_kwDOPNWXvM7RnV1L","number":26,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 13 directories with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-11T18:56:38.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-11T02:51:40.000Z","updated_at":"2026-04-11T18:56:39.000Z","time_to_close":57898,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.13","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.9","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n\nBumps the npm_and_yarn group with 5 updates in the /docs directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.10` | `0.1.13` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.0.5` | `5.2.2` |\n\nBumps the npm_and_yarn group with 4 updates in the /examples/asyncExample directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [@xmldom/xmldom](https://github.com/xmldom/xmldom).\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\nBumps the npm_and_yarn group with 6 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.18` |\n\nBumps the npm_and_yarn group with 3 updates in the /sdk/typescript/helpers directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 1 update in the /web directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 4 updates in the /worker directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.13.3\"\u003e1.13.3\u003c/a\u003e (2026-01-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp2:\u003c/strong\u003e Use port 443 for HTTPS connections by default. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7256\"\u003e#7256\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e\"\u003ed7e6065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einterceptor:\u003c/strong\u003e handle the error in the same interceptor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6269\"\u003e#6269\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89\"\u003e5945e40\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emain field in package.json should correspond to cjs artifacts (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5756\"\u003e#5756\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04\"\u003e7373fbf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epackage.json:\u003c/strong\u003e add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5754\"\u003e#5754\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8\"\u003eb89217e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esilentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7257\"\u003e#7257\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf\"\u003e7d19335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eturn AxiosError into a native error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5394\"\u003e#5394\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5558\"\u003e#5558\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b\"\u003e1c6a86d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add handlers to AxiosInterceptorManager interface (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5551\"\u003e#5551\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a\"\u003e8d1271b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e restore AxiosError.cause type from unknown to Error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7327\"\u003e#7327\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b\"\u003ed8233d9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunclear error message is thrown when specifying an empty proxy authorization (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6314\"\u003e#6314\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29\"\u003e6ef867e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eundefined\u003c/code\u003e as a value in AxiosRequestConfig (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5560\"\u003e#5560\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd\"\u003e095033c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd automatic minor and patch upgrades to dependabot (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6053\"\u003e#6053\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed\"\u003e65a7584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Node.js coverage script using c8 (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7289\"\u003e#7289\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7294\"\u003e#7294\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a\"\u003eec9d94e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadded copilot instructions (\u003ca href=\"https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26\"\u003e3f83143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with frozen prototypes (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6265\"\u003e#6265\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012\"\u003e860e033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance pipeFileToResponse with error handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7169\"\u003e#7169\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552\"\u003e88d7884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Intellisense for string literals in a widened union (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6134\"\u003e#6134\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5\"\u003ef73474d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329\"\u003emicrosoft/TypeScript#33471\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: silentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e…\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a\"\u003ea4230f5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7334\"\u003e#7334\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a\"\u003e2d6ad5e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/ashvin2005\" title=\"+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )\"\u003eAshvin Tiwari\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/mochinikunj\" title=\"+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )\"\u003eNikunj Mochi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/imanchalsingh\" title=\"+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )\"\u003eAnchal Singh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/jasonsaayman\" title=\"+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )\"\u003ejasonsaayman\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/brodo\" title=\"+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )\"\u003eJulian Dax\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/AKASHDHARDUBEY\" title=\"+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )\"\u003eAkash Dhar Dubey\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/madhumitaaa\" title=\"+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )\"\u003eMadhumita\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Tackoil\" title=\"+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )\"\u003eTackoil\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/justindhillon\" title=\"+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )\"\u003eJustin Dhillon\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Rudrxxx\" title=\"+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )\"\u003eRudransh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/WuMingDao\" title=\"+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )\"\u003eWuMingDao\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/codenomnom\" title=\"+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )\"\u003ecodenomnom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Nandann018-ux\" title=\"+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )\"\u003eNandan Acharya\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/KernelDeimos\" title=\"+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )\"\u003eEric Dubé\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/tiborpilz\" title=\"+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )\"\u003eTibor Pilz\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/joaoGabriel55\" title=\"+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )\"\u003eGabriel Quaresma\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/turadg\" title=\"+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )\"\u003eTuradg Aleahmad\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6c353caf23beb9644f858eb3fe38d43a68b82898\"\u003e\u003ccode\u003e6c353ca\u003c/code\u003e\u003c/a\u003e 1.1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2\"\u003e\u003ccode\u003e7fd684f\u003c/code\u003e\u003c/a\u003e Backport fix for GHSA-f886-m6hf-6m8v (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/95\"\u003e#95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/44f33b47c5c6a965d507421af43e86cf5971d711\"\u003e\u003ccode\u003e44f33b4\u003c/code\u003e\u003c/a\u003e 1.1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c460dbd68e428d147b2080622d8ce126c7a08570\"\u003e\u003ccode\u003ec460dbd\u003c/code\u003e\u003c/a\u003e pkg: publish on tag 1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ccb8ac6d4292b7661b677fe048ba6690c877f51f\"\u003e\u003ccode\u003eccb8ac6\u003c/code\u003e\u003c/a\u003e fmt\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217\"\u003e\u003ccode\u003ec3c73c8\u003c/code\u003e\u003c/a\u003e Fix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d30db975bf80c340e7856c1ad3568321\"\u003e\u003ccode\u003e40d7ef4\u003c/code\u003e\u003c/a\u003e fix(defu.d.cts): export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/3d3a7c89ca78f3fa43ec7194b12e44e4b0568697\"\u003e\u003ccode\u003e3d3a7c8\u003c/code\u003e\u003c/a\u003e build: correct the \u003ccode\u003etypes\u003c...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/26","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/26","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/26/packages"}},{"old_version":"6.0.0","new_version":"6.0.1","update_type":"patch","path":null,"pr_created_at":"2026-04-10T20:48:24.000Z","version_change":"6.0.0 → 6.0.1","issue":{"uuid":"4241658716","node_id":"PR_kwDOPNWXvM7RkOlC","number":24,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 13 directories with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-04-10T21:20:03.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-10T20:48:24.000Z","updated_at":"2026-04-10T21:20:05.000Z","time_to_close":1899,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"better-auth","old_version":"1.2.8","new_version":"1.4.9","repository_url":"https://github.com/better-auth/better-auth"},{"name":"nodemailer","old_version":"6.10.1","new_version":"8.0.5","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"},{"name":"axios","old_version":"1.9.0","new_version":"1.15.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.13","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"defu","old_version":"6.1.4","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.9","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"yaml","old_version":"1.10.2","new_version":"1.10.3","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 10 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.2.8` | `1.4.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `6.10.1` | `8.0.5` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [@hapi/content](https://github.com/hapijs/content) | `6.0.0` | `6.0.1` |\n| [axios](https://github.com/axios/axios) | `1.9.0` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `1.10.2` | `1.10.3` |\n\nBumps the npm_and_yarn group with 4 updates in the /docs directory: [lodash](https://github.com/lodash/lodash), [axios](https://github.com/axios/axios), [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 5 updates in the /examples/asyncExample directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.2` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [yaml](https://github.com/eemeli/yaml) | `2.4.5` | `2.8.3` |\n| [@xmldom/xmldom](https://github.com/xmldom/xmldom) | `0.8.10` | `0.8.12` |\n\nBumps the npm_and_yarn group with 2 updates in the /examples/qawolf-ws directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/together-manual directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /examples/vercel-ai-sdk-example directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /examples/vertex directory: [axios](https://github.com/axios/axios), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 3 updates in the /helicone-cron directory: [defu](https://github.com/unjs/defu), [picomatch](https://github.com/micromatch/picomatch) and [node-forge](https://github.com/digitalbazaar/forge).\nBumps the npm_and_yarn group with 7 updates in the /sdk/typescript/async directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.5.8` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `2.5.1` | `2.8.3` |\n| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.1.59` | `0.5.18` |\n\nBumps the npm_and_yarn group with 3 updates in the /sdk/typescript/helpers directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [picomatch](https://github.com/micromatch/picomatch).\nBumps the npm_and_yarn group with 2 updates in the /valhalla/jawn directory: [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [lodash](https://github.com/lodash/lodash).\nBumps the npm_and_yarn group with 1 update in the /web directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 5 updates in the /worker directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.15.0` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.13` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [yaml](https://github.com/eemeli/yaml) | `2.6.0` | `2.8.3` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.4.0` |\n\n\nUpdates `better-auth` from 1.2.8 to 1.4.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/better-auth/better-auth/releases\"\u003ebetter-auth's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.9\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003ectx.isTrustedDomain\u003c/code\u003e helper  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6462\"\u003ebetter-auth/better-auth#6462\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d09c580bc\"\u003e\u003c!-- raw HTML omitted --\u003e(d09c5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrizzle pg supports JSON  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6518\"\u003ebetter-auth/better-auth#6518\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/7d5f12b1f\"\u003e\u003c!-- raw HTML omitted --\u003e(7d5f1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Refresh Token Support to Kick OAuth Provider  -  by \u003ca href=\"https://github.com/CesarRodrigu\"\u003e\u003ccode\u003e@​CesarRodrigu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6263\"\u003ebetter-auth/better-auth#6263\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b1102e345\"\u003e\u003c!-- raw HTML omitted --\u003e(b1102)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eadditionalFields\u003c/code\u003e option in verification table schema  -  by \u003ca href=\"https://github.com/noctarius\"\u003e\u003ccode\u003e@​noctarius\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6747\"\u003ebetter-auth/better-auth#6747\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/eab5b4a04\"\u003e\u003c!-- raw HTML omitted --\u003e(eab5b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd patreon social provider  -  by \u003ca href=\"https://github.com/Spuffynism\"\u003e\u003ccode\u003e@​Spuffynism\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ebenkingcode\u003c/strong\u003e and \u003cstrong\u003eKinfe123\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6245\"\u003ebetter-auth/better-auth#6245\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/07cdd67da\"\u003e\u003c!-- raw HTML omitted --\u003e(07cdd)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a global backgroundTasks config option to defer actions like sending email and updates to run after response is sent  -  by \u003ca href=\"https://github.com/nexxeln\"\u003e\u003ccode\u003e@​nexxeln\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6713\"\u003ebetter-auth/better-auth#6713\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/d544ba97f\"\u003e\u003c!-- raw HTML omitted --\u003e(d544b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eadmin\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePrevent impersonating admins by default [breaking]  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6454\"\u003ebetter-auth/better-auth#6454\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5fb835ab2\"\u003e\u003c!-- raw HTML omitted --\u003e(5fb83)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support role with permissions for user updates and enforce role change validation  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6699\"\u003ebetter-auth/better-auth#6699\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a0a163320\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a16)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpo\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eLast-login-method client plugin  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6413\"\u003ebetter-auth/better-auth#6413\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/381f25fb5\"\u003e\u003c!-- raw HTML omitted --\u003e(381f2)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emulti-session\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow to infer additional fields  -  by \u003ca href=\"https://github.com/jslno\"\u003e\u003ccode\u003e@​jslno\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/137863c5b\"\u003e\u003c!-- raw HTML omitted --\u003e(13786)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to infer additional fields \u0026quot;  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6585\"\u003ebetter-auth/better-auth#6585\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/e26fc6fc2\"\u003e\u003c!-- raw HTML omitted --\u003e(e26fc)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-provider\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAn oauth 2.1 compliant plugin  -  by \u003ca href=\"https://github.com/dvanmali\"\u003e\u003ccode\u003e@​dvanmali\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/4163\"\u003ebetter-auth/better-auth#4163\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/686fba4e1\"\u003e\u003c!-- raw HTML omitted --\u003e(686fb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoauth-proxy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd expirty timestamp for encrypted tokens  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6538\"\u003ebetter-auth/better-auth#6538\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9f6b8e753\"\u003e\u003c!-- raw HTML omitted --\u003e(9f6b8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eone-time-token\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport setting session cookie on ott verify  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3659\"\u003ebetter-auth/better-auth#3659\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/08e057c19\"\u003e\u003c!-- raw HTML omitted --\u003e(08e05)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eorganization\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAllow invited users to see organization name  -  by \u003ca href=\"https://github.com/GautamBytes\"\u003e\u003ccode\u003e@​GautamBytes\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eCopilot\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6602\"\u003ebetter-auth/better-auth#6602\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/a24761eb3\"\u003e\u003c!-- raw HTML omitted --\u003e(a2476)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ephone-number\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAdd password length validation for reset functionality  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6674\"\u003ebetter-auth/better-auth#6674\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/4cdf869c6\"\u003e\u003c!-- raw HTML omitted --\u003e(4cdf8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esaml\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eAssertion timestamp validation with per-provider clock skew  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6706\"\u003ebetter-auth/better-auth#6706\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/90c597a9d\"\u003e\u003c!-- raw HTML omitted --\u003e(90c59)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate SAML crypto algorithms during initial phase  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6785\"\u003ebetter-auth/better-auth#6785\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b56d7b8ea\"\u003e\u003c!-- raw HTML omitted --\u003e(b56d7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnforce one-time use of SAML assertions  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6719\"\u003ebetter-auth/better-auth#6719\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/2053f22bb\"\u003e\u003c!-- raw HTML omitted --\u003e(2053f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/1f171cb3f\"\u003e\u003c!-- raw HTML omitted --\u003e(1f171)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject deprecated SAML signature and digest algorithms  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6784\"\u003ebetter-auth/better-auth#6784\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/5bab61c32\"\u003e\u003c!-- raw HTML omitted --\u003e(5bab6)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esso\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eUse domain verified flag to trust providers automatically  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/6f2831163\"\u003e\u003c!-- raw HTML omitted --\u003e(6f283)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd InResponseTo validation  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6557\"\u003ebetter-auth/better-auth#6557\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/50ffecbfa\"\u003e\u003c!-- raw HTML omitted --\u003e(50ffe)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd OIDC discovery  -  by \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6395\"\u003ebetter-auth/better-auth#6395\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/57400bf2a\"\u003e\u003c!-- raw HTML omitted --\u003e(57400)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd URL normalization and validation to all discovery URLs  -  by \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003ePaola Estefanía de Campos\u003c/strong\u003e, \u003ca href=\"https://github.com/Paola3stefania\"\u003e\u003ccode\u003e@​Paola3stefania\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6503\"\u003ebetter-auth/better-auth#6503\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/17ff1a01e\"\u003e\u003c!-- raw HTML omitted --\u003e(17ff1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd helper types to exports  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6479\"\u003ebetter-auth/better-auth#6479\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9b556f3d9\"\u003e\u003c!-- raw HTML omitted --\u003e(9b556)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid throwing on client side  -  by \u003ca href=\"https://github.com/landoncolburn\"\u003e\u003ccode\u003e@​landoncolburn\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6361\"\u003ebetter-auth/better-auth#6361\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/b4f45848d\"\u003e\u003c!-- raw HTML omitted --\u003e(b4f45)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExport organization plugin types  -  by \u003ca href=\"https://github.com/pffigueiredo\"\u003e\u003ccode\u003e@​pffigueiredo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6490\"\u003ebetter-auth/better-auth#6490\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/8efd5cdb0\"\u003e\u003c!-- raw HTML omitted --\u003e(8efd5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePathname should be normalized when basePath is set to root  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9228c9e11\"\u003e\u003c!-- raw HTML omitted --\u003e(9228c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrematurely deleting active sessions in secondary storage  -  by \u003ca href=\"https://github.com/DevDuki\"\u003e\u003ccode\u003e@​DevDuki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/3885\"\u003ebetter-auth/better-auth#3885\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/45cf48462\"\u003e\u003c!-- raw HTML omitted --\u003e(45cf4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake sure non-chunked session data cookie is cleared  -  by \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/26b2b837a\"\u003e\u003c!-- raw HTML omitted --\u003e(26b2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eArray field handling across adapters and schema generation  -  by \u003ca href=\"https://github.com/ping-maxwell\"\u003e\u003ccode\u003e@​ping-maxwell\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Bekacru\"\u003e\u003ccode\u003e@​Bekacru\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6601\"\u003ebetter-auth/better-auth#6601\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/9d3d1d4c6\"\u003e\u003c!-- raw HTML omitted --\u003e(9d3d1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStoreStateStrategy default to database if provided  -  by \u003ca href=\"https://github.com/himself65\"\u003e\u003ccode\u003e@​himself65\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6619\"\u003ebetter-auth/better-auth#6619\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/880e7c76c\"\u003e\u003c!-- raw HTML omitted --\u003e(880e7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eShould always remove 2FA verification token after successful verification  -  by \u003ca href=\"https://github.com/delfortrie\"\u003e\u003ccode\u003e@​delfortrie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/better-auth/better-auth/issues/6604\"\u003ebetter-auth/better-auth#6604\u003c/a\u003e \u003ca href=\"https://github.com/better-auth/better-auth/commit/13efb8540\"\u003e\u003c!-- raw HTML omitted --\u003e(13efb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/35fcd1aa89b6e9978d7b34ec971066d6a8f1e4e3\"\u003e\u003ccode\u003e35fcd1a\u003c/code\u003e\u003c/a\u003e chore: release v1.4.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/b96c38bddce6d17a9714c865d8fa01f4390f35fb\"\u003e\u003ccode\u003eb96c38b\u003c/code\u003e\u003c/a\u003e Merge branch 'canary'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/148b32e0cb5e143d31f070eaa2781d0cf471b928\"\u003e\u003ccode\u003e148b32e\u003c/code\u003e\u003c/a\u003e chore: release v1.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/5c2180e96797b1b79c4242eb0956709413a2270d\"\u003e\u003ccode\u003e5c2180e\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/ae90b482d09ff7085aae1df24cfbce541b525ef6\"\u003e\u003ccode\u003eae90b48\u003c/code\u003e\u003c/a\u003e fix: correct wildcard pattern matching for \u003ccode\u003etrustedOrigins\u003c/code\u003e (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6904\"\u003e#6904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/70d49e760587220f79c840b1a648b04a134e5912\"\u003e\u003ccode\u003e70d49e7\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/cd77223b3b93ab527986c62f429183275438a384\"\u003e\u003ccode\u003ecd77223\u003c/code\u003e\u003c/a\u003e fix: don't set state query param if state is not provided (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6822\"\u003e#6822\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/60c77fa45d3732268e6adcaafdac7b923021d78a\"\u003e\u003ccode\u003e60c77fa\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/da820851a7dd0eddfa2de51039911464fe45b881\"\u003e\u003ccode\u003eda82085\u003c/code\u003e\u003c/a\u003e fix: use operator in list members where clause (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6850\"\u003e#6850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/better-auth/better-auth/commit/d808c31dfa553c0a0e94a7c57be7458f7b318dd0\"\u003e\u003ccode\u003ed808c31\u003c/code\u003e\u003c/a\u003e fix(client): set session data on refreshManager (\u003ca href=\"https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth/issues/6932\"\u003e#6932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/better-auth/better-auth/commits/v1.4.9/packages/better-auth\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nodemailer` from 6.10.1 to 8.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/releases\"\u003enodemailer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md\"\u003enodemailer's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.4...v8.0.5\"\u003e8.0.5\u003c/a\u003e (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edecode SMTP server responses as UTF-8 at line boundary (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e95876b1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e0a43876\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.3...v8.0.4\"\u003e8.0.4\u003c/a\u003e (2026-03-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esanitize envelope size to prevent SMTP command injection (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e2d7b971\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.2...v8.0.3\"\u003e8.0.3\u003c/a\u003e (2026-03-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclean up addressparser and fix group name fallback producing undefined (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/9d55877f8ed15a6aefd7ba76cbb6b6a6cdbcc4fd\"\u003e9d55877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix cookie bugs, remove dead code, and improve hot-path efficiency (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003ee8c8b92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erefactor smtp-connection for clarity and add Node.js 6 syntax compat test (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c5b48ea61c28eabf347972f4198a12cdab226ff7\"\u003ec5b48ea\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove familySupportCache that broke DNS resolution tests (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003ec803d90\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.1...v8.0.2\"\u003e8.0.2\u003c/a\u003e (2026-03-09)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emerge fragmented display names with unquoted commas in addressparser (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/fe27f7fd57f7587d897274438da2f628ad0ad7d9\"\u003efe27f7f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v8.0.0...v8.0.1\"\u003e8.0.1\u003c/a\u003e (2026-02-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/7f8dde41438c66b8311e888fa5f8c518fcaba6f1\"\u003e7f8dde4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eabsorb TLS errors during socket teardown (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/381f628d55e62bb3131bd2a452fa1ce00bc48aea\"\u003e381f628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd Gmail Workspace service configuration (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1787\"\u003e#1787\u003c/a\u003e) (\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/dc97ede417b3030b311771541b1f17f5ca76bcbf\"\u003edc97ede\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.0\"\u003e8.0.0\u003c/a\u003e (2026-02-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eError code 'NoAuth' renamed to 'ENOAUTH'\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/202cfb3e14010223204e9ba9f7430176be624f0f\"\u003e\u003ccode\u003e202cfb3\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.5 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1809\"\u003e#1809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/b634abf05959edcc7207cdaba2c6541f92994cbb\"\u003e\u003ccode\u003eb634abf\u003c/code\u003e\u003c/a\u003e docs: add CLAUDE.md with project conventions and release process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/95876b103e587e49583e43f88cb2c3a61556f3ac\"\u003e\u003ccode\u003e95876b1\u003c/code\u003e\u003c/a\u003e fix: decode SMTP server responses as UTF-8 at line boundary\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/0a43876801a420ca528f492eaa01bfc421cc306e\"\u003e\u003ccode\u003e0a43876\u003c/code\u003e\u003c/a\u003e fix: sanitize CRLF in transport name option to prevent SMTP command injection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/08e59e64d0f8595fa535f07061787e0946372657\"\u003e\u003ccode\u003e08e59e6\u003c/code\u003e\u003c/a\u003e chore: update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d319753c34d2f0ced24d8eb1d7d866d965f59f4\"\u003e\u003ccode\u003e2d31975\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.4 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1806\"\u003e#1806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/2d7b9710e63555a1eb13d721296c51186d4b5651\"\u003e\u003ccode\u003e2d7b971\u003c/code\u003e\u003c/a\u003e fix: sanitize envelope size to prevent SMTP command injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/4e702e97650aaff442a7bc040957ba9c53c614b8\"\u003e\u003ccode\u003e4e702e9\u003c/code\u003e\u003c/a\u003e chore(master): release 8.0.3 (\u003ca href=\"https://redirect.github.com/nodemailer/nodemailer/issues/1804\"\u003e#1804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/c803d901f195a21edbb2c276b2e116564467aaaa\"\u003e\u003ccode\u003ec803d90\u003c/code\u003e\u003c/a\u003e fix: remove familySupportCache that broke DNS resolution tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodemailer/nodemailer/commit/e8c8b92f46f2a82d06d49cc9a6ffc26067f68524\"\u003e\u003ccode\u003ee8c8b92\u003c/code\u003e\u003c/a\u003e fix: fix cookie bugs, remove dead code, and improve hot-path efficiency\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodemailer/nodemailer/compare/v6.10.1...v8.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for nodemailer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lodash` from 4.17.21 to 4.18.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lodash/lodash/releases\"\u003elodash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.18.1\u003c/h2\u003e\n\u003ch2\u003eBugs\u003c/h2\u003e\n\u003cp\u003eFixes a \u003ccode\u003eReferenceError\u003c/code\u003e issue in \u003ccode\u003elodash\u003c/code\u003e \u003ccode\u003elodash-es\u003c/code\u003e \u003ccode\u003elodash-amd\u003c/code\u003e and \u003ccode\u003elodash.template\u003c/code\u003e when using the \u003ccode\u003etemplate\u003c/code\u003e and \u003ccode\u003efromPairs\u003c/code\u003e functions from the modular builds. See \u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6167#issuecomment-4165269769\"\u003elodash/lodash#6167\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThese defects were related to how lodash distributions are built from the main branch using \u003ca href=\"https://github.com/lodash-archive/lodash-cli\"\u003ehttps://github.com/lodash-archive/lodash-cli\u003c/a\u003e. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.\u003c/p\u003e\n\u003cp\u003eThere is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003elodash\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-es\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash-amd\u003c/code\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-amd...4.18.1-amd\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003elodash.template\u003c/code\u003e\u003ca href=\"https://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\"\u003ehttps://github.com/lodash/lodash/compare/4.18.0-npm-packages...4.18.1-npm-packages\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.18.0\u003c/h2\u003e\n\u003ch2\u003ev4.18.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.23...4.18.0\"\u003ehttps://github.com/lodash/lodash/compare/4.17.23...4.18.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.unset\u003c/code\u003e / \u003ccode\u003e_.omit\u003c/code\u003e\u003c/strong\u003e: Fixed prototype pollution via \u003ccode\u003econstructor\u003c/code\u003e/\u003ccode\u003eprototype\u003c/code\u003e path traversal (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh\"\u003eGHSA-f23m-r3pf-42rh\u003c/a\u003e, \u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003efe8d32e\u003c/a\u003e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now \u003ccode\u003econstructor\u003c/code\u003e and \u003ccode\u003eprototype\u003c/code\u003e are blocked unconditionally as non-terminal path keys, matching \u003ccode\u003ebaseSet\u003c/code\u003e. Calls that previously returned \u003ccode\u003etrue\u003c/code\u003e and deleted the property now return \u003ccode\u003efalse\u003c/code\u003e and leave the target untouched.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ccode\u003e_.template\u003c/code\u003e\u003c/strong\u003e: Fixed code injection via \u003ccode\u003eimports\u003c/code\u003e keys (\u003ca href=\"https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc\"\u003eGHSA-r5fr-rjxr-66jc\u003c/a\u003e, CVE-2026-4800, \u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e879aaa9\u003c/a\u003e). Fixes an incomplete patch for CVE-2021-23337. The \u003ccode\u003evariable\u003c/code\u003e option was validated against \u003ccode\u003ereForbiddenIdentifierChars\u003c/code\u003e but \u003ccode\u003eimportsKeys\u003c/code\u003e was left unguarded, allowing code injection via the same \u003ccode\u003eFunction()\u003c/code\u003e constructor sink. \u003ccode\u003eimports\u003c/code\u003e keys containing forbidden identifier characters now throw \u003ccode\u003e\u0026quot;Invalid imports option passed into _.template\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eDocs\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd security notice for \u003ccode\u003e_.template\u003c/code\u003e in threat model and API docs (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6099\"\u003e#6099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003elower \u0026gt; upper\u003c/code\u003e behavior in \u003ccode\u003e_.random\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6115\"\u003e#6115\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix quotes in \u003ccode\u003e_.compact\u003c/code\u003e jsdoc (\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6090\"\u003e#6090\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003elodash.*\u003c/code\u003e modular packages\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lodash/lodash/pull/6157\"\u003eDiff\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eWe have also regenerated and published a select number of the \u003ccode\u003elodash.*\u003c/code\u003e modular packages.\u003c/p\u003e\n\u003cp\u003eThese modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.orderby\"\u003elodash.orderby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.tonumber\"\u003elodash.tonumber\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trim\"\u003elodash.trim\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.trimend\"\u003elodash.trimend\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.sortedindexby\"\u003elodash.sortedindexby\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.zipobjectdeep\"\u003elodash.zipobjectdeep\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.unset\"\u003elodash.unset\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.omit\"\u003elodash.omit\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/lodash.template\"\u003elodash.template\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/cb0b9b9212521c08e3eafe7c8cb0af1b42b6649e\"\u003e\u003ccode\u003ecb0b9b9\u003c/code\u003e\u003c/a\u003e release(patch): bump main to 4.18.1 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6177\"\u003e#6177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/75535f57883b7225adb96de1cfc1cd4169cfcb51\"\u003e\u003ccode\u003e75535f5\u003c/code\u003e\u003c/a\u003e chore: prune stale advisory refs (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6170\"\u003e#6170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/62e91bc6a39c98d85b9ada8c44d40593deaf82a4\"\u003e\u003ccode\u003e62e91bc\u003c/code\u003e\u003c/a\u003e docs: remove n_ Node.js \u0026lt; 6 REPL note from README (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6165\"\u003e#6165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4\"\u003e\u003ccode\u003e59be2de\u003c/code\u003e\u003c/a\u003e release(minor): bump to 4.18.0 (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6161\"\u003e#6161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d\"\u003e\u003ccode\u003eaf63457\u003c/code\u003e\u003c/a\u003e fix: broken tests for _.template 879aaa9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0\"\u003e\u003ccode\u003e1073a76\u003c/code\u003e\u003c/a\u003e fix: linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6\"\u003e\u003ccode\u003e879aaa9\u003c/code\u003e\u003c/a\u003e fix: validate imports keys in _.template\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b\"\u003e\u003ccode\u003efe8d32e\u003c/code\u003e\u003c/a\u003e fix: block prototype pollution in baseUnset via constructor/prototype traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d\"\u003e\u003ccode\u003e18ba0a3\u003c/code\u003e\u003c/a\u003e refactor(fromPairs): use baseAssignValue for consistent assignment (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2\"\u003e\u003ccode\u003eb819080\u003c/code\u003e\u003c/a\u003e ci: add dist sync validation workflow (\u003ca href=\"https://redirect.github.com/lodash/lodash/issues/6137\"\u003e#6137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lodash/lodash/compare/4.17.21...4.18.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 6.0.0 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.9.0 to 1.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.15.0\u003c/h2\u003e\n\u003cp\u003eThis release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eDeprecation:\u003c/strong\u003e \u003ccode\u003eurl.parse()\u003c/code\u003e usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed a \u003ccode\u003eno_proxy\u003c/code\u003e hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHeader Injection:\u003c/strong\u003e Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10660\"\u003e#10660\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Support:\u003c/strong\u003e Added compatibility checks and documentation for Deno and Bun environments. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10652\"\u003e#10652\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10653\"\u003e#10653\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eCI Security:\u003c/strong\u003e Hardened workflow permissions to least privilege, added the \u003ccode\u003ezizmor\u003c/code\u003e security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10618\"\u003e#10618\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10619\"\u003e#10619\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10627\"\u003e#10627\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10637\"\u003e#10637\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDependencies:\u003c/strong\u003e Bumped \u003ccode\u003eserialize-javascript\u003c/code\u003e, \u003ccode\u003ehandlebars\u003c/code\u003e, \u003ccode\u003epicomatch\u003c/code\u003e, \u003ccode\u003evite\u003c/code\u003e, and \u003ccode\u003edenoland/setup-deno\u003c/code\u003e to latest versions. Added a 7-day Dependabot cooldown period. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10574\"\u003e#10574\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10572\"\u003e#10572\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10568\"\u003e#10568\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10616\"\u003e#10616\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eDocumentation:\u003c/strong\u003e Unified docs, improved \u003ccode\u003ebeforeRedirect\u003c/code\u003e credential leakage example, clarified \u003ccode\u003ewithCredentials\u003c/code\u003e/\u003ccode\u003ewithXSRFToken\u003c/code\u003e behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10649\"\u003e#10649\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7471\"\u003e#7471\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10654\"\u003e#10654\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10644\"\u003e#10644\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHousekeeping:\u003c/strong\u003e Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10584\"\u003e#10584\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10650\"\u003e#10650\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10582\"\u003e#10582\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10640\"\u003e#10640\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10659\"\u003e#10659\u003c/a\u003e\u003c/strong\u003e, \u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTests:\u003c/strong\u003e Added regression coverage for urlencoded \u003ccode\u003eContent-Type\u003c/code\u003e casing. (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10573\"\u003e#10573\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Kilros0817\"\u003e\u003ccode\u003e@​Kilros0817\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10625\"\u003e#10625\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/ashstrc\"\u003e\u003ccode\u003e@​ashstrc\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10624\"\u003e#10624\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/Abhi3975\"\u003e\u003ccode\u003e@​Abhi3975\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/10589\"\u003e#10589\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/theamodhshetty\"\u003e\u003ccode\u003e@​theamodhshetty\u003c/code\u003e\u003c/a\u003e\u003c/strong\u003e (\u003cstrong\u003e\u003ca href=\"https://redirect.github.com/axios/axios/issues/7452\"\u003e#7452\u003c/a\u003e\u003c/strong\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.14.0\u003c/h2\u003e\n\u003cp\u003eThis release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Important Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBreaking Changes:\u003c/strong\u003e None identified in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eAction Required:\u003c/strong\u003e If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 alignment and \u003ccode\u003emain\u003c/code\u003e entry compatibility fix).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRuntime Features:\u003c/strong\u003e No new end-user features were introduced in this release.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTest Coverage Expansion:\u003c/strong\u003e Added broader smoke/module test coverage for CJS and ESM package usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7510\"\u003e#7510\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHeaders:\u003c/strong\u003e Trim trailing CRLF in normalised header values. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7456\"\u003e#7456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP/2:\u003c/strong\u003e Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7457\"\u003e#7457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eFetch Adapter:\u003c/strong\u003e Cancel \u003ccode\u003eReadableStream\u003c/code\u003e created during request-stream capability probing to prevent async resource leaks. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7515\"\u003e#7515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eProxy Handling:\u003c/strong\u003e Fixed env proxy behavior with \u003ccode\u003eproxy-from-env\u003c/code\u003e v2 usage. (\u003ca href=\"https://redirect.github.com/axios/axios/pull/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.13.3\"\u003e1.13.3\u003c/a\u003e (2026-01-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehttp2:\u003c/strong\u003e Use port 443 for HTTPS connections by default. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7256\"\u003e#7256\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e\"\u003ed7e6065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003einterceptor:\u003c/strong\u003e handle the error in the same interceptor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6269\"\u003e#6269\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89\"\u003e5945e40\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emain field in package.json should correspond to cjs artifacts (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5756\"\u003e#5756\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04\"\u003e7373fbf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epackage.json:\u003c/strong\u003e add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5754\"\u003e#5754\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8\"\u003eb89217e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esilentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7257\"\u003e#7257\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf\"\u003e7d19335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eturn AxiosError into a native error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5394\"\u003e#5394\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5558\"\u003e#5558\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b\"\u003e1c6a86d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add handlers to AxiosInterceptorManager interface (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5551\"\u003e#5551\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a\"\u003e8d1271b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e restore AxiosError.cause type from unknown to Error (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7327\"\u003e#7327\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b\"\u003ed8233d9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eunclear error message is thrown when specifying an empty proxy authorization (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6314\"\u003e#6314\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29\"\u003e6ef867e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eundefined\u003c/code\u003e as a value in AxiosRequestConfig (\u003ca href=\"https://redirect.github.com/axios/axios/issues/5560\"\u003e#5560\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd\"\u003e095033c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd automatic minor and patch upgrades to dependabot (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6053\"\u003e#6053\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed\"\u003e65a7584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Node.js coverage script using c8 (closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7289\"\u003e#7289\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7294\"\u003e#7294\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a\"\u003eec9d94e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadded copilot instructions (\u003ca href=\"https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26\"\u003e3f83143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecompatibility with frozen prototypes (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6265\"\u003e#6265\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012\"\u003e860e033\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance pipeFileToResponse with error handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7169\"\u003e#7169\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552\"\u003e88d7884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Intellisense for string literals in a widened union (\u003ca href=\"https://redirect.github.com/axios/axios/issues/6134\"\u003e#6134\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5\"\u003ef73474d\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329\"\u003emicrosoft/TypeScript#33471\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;fix: silentJSONParsing=false should throw on invalid JSON (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e…\u0026quot; (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a\"\u003ea4230f5\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/axios/axios/issues/7253\"\u003e#7253\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7\"\u003e#7\u003c/a\u003e \u003ca href=\"https://redirect.github.com/axios/axios/issues/7298\"\u003e#7298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/7334\"\u003e#7334\u003c/a\u003e) (\u003ca href=\"https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a\"\u003e2d6ad5e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eContributors to this release\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/ashvin2005\" title=\"+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )\"\u003eAshvin Tiwari\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/mochinikunj\" title=\"+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )\"\u003eNikunj Mochi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/imanchalsingh\" title=\"+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )\"\u003eAnchal Singh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/jasonsaayman\" title=\"+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )\"\u003ejasonsaayman\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/brodo\" title=\"+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )\"\u003eJulian Dax\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/AKASHDHARDUBEY\" title=\"+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )\"\u003eAkash Dhar Dubey\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/madhumitaaa\" title=\"+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )\"\u003eMadhumita\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Tackoil\" title=\"+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )\"\u003eTackoil\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/justindhillon\" title=\"+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )\"\u003eJustin Dhillon\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Rudrxxx\" title=\"+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )\"\u003eRudransh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/WuMingDao\" title=\"+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )\"\u003eWuMingDao\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/codenomnom\" title=\"+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )\"\u003ecodenomnom\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/Nandann018-ux\" title=\"+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )\"\u003eNandan Acharya\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/KernelDeimos\" title=\"+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )\"\u003eEric Dubé\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/tiborpilz\" title=\"+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )\"\u003eTibor Pilz\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/joaoGabriel55\" title=\"+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )\"\u003eGabriel Quaresma\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003c!-- raw HTML omitted --\u003e \u003ca href=\"https://github.com/turadg\" title=\"+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )\"\u003eTuradg Aleahmad\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7\"\u003e\u003ccode\u003e772a4e5\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.15.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10671\"\u003e#10671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22\"\u003e\u003ccode\u003e4b07137\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10663\"\u003e#10663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6\"\u003e\u003ccode\u003e51e57b3\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10664\"\u003e#10664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa\"\u003e\u003ccode\u003efba1a77\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10665\"\u003e#10665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e\"\u003e\u003ccode\u003e0bf6e28\u003c/code\u003e\u003c/a\u003e chore(deps): bump denoland/setup-deno in the github-actions group (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10669\"\u003e#10669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661\"\u003e\u003ccode\u003e8107157\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10670\"\u003e#10670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542\"\u003e\u003ccode\u003ee66530e\u003c/code\u003e\u003c/a\u003e ci: require npm-publish environment for releases (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10666\"\u003e#10666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2\"\u003e\u003ccode\u003e49f23cb\u003c/code\u003e\u003c/a\u003e chore(sponsor): update sponsor block (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10668\"\u003e#10668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1\"\u003e\u003ccode\u003e3631854\u003c/code\u003e\u003c/a\u003e fix: unrestricted cloud metadata exfiltration via header injection chain (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10\"\u003e#10\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df\"\u003e\u003ccode\u003efb3befb\u003c/code\u003e\u003c/a\u003e fix: no_proxy hostname normalization bypass leads to ssrf (\u003ca href=\"https://redirect.github.com/axios/axios/issues/10661\"\u003e#10661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.9.0...v1.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by [GitHub Actions](\u003ca href=\"https://www.npmjs.com/~GitHub\"\u003ehttps://www.npmjs.com/~GitHub\u003c/a\u003e Actions), a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6c353caf23beb9644f858eb3fe38d43a68b82898\"\u003e\u003ccode\u003e6c353ca\u003c/code\u003e\u003c/a\u003e 1.1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2\"\u003e\u003ccode\u003e7fd684f\u003c/code\u003e\u003c/a\u003e Backport fix for GHSA-f886-m6hf-6m8v (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/95\"\u003e#95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/44f33b47c5c6a965d507421af43e86cf5971d711\"\u003e\u003ccode\u003e44f33b4\u003c/code\u003e\u003c/a\u003e 1.1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c460dbd68e428d147b2080622d8ce126c7a08570\"\u003e\u003ccode\u003ec460dbd\u003c/code\u003e\u003c/a\u003e pkg: publish on tag 1.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ccb8ac6d4292b7661b677fe048ba6690c877f51f\"\u003e\u003ccode\u003eccb8ac6\u003c/code\u003e\u003c/a\u003e fmt\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217\"\u003e\u003ccode\u003ec3c73c8\u003c/code\u003e\u003c/a\u003e Fix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `defu` from 6.1.4 to 6.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/releases\"\u003edefu's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/unjs/defu/blob/main/CHANGELOG.md\"\u003edefu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.7\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.6...v6.1.7\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edefu.d.cts:\u003c/strong\u003e Export Defu types (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCorrect the \u003ccode\u003etypes\u003c/code\u003e export entry (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eJakub Michálek (\u003ca href=\"https://github.com/J-Michalek\"\u003e\u003ccode\u003e@​J-Michalek\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKricsleo (\u003ca href=\"https://github.com/kricsleo\"\u003e\u003ccode\u003e@​kricsleo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.6\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.5...v6.1.6\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e📦 Build\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix mixed types (\u003ca href=\"https://github.com/unjs/defu/commit/407b516\"\u003e407b516\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e❤️ Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePooya Parsa (\u003ca href=\"https://github.com/pi0\"\u003e\u003ccode\u003e@​pi0\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.1.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/unjs/defu/compare/v6.1.4...v6.1.5\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent prototype pollution via \u003ccode\u003e__proto__\u003c/code\u003e in defaults (\u003ca href=\"https://redirect.github.com/unjs/defu/pull/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIgnore inherited enumerable properties (\u003ca href=\"https://github.com/unjs/defu/commit/11ba022\"\u003e11ba022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🏡 Chore\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tea.yaml (\u003ca href=\"https://github.com/unjs/defu/commit/70cffe5\"\u003e70cffe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate repo (\u003ca href=\"https://github.com/unjs/defu/commit/23cc432\"\u003e23cc432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typecheck (\u003ca href=\"https://github.com/unjs/defu/commit/89df6bb\"\u003e89df6bb\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e✅ Tests\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd more tests for plain objects (\u003ca href=\"https://github.com/unjs/defu/commit/b65f603\"\u003eb65f603\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🤖 CI\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/80c0146afb11ebd86183a579ec469f3abd976695\"\u003e\u003ccode\u003e80c0146\u003c/code\u003e\u003c/a\u003e chore(release): v6.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/unjs/defu/commit/40d7ef42d...\n\n_Description has been truncated_","html_url":"https://github.com/c6ai/helicone/pull/24","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/c6ai%2Fhelicone/issues/24","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/24/packages"}},{"old_version":"5.0.2","new_version":"6.0.1","update_type":"major","path":null,"pr_created_at":"2026-04-05T04:15:10.000Z","version_change":"5.0.2 → 6.0.1","issue":{"uuid":"4206421571","node_id":"PR_kwDONn5tdM7QAzlH","number":1,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 8 directories with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-05T04:15:10.000Z","updated_at":"2026-04-05T04:15:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"jsondiffpatch","old_version":"0.4.1","new_version":"0.7.3","repository_url":"https://github.com/benjamine/jsondiffpatch"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"nanoid","old_version":"4.0.2","new_version":"5.1.7","repository_url":"https://github.com/ai/nanoid"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"file-type","old_version":"18.7.0","new_version":"22.0.0","repository_url":"https://github.com/sindresorhus/file-type"},{"name":"parse-duration","old_version":"1.1.2","new_version":"2.1.5","repository_url":"https://github.com/jkroso/parse-duration"},{"name":"@hapi/content","old_version":"5.0.2","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 1 update in the /packages/interface-ipfs-core directory: [nanoid](https://github.com/ai/nanoid).\nBumps the npm_and_yarn group with 3 updates in the /packages/ipfs-cli directory: [nanoid](https://github.com/ai/nanoid), [jsondiffpatch](https://github.com/benjamine/jsondiffpatch) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-core directory: [nanoid](https://github.com/ai/nanoid) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-core-utils directory: [nanoid](https://github.com/ai/nanoid) and [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-grpc-server directory: [nanoid](https://github.com/ai/nanoid).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-http-client directory: [parse-duration](https://github.com/jkroso/parse-duration).\nBumps the npm_and_yarn group with 1 update in the /packages/ipfs-http-response directory: [file-type](https://github.com/sindresorhus/file-type).\nBumps the npm_and_yarn group with 2 updates in the /packages/ipfs-http-server directory: [parse-duration](https://github.com/jkroso/parse-duration) and [@hapi/content](https://github.com/hapijs/content).\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jsondiffpatch` from 0.4.1 to 0.7.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/benjamine/jsondiffpatch/releases\"\u003ejsondiffpatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003ch2\u003eBreaking changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eThis package is now pure ESM. For more info, please read \u003ca href=\"https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c\"\u003eSindre Sorhus's FAQ\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSupported Node versions are \u003ccode\u003e^18.0.0 || \u0026gt;=20.0.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRequires ES6 support (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThere is no longer a default export. Import this package by using \u003ccode\u003eimport * as jsondiffpatch from 'jsondiffpatch'\u003c/code\u003e or by importing individual methods (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFormatters are no longer exported from the main entry-point and must be imported from subpaths (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e):\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport * as annotatedFormatter from 'jsondiffpatch/formatters/annotated'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as baseFormatter from 'jsondiffpatch/formatters/base'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as consoleFormatter from 'jsondiffpatch/formatters/console'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as htmlFormatter from 'jsondiffpatch/formatters/html'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport * as jsonpatchFormatter from 'jsondiffpatch/formatters/jsonpatch'\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eUpdated CSS imports (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/350\"\u003e#350\u003c/a\u003e):\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport 'jsondiffpatch/formatters/styles/html.css'\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimport 'jsondiffpatch/formatters/styles/annotated.css'\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eThe main entry-point no longer includes text diffing by default. Either pass in the diff-match-patch library via the \u003ccode\u003etextDiff.diffMatchPatch\u003c/code\u003e option, or use the \u003ccode\u003ejsondiffpatch/with-text-diffs\u003c/code\u003e entry point that is included for convenience (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/352\"\u003e#352\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContext.switchTo()\u003c/code\u003e has been removed (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/345\"\u003e#345\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eBaseFormatter.typeFormattterErrorFormatter()\u003c/code\u003e now throws an error instead of returning a \u003ccode\u003estring\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/issues/345\"\u003e#345\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThe UMD browser bundle has been removed. If you were using a \u003ccode\u003escript\u003c/code\u003e tag to include \u003ccode\u003ejsondiffpatch\u003c/code\u003e in your project, you can now import it inside of your main \u003ccode\u003escript\u003c/code\u003e tag as show below. For a more complete example, see the Visual Diff example \u003ca href=\"https://github.com/benjamine/jsondiffpatch/tree/v0.5.0?tab=readme-ov-file#visual-diff\"\u003ebefore\u003c/a\u003e and \u003ca href=\"https://github.com/benjamine/jsondiffpatch/tree/469f6a7d4660eb9dcbf965271889ad452e86de75?tab=readme-ov-file#visual-diff\"\u003eafter\u003c/a\u003e this change.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"html\"\u003e\u003ccode\u003e\u0026lt;!doctype html\u0026gt;\r\n\u0026lt;html\u0026gt;\r\n  \u0026lt;head\u0026gt;\r\n    \u0026lt;link\r\n      rel=\u0026quot;stylesheet\u0026quot;\r\n      href=\u0026quot;https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/html.css\u0026quot;\r\n      type=\u0026quot;text/css\u0026quot;\r\n    /\u0026gt;\r\n    \u0026lt;link\r\n      rel=\u0026quot;stylesheet\u0026quot;\r\n      href=\u0026quot;https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/annotated.css\u0026quot;\r\n      type=\u0026quot;text/css\u0026quot;\r\n    /\u0026gt;\r\n  \u0026lt;/head\u0026gt;\r\n  \u0026lt;body\u0026gt;\r\n    \u0026lt;script type=\u0026quot;module\u0026quot;\u0026gt;\r\n      import * as jsondiffpatch from 'https://esm.sh/jsondiffpatch@0.6.0';\r\n      import * as annotatedFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/annotated';\r\n      import * as htmlFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/html';\r\n\u003cpre\u003e\u003ccode\u003e  ...\r\n\u0026amp;lt;/script\u0026amp;gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u0026lt;/body\u0026gt;\u003cbr /\u003e\n\u0026lt;/html\u0026gt;\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003ch2\u003eOther changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix demo link in formatters doc by \u003ca href=\"https://github.com/johnrees\"\u003e\u003ccode\u003e@​johnrees\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/benjamine/jsondiffpatch/pull/311\"\u003ebenjamine/jsondiffpatch#311\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/benjamine/jsondiffpatch/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 4.0.2 to 5.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support  (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.1.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e--version\u003c/code\u003e to CLI (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eUpdated \u003ccode\u003enanoid.js\u003c/code\u003e for CDN (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/mahmoodhamdi\"\u003e\u003ccode\u003e@​mahmoodhamdi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003ecustomRandom\u003c/code\u003e types (by \u003ca href=\"https://github.com/oguimbal\"\u003e\u003ccode\u003e@​oguimbal\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on 0 size for \u003ccode\u003ecustomAlphabet\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed latest version on npm after 3.x release.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed module docs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed opaque types support for non-secure generator.\u003c/li\u003e\n\u003cli\u003eAdded JSR support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded opaque types support (by \u003ca href=\"https://github.com/kossnocorp\"\u003e\u003ccode\u003e@​kossnocorp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a way to break Nano ID by passing non-integer size (by \u003ca href=\"https://github.com/myndzi\"\u003e\u003ccode\u003e@​myndzi\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced \u003ccode\u003ecustomAlphabet\u003c/code\u003e size (by \u003ca href=\"https://github.com/kirillgroshkov\"\u003e\u003ccode\u003e@​kirillgroshkov\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Parcel support (by \u003ca href=\"https://github.com/WilhelmYakunin\"\u003e\u003ccode\u003e@​WilhelmYakunin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake browser’s version faster by increasing size a little (by Samuel Elgozi).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by \u003ca href=\"https://github.com/ilyaboka\"\u003e\u003ccode\u003e@​ilyaboka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed CLI docs (by Chris Schmich).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/90f047e75a0fed0f7c2be1a7d195a805e4d605d4\"\u003e\u003ccode\u003e90f047e\u003c/code\u003e\u003c/a\u003e Release 5.1.7 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/7071a42b0101e39d21111da72e13c46dc8ae596d\"\u003e\u003ccode\u003e7071a42\u003c/code\u003e\u003c/a\u003e Fix Node.js 18 support in CLI in another way\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8239c4bcab57f589615e79319b0f80aff7eca2c5\"\u003e\u003ccode\u003e8239c4b\u003c/code\u003e\u003c/a\u003e Fix CLI support for Node.js 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/2db7c6b6c445e5b3cea323367f66c8d6098ae01c\"\u003e\u003ccode\u003e2db7c6b\u003c/code\u003e\u003c/a\u003e Fix ESLint warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1231ca777f5c77e90804b57e30828b63bb5f5090\"\u003e\u003ccode\u003e1231ca7\u003c/code\u003e\u003c/a\u003e Update clean-publish and ESLint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/c7ca9e9ba122edd34da3f45e270486efe2661e79\"\u003e\u003ccode\u003ec7ca9e9\u003c/code\u003e\u003c/a\u003e Fix outdated info and links in README (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/566\"\u003e#566\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e0a30808016ad4f7d2af30a2dc53fada57cfe27f\"\u003e\u003ccode\u003ee0a3080\u003c/code\u003e\u003c/a\u003e Clean up code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e9be4aa09fbbbbb8fbfd4e12c80428d17c478ecc\"\u003e\u003ccode\u003ee9be4aa\u003c/code\u003e\u003c/a\u003e Add --version flag to CLI (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/563\"\u003e#563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/1d6f2ffb1a42cba8da12684d0b033910ba570420\"\u003e\u003ccode\u003e1d6f2ff\u003c/code\u003e\u003c/a\u003e Improve prebuild control\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d8fba79dbfd8547b10d7192d4d75f38e91141c81\"\u003e\u003ccode\u003ed8fba79\u003c/code\u003e\u003c/a\u003e Update collision calculator URL in all README translations (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/4.0.2...5.1.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `file-type` from 18.7.0 to 22.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/file-type/releases\"\u003efile-type's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev22.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eRequires Node.js 22\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eDropped Node.js \u003ccode\u003estream.Readable\u003c/code\u003e support from \u003ccode\u003efileTypeFromStream()\u003c/code\u003e and \u003ccode\u003efileTypeStream()\u003c/code\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThese now only accept a web \u003ccode\u003eReadableStream\u003c/code\u003e. Migrate with \u003ca href=\"https://nodejs.org/api/stream.html#streamreadabletowebstreamreadable-options\"\u003e\u003ccode\u003eReadable.toWeb()\u003c/code\u003e\u003c/a\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// Before\r\nimport fs from 'node:fs';\r\nfileTypeFromStream(fs.createReadStream('file.mp4'));\r\n\u003cp\u003e// After\u003cbr /\u003e\nimport fs from 'node:fs';\u003cbr /\u003e\nimport {Readable} from 'node:stream';\u003cbr /\u003e\nfileTypeFromStream(Readable.toWeb(fs.createReadStream('file.mp4')));\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSub-exports (e.g. \u003ccode\u003efile-type/core\u003c/code\u003e) have been removed. Import everything from \u003ccode\u003efile-type\u003c/code\u003e directly.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe \u003ccode\u003eReadableStreamWithFileType\u003c/code\u003e type has been removed. Use \u003ccode\u003eAnyWebReadableByteStreamWithFileType\u003c/code\u003e instead.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSeveral MIME types have been corrected or normalized:\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eType\u003c/th\u003e\n\u003cth\u003eOld MIME\u003c/th\u003e\n\u003cth\u003eNew MIME\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003elz\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-lzip\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/lzip\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003elnk\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.ms.shortcut\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ms-shortcut\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eApple Alias\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.apple.alias\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-apple.alias\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003efbx\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x.autodesk.fbx\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-fbx\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eDraco\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/vnd.google.draco\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e\u003ccode\u003eapplication/x-ft-draco\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eMIME subtypes prefixed with \u003ccode\u003ex-ft-\u003c/code\u003e are custom types defined by this package (not IANA-registered).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded detection for Apple iWork files: \u003ccode\u003e.key\u003c/code\u003e (Keynote), \u003ccode\u003e.pages\u003c/code\u003e (Pages), \u003ccode\u003e.numbers\u003c/code\u003e (Numbers)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed LibreOffice OOXML files being incorrectly detected as ZIP when reading from streams\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/compare/v21.3.4...v22.0.0\"\u003ehttps://github.com/sindresorhus/file-type/compare/v21.3.4...v22.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev21.3.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHarden parser more  aec20a0\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/compare/v21.3.3...v21.3.4\"\u003ehttps://github.com/sindresorhus/file-type/compare/v21.3.3...v21.3.4\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/2c54d066efdf7511e42fa9f5e4cd160b67fb51e9\"\u003e\u003ccode\u003e2c54d06\u003c/code\u003e\u003c/a\u003e 22.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/0ba6e0b2b76382f9b61e7b9e8610bbf7ca0e5273\"\u003e\u003ccode\u003e0ba6e0b\u003c/code\u003e\u003c/a\u003e Tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/0e679c74a9cab31c7b2aa65f9ba8e241fbc205f1\"\u003e\u003ccode\u003e0e679c7\u003c/code\u003e\u003c/a\u003e Remove sub-exports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/7079af7357c8d0a3651d6aa2015ba3cbe0121b48\"\u003e\u003ccode\u003e7079af7\u003c/code\u003e\u003c/a\u003e Tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/ec77458ce49d89bdf8de808569c2c87b43e8ca73\"\u003e\u003ccode\u003eec77458\u003c/code\u003e\u003c/a\u003e Add support for iWork files (.key, .pages, .numbers)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/d4a975c316429d8ec0bccc6e92483e625be0f6b1\"\u003e\u003ccode\u003ed4a975c\u003c/code\u003e\u003c/a\u003e Fix LibreOffice OOXML files detected as ZIP in streams\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/5de64e26f81ad14b1f07cb5c5108de6e303f3b60\"\u003e\u003ccode\u003e5de64e2\u003c/code\u003e\u003c/a\u003e Normalize MIME types we invented with \u003ccode\u003ex-ft-\u003c/code\u003e prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/7a60fa9dc0b7dad71ad6d3146a28ab92eb079983\"\u003e\u003ccode\u003e7a60fa9\u003c/code\u003e\u003c/a\u003e Require Node.js 22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/6409e17c60c7fc988023c6186008b4986b2602cd\"\u003e\u003ccode\u003e6409e17\u003c/code\u003e\u003c/a\u003e Drop Node.js Readable stream support\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/file-type/commit/296e37c8c751a8a4a4a9bbdbe4e9579561ef275f\"\u003e\u003ccode\u003e296e37c\u003c/code\u003e\u003c/a\u003e Refactor to smaller files\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sindresorhus/file-type/compare/v18.7.0...v22.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `parse-duration` from 1.1.2 to 2.1.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jkroso/parse-duration/releases\"\u003eparse-duration's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBetter performance / memory \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSafer RE \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCustomizable placeholders\u003c/li\u003e\n\u003cli\u003eType declaraion for rewriting units \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/62\"\u003e#62\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.2...v2.1.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed type definitions\u003c/li\u003e\n\u003cli\u003eAdded abbrs \u003ccode\u003emo\u003c/code\u003e, \u003ccode\u003emth\u003c/code\u003e, \u003ccode\u003emicrosec\u003c/code\u003e, \u003ccode\u003enanosec\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eb\u003c/code\u003e abbr\u003c/li\u003e\n\u003cli\u003eRemoved \u003ccode\u003eμ\u003c/code\u003e as greek mu in favor of \u003ccode\u003e\u0026amp;micro;\u003c/code\u003e left in default set\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/jkroso/parse-duration/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces locales\u003c/li\u003e\n\u003cli\u003eMoves units into \u003ccode\u003eparse.unit\u003c/code\u003e object \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/56\"\u003e#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbandons CJS format in favour of ESM\u003c/li\u003e\n\u003cli\u003eAdds locale-dependent group/decimal separator \u003ca href=\"https://redirect.github.com/jkroso/parse-duration/issues/35\"\u003e#35\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/jkroso/parse-duration/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AKJUS/js-ipfs/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AKJUS/js-ipfs/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AKJUS%2Fjs-ipfs/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"4.1.1","new_version":"6.0.1","update_type":"major","path":null,"pr_created_at":"2026-04-04T04:36:20.000Z","version_change":"4.1.1 → 6.0.1","issue":{"uuid":"4203500215","node_id":"PR_kwDOEOPLYs7P63Y9","number":3,"state":"closed","title":"Bump @hapi/content and @hapi/hapi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T00:56:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-04T04:36:20.000Z","updated_at":"2026-05-27T00:56:50.000Z","time_to_close":4566028,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"4.1.1","new_version":"6.0.1"},{"name":"@hapi/hapi","repository_url":"https://github.com/hapijs/hapi","old_version":"18.4.1","new_version":"21.4.8"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.1 and updates ancestor dependency [@hapi/hapi](https://github.com/hapijs/hapi). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 4.1.1 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v4.1.1...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/hapi` from 18.4.1 to 21.4.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hapijs/hapi/releases\"\u003e\u003ccode\u003e@​hapi/hapi\u003c/code\u003e's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.0\u003c/h2\u003e\n\u003cp\u003e⚠️  This release contains security fixes, for more information see \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4425\"\u003ehapijs/hapi#4425\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev21.0.0\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4386\"\u003ehapijs/hapi#4386\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ehapi v21.0.0 is a medium-sized release focused on modernization and miscellaneous API improvements. All modules in the hapi.js ecosystem have been updated to officially support Node.js v18, be compatible with ESM projects, and drop support for Node.js v12. Plugins in the hapi.js ecosystem now support hapi v20+.\u003c/p\u003e\n\u003ch2\u003ev20.2.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.2.0\u003c/h2\u003e\n\u003ch1\u003eFeatures\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd optional payload authentication skip on credentials injection \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4214\"\u003e#4214\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4274\"\u003e#4274\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix handling of auth scheme/strategy realms \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4218\"\u003e#4218\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4281\"\u003e#4281\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eMiscellaneous\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003etest: Fix tests for node@16 error format change \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4282\"\u003e#4282\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4283\"\u003e#4283\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eCredits\u003c/h1\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/devinivy\"\u003e\u003ccode\u003e@​devinivy\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jonathansamines\"\u003e\u003ccode\u003e@​jonathansamines\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Nargonath\"\u003e\u003ccode\u003e@​Nargonath\u003c/code\u003e\u003c/a\u003e for contributing.\u003c/p\u003e\n\u003ch2\u003ev20.1.5\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.1.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.2\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev20.0.1\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/b9b1ba909992e41b8d0b0d90b6a59a23cd26ce6a\"\u003e\u003ccode\u003eb9b1ba9\u003c/code\u003e\u003c/a\u003e 21.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/924279c7b1fc594ee81ef6b92aa3e7821d40925d\"\u003e\u003ccode\u003e924279c\u003c/code\u003e\u003c/a\u003e chore: bump deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4568\"\u003e#4568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/f2a24f6635c0892842f6eaf9154d3788f2f1d084\"\u003e\u003ccode\u003ef2a24f6\u003c/code\u003e\u003c/a\u003e 21.4.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/ee8475b803f3804a56bbb2e449cb40cd14bf8154\"\u003e\u003ccode\u003eee8475b\u003c/code\u003e\u003c/a\u003e fix: 🐛 request.url getter fails when using IPv6 and HTTP2 \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4560\"\u003e#4560\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4559\"\u003e#4559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/509538273c8168609c283acba95d2ecd03b37bd2\"\u003e\u003ccode\u003e5095382\u003c/code\u003e\u003c/a\u003e 21.4.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/97c435fefea45b4a5ccfdb3873dd52da054f4d66\"\u003e\u003ccode\u003e97c435f\u003c/code\u003e\u003c/a\u003e Fix invalid hostname parsing for ipv6 formatted host header (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4564\"\u003e#4564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/62032e6d3189deb638cac8cd18e18607230f2a06\"\u003e\u003ccode\u003e62032e6\u003c/code\u003e\u003c/a\u003e 21.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/0ead0eca3c4e6d9e579a07353756004ca44c83a6\"\u003e\u003ccode\u003e0ead0ec\u003c/code\u003e\u003c/a\u003e fix: auth typings and reduced type ambiguity (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4562\"\u003e#4562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/303571b833f1d5d513e69d706cfcb79e12367f83\"\u003e\u003ccode\u003e303571b\u003c/code\u003e\u003c/a\u003e 21.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/c4d9c8df86bef76b6bad96cb509e59ac6ba64232\"\u003e\u003ccode\u003ec4d9c8d\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4557\"\u003e#4557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/hapi/compare/v18.4.1...v21.4.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/hapi\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/visualjeff/hapiHoster/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/visualjeff/hapiHoster/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/visualjeff%2FhapiHoster/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"5.0.2","new_version":"6.0.1","update_type":"major","path":null,"pr_created_at":"2026-04-04T04:34:07.000Z","version_change":"5.0.2 → 6.0.1","issue":{"uuid":"4203496577","node_id":"PR_kwDOG_SJ987P62sP","number":1,"state":"closed","title":"Bump @hapi/content and @hapi/hapi","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-27T00:52:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-04T04:34:07.000Z","updated_at":"2026-05-27T00:52:56.000Z","time_to_close":4565927,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","repository_url":"https://github.com/hapijs/content","old_version":"5.0.2","new_version":"6.0.1"},{"name":"@hapi/hapi","repository_url":"https://github.com/hapijs/hapi","old_version":"20.2.1","new_version":"21.4.8"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) to 6.0.1 and updates ancestor dependency [@hapi/hapi](https://github.com/hapijs/hapi). These dependencies need to be updated together.\n\nUpdates `@hapi/content` from 5.0.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/85ffdbd44c302074b8bbaa93f4700059f9e26500\"\u003e\u003ccode\u003e85ffdbd\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/f6c6495b077d4ea8bf0aaeb9897ab824dc1b9bf5\"\u003e\u003ccode\u003ef6c6495\u003c/code\u003e\u003c/a\u003e Support node v18, drop node v12 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/0057e1046d117068fbbaf234bd80de304df6afaa\"\u003e\u003ccode\u003e0057e10\u003c/code\u003e\u003c/a\u003e support parsing charset (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/4c5586553cbb511920fe714fcd79439eb2cd6325\"\u003e\u003ccode\u003e4c55865\u003c/code\u003e\u003c/a\u003e add dispatcher and use shared config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/08212a279c006b1ae8d717f386c24be302ba78a7\"\u003e\u003ccode\u003e08212a2\u003c/code\u003e\u003c/a\u003e add IDE linting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/18e1c55a29de1c869e7586d1b3ed43f326c63a77\"\u003e\u003ccode\u003e18e1c55\u003c/code\u003e\u003c/a\u003e Create ci-module.yml (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/31\"\u003e#31\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/3f6c7372ffc64abd10aa00f20a50d69367b136d0\"\u003e\u003ccode\u003e3f6c737\u003c/code\u003e\u003c/a\u003e upgrade lab to v24 (\u003ca href=\"https://redirect.github.com/hapijs/content/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/content/compare/v5.0.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hapi/hapi` from 20.2.1 to 21.4.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/hapijs/hapi/releases\"\u003e\u003ccode\u003e@​hapi/hapi\u003c/code\u003e's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.3.0\u003c/h2\u003e\n\u003cp\u003e⚠️  This release contains security fixes, for more information see \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4425\"\u003ehapijs/hapi#4425\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev21.0.0\u003c/h2\u003e\n\u003cp\u003eRelease notes: \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4386\"\u003ehapijs/hapi#4386\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003ehapi v21.0.0 is a medium-sized release focused on modernization and miscellaneous API improvements. All modules in the hapi.js ecosystem have been updated to officially support Node.js v18, be compatible with ESM projects, and drop support for Node.js v12. Plugins in the hapi.js ecosystem now support hapi v20+.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/b9b1ba909992e41b8d0b0d90b6a59a23cd26ce6a\"\u003e\u003ccode\u003eb9b1ba9\u003c/code\u003e\u003c/a\u003e 21.4.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/924279c7b1fc594ee81ef6b92aa3e7821d40925d\"\u003e\u003ccode\u003e924279c\u003c/code\u003e\u003c/a\u003e chore: bump deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4568\"\u003e#4568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/f2a24f6635c0892842f6eaf9154d3788f2f1d084\"\u003e\u003ccode\u003ef2a24f6\u003c/code\u003e\u003c/a\u003e 21.4.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/ee8475b803f3804a56bbb2e449cb40cd14bf8154\"\u003e\u003ccode\u003eee8475b\u003c/code\u003e\u003c/a\u003e fix: 🐛 request.url getter fails when using IPv6 and HTTP2 \u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4560\"\u003e#4560\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4559\"\u003e#4559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/509538273c8168609c283acba95d2ecd03b37bd2\"\u003e\u003ccode\u003e5095382\u003c/code\u003e\u003c/a\u003e 21.4.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/97c435fefea45b4a5ccfdb3873dd52da054f4d66\"\u003e\u003ccode\u003e97c435f\u003c/code\u003e\u003c/a\u003e Fix invalid hostname parsing for ipv6 formatted host header (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4564\"\u003e#4564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/62032e6d3189deb638cac8cd18e18607230f2a06\"\u003e\u003ccode\u003e62032e6\u003c/code\u003e\u003c/a\u003e 21.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/0ead0eca3c4e6d9e579a07353756004ca44c83a6\"\u003e\u003ccode\u003e0ead0ec\u003c/code\u003e\u003c/a\u003e fix: auth typings and reduced type ambiguity (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4562\"\u003e#4562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/303571b833f1d5d513e69d706cfcb79e12367f83\"\u003e\u003ccode\u003e303571b\u003c/code\u003e\u003c/a\u003e 21.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/hapi/commit/c4d9c8df86bef76b6bad96cb509e59ac6ba64232\"\u003e\u003ccode\u003ec4d9c8d\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/hapijs/hapi/issues/4557\"\u003e#4557\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/hapi/compare/v20.2.1...v21.4.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/hapi\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ryumada/hapi-web-server-new/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ryumada/hapi-web-server-new/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ryumada%2Fhapi-web-server-new/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"6.0.0","new_version":"6.0.1","update_type":"patch","path":null,"pr_created_at":"2026-04-04T04:34:02.000Z","version_change":"6.0.0 → 6.0.1","issue":{"uuid":"4203496429","node_id":"PR_kwDOPeYBOs7P62qZ","number":146,"state":"open","title":"Bump @hapi/content from 6.0.0 to 6.0.1","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-04-04T04:34:02.000Z","updated_at":"2026-04-04T04:36:09.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"@hapi/content","old_version":"6.0.0","new_version":"6.0.1","repository_url":"https://github.com/hapijs/content"}],"path":null,"ecosystem":"npm"},"body":"Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.0 to 6.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/e4233cee05535716991d02d55f82205514b10ae8\"\u003e\u003ccode\u003ee4233ce\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/ac9a2de79a50d5f84ba223d8dff28419838f379c\"\u003e\u003ccode\u003eac9a2de\u003c/code\u003e\u003c/a\u003e fix: protect regex from redos\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/content/commit/cce68b13c3c50bfae7aa7c5e0c1705e5f39a83c2\"\u003e\u003ccode\u003ecce68b1\u003c/code\u003e\u003c/a\u003e chore: pin eslint-plugin\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/content/compare/v6.0.0...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~marsup\"\u003emarsup\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hapi/content\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content\u0026package-manager=npm_and_yarn\u0026previous-version=6.0.0\u0026new-version=6.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DEFRA/forms-notify-listener/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DEFRA/forms-notify-listener/pull/146","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DEFRA%2Fforms-notify-listener/issues/146","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/146/packages"}}]}