{"id":102,"name":"axios","ecosystem":"npm","repository_url":"https://github.com/axios/axios","issues_count":73175,"created_at":"2025-06-06T15:01:32.736Z","updated_at":"2025-06-06T15:01:32.736Z","purl":"pkg:npm/axios","metadata":{"id":1448481,"name":"axios","ecosystem":"npm","description":"Promise based HTTP client for the browser and node.js","homepage":"https://axios-http.com","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/axios/axios","keywords_array":["xhr","http","ajax","promise","node"],"namespace":null,"versions_count":114,"first_release_published_at":"2014-08-29T23:08:36.810Z","latest_release_published_at":"2025-04-24T20:18:59.701Z","latest_release_number":"1.9.0","last_synced_at":"2025-06-06T07:30:37.889Z","created_at":"2022-04-09T01:32:52.381Z","updated_at":"2025-06-06T07:32:59.348Z","registry_url":"https://www.npmjs.com/package/axios","install_command":"npm install axios","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"next":"1.7.0-beta.2","latest":"1.9.0","old-version":"0.30.0"}},"repo_metadata":{"id":19827646,"uuid":"23088740","full_name":"axios/axios","owner":"axios","description":"Promise based HTTP client for the browser and node.js","archived":false,"fork":false,"pushed_at":"2025-06-01T16:57:50.000Z","size":20053,"stargazers_count":106990,"open_issues_count":678,"forks_count":11145,"subscribers_count":1180,"default_branch":"v1.x","last_synced_at":"2025-06-02T18:39:38.705Z","etag":null,"topics":["hacktoberfest","http-client","javascript","nodejs","promise"],"latest_commit_sha":null,"homepage":"https://axios-http.com","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/axios.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"open_collective":"axios","github":"axios"}},"created_at":"2014-08-18T22:30:27.000Z","updated_at":"2025-06-02T16:44:15.000Z","dependencies_parsed_at":"2023-09-25T03:02:29.514Z","dependency_job_id":"75483a1b-f033-4509-be3b-4b6296840214","html_url":"https://github.com/axios/axios","commit_stats":{"total_commits":1384,"total_committers":481,"mean_commits":"2.8773388773388775","dds":0.8410404624277457,"last_synced_commit":"ddb8683381ddbbfd6faeaaa0f8ff53f55f837594"},"previous_names":["mzabriskie/axios"],"tags_count":116,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/axios","download_url":"https://codeload.github.com/axios/axios/tar.gz/refs/heads/v1.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":258316362,"owners_count":22682085,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"axios","name":"axios","uuid":"32372333","kind":"organization","description":"","email":null,"website":"https://axios-http.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/32372333?v=4","repositories_count":4,"last_synced_at":"2025-06-01T07:52:24.455Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/axios","funding_links":["https://github.com/sponsors/axios"],"total_stars":108561,"followers":2237,"following":0,"created_at":"2022-11-02T16:20:25.966Z","updated_at":"2025-06-01T07:52:24.455Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/axios","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/axios/repositories"},"tags":[{"name":"v1.9.0","sha":"cdcfd214c169a1acba8e267ab8e77ff4dfec3105","kind":"tag","published_at":"2025-04-24T20:18:53.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.9.0","html_url":"https://github.com/axios/axios/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.9.0/manifests"},{"name":"v0.30.0","sha":"6e922e497616d8908616a9da0380f81d0244ef4b","kind":"commit","published_at":"2025-03-26T17:50:22.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.30.0","html_url":"https://github.com/axios/axios/releases/tag/v0.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.30.0/manifests"},{"name":"v1.8.4","sha":"9f6f97bcfb7c510103dfcb05641ae8e8f5c08bcc","kind":"tag","published_at":"2025-03-19T19:27:41.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.8.4","html_url":"https://github.com/axios/axios/releases/tag/v1.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.4/manifests"},{"name":"v1.8.3","sha":"39ec206483a89921732bdc8a5be67e350bfc23f0","kind":"tag","published_at":"2025-03-12T07:23:58.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.8.3","html_url":"https://github.com/axios/axios/releases/tag/v1.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.3/manifests"},{"name":"v1.8.2","sha":"a9f7689b0c4b6d68c7f587c3aa376860da509d94","kind":"tag","published_at":"2025-03-07T07:41:05.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.8.2","html_url":"https://github.com/axios/axios/releases/tag/v1.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.2/manifests"},{"name":"v1.8.1","sha":"2e64afdff5c41e38284a6fb8312f2745072513a1","kind":"tag","published_at":"2025-02-26T09:06:54.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.8.1","html_url":"https://github.com/axios/axios/releases/tag/v1.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.1/manifests"},{"name":"v1.8.0","sha":"cceb7b1e154fbf294135c93d3f91921643bbe49f","kind":"tag","published_at":"2025-02-26T06:01:08.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.8.0","html_url":"https://github.com/axios/axios/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.8.0/manifests"},{"name":"v1.7.9","sha":"b2cb45d5a533a5465c99559b16987e4d5fc08cbc","kind":"tag","published_at":"2024-12-04T07:38:10.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.9","html_url":"https://github.com/axios/axios/releases/tag/v1.7.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.9/manifests"},{"name":"v1.7.8","sha":"415ca9440195586dcd2149aa6f1e99f0ff6957c2","kind":"tag","published_at":"2024-11-25T21:13:52.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.8","html_url":"https://github.com/axios/axios/releases/tag/v1.7.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.8/manifests"},{"name":"v0.29.0","sha":"7750b8c30b43a28737b496588e818d1f4e7b6abc","kind":"commit","published_at":"2024-11-21T12:23:17.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.29.0","html_url":"https://github.com/axios/axios/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.29.0/manifests"},{"name":"v1.7.7","sha":"5b8a826771b77ab30081d033fdba9ef3b90e439a","kind":"tag","published_at":"2024-08-31T22:02:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.7","html_url":"https://github.com/axios/axios/releases/tag/v1.7.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.7/manifests"},{"name":"v1.7.6","sha":"d584fcfa62ba5217baf2be0748b7c5eda6da16ad","kind":"tag","published_at":"2024-08-30T19:56:43.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.6","html_url":"https://github.com/axios/axios/releases/tag/v1.7.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.6/manifests"},{"name":"v1.7.5","sha":"59cd6b0dece4050b190717a7c5cdf77906ce2104","kind":"tag","published_at":"2024-08-23T13:32:31.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.5","html_url":"https://github.com/axios/axios/releases/tag/v1.7.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.5/manifests"},{"name":"v1.7.4","sha":"abd24a7367726616e60dfc04cb394b4be37cf597","kind":"tag","published_at":"2024-08-13T19:33:04.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.4","html_url":"https://github.com/axios/axios/releases/tag/v1.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.4/manifests"},{"name":"v1.7.3","sha":"c6cce43cd94489f655f4488c5a50ecaf781c94f2","kind":"tag","published_at":"2024-08-01T16:16:07.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.3","html_url":"https://github.com/axios/axios/releases/tag/v1.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.3/manifests"},{"name":"v1.7.2","sha":"0e4f9fa29077ebee4499facea6be1492b42e8a26","kind":"tag","published_at":"2024-05-21T16:57:58.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.2","html_url":"https://github.com/axios/axios/releases/tag/v1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.2/manifests"},{"name":"v1.7.1","sha":"67d1373131962d1f1f5b8d91f9a2f80ed3923bc8","kind":"tag","published_at":"2024-05-20T13:32:46.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.1","html_url":"https://github.com/axios/axios/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.1/manifests"},{"name":"v1.7.0","sha":"3041c61adaaac6d2c43eba28c134e7f4d43ab012","kind":"tag","published_at":"2024-05-19T20:24:57.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.0","html_url":"https://github.com/axios/axios/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0/manifests"},{"name":"v1.7.0-beta.2","sha":"b49aa8e3d837c36e4728a9fa8a5e23a1162e96ec","kind":"tag","published_at":"2024-05-19T18:01:17.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.0-beta.2","html_url":"https://github.com/axios/axios/releases/tag/v1.7.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.2/manifests"},{"name":"v1.7.0-beta.1","sha":"b9f4848f8c4c7d53dbe1a1ee06e9b3604c2e56ac","kind":"tag","published_at":"2024-05-07T18:37:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.0-beta.1","html_url":"https://github.com/axios/axios/releases/tag/v1.7.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.1/manifests"},{"name":"v1.7.0-beta.0","sha":"8e4314bfd68773ef405a4c081cf30c3bce5447ee","kind":"tag","published_at":"2024-04-28T19:50:48.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.7.0-beta.0","html_url":"https://github.com/axios/axios/releases/tag/v1.7.0-beta.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.7.0-beta.0/manifests"},{"name":"v0.28.1","sha":"3021e0ddbdeb5cd40e9e296851a8bd8ff45116d3","kind":"tag","published_at":"2024-03-28T17:36:06.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.28.1","html_url":"https://github.com/axios/axios/releases/tag/v0.28.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.28.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.28.1/manifests"},{"name":"v1.6.8","sha":"ab3f0f9a94853c821cb00f1112788ecdd3ae7ed1","kind":"tag","published_at":"2024-03-15T16:32:41.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.8","html_url":"https://github.com/axios/axios/releases/tag/v1.6.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.8/manifests"},{"name":"v0.28.0","sha":"3b7635aefc842c05da0ec8c90e8bd09cb54616b8","kind":"tag","published_at":"2024-02-12T18:38:19.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.28.0","html_url":"https://github.com/axios/axios/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.28.0/manifests"},{"name":"v1.6.7","sha":"a52e4d9af51205959ef924f87bcf90c605e08a1e","kind":"tag","published_at":"2024-01-25T19:58:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.7","html_url":"https://github.com/axios/axios/releases/tag/v1.6.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.7/manifests"},{"name":"v1.6.6","sha":"104aa3f65dc30d70273798dff413fb44edd1c9e6","kind":"tag","published_at":"2024-01-24T23:12:14.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.6","html_url":"https://github.com/axios/axios/releases/tag/v1.6.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.6/manifests"},{"name":"v1.6.5","sha":"6d4c421ee157d93b47f3f9082a7044b1da221461","kind":"tag","published_at":"2024-01-05T19:52:08.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.5","html_url":"https://github.com/axios/axios/releases/tag/v1.6.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.5/manifests"},{"name":"v1.6.4","sha":"8790b8e7847c7f450544e7195c837ffc10fcb160","kind":"tag","published_at":"2024-01-03T22:10:49.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.4","html_url":"https://github.com/axios/axios/releases/tag/v1.6.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.4/manifests"},{"name":"v1.6.3","sha":"b15b918d179900e7d47a08f4e96efc89e16d8a7b","kind":"tag","published_at":"2023-12-26T23:16:12.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.3","html_url":"https://github.com/axios/axios/releases/tag/v1.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.3/manifests"},{"name":"v1.6.2","sha":"b3be36585884ba1e237fdd0eacf55f678aefc396","kind":"tag","published_at":"2023-11-14T20:36:03.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.2","html_url":"https://github.com/axios/axios/releases/tag/v1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.2/manifests"},{"name":"v1.6.1","sha":"f6d2cf9763bfa124f15c2dc6a5d5d5d9d3e26169","kind":"tag","published_at":"2023-11-08T15:09:20.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.1","html_url":"https://github.com/axios/axios/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"f7adacdbaa569281253c8cfc623ad3f4dc909c60","kind":"tag","published_at":"2023-10-26T21:15:49.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.6.0","html_url":"https://github.com/axios/axios/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.6.0/manifests"},{"name":"v1.5.1","sha":"88fb52b5fad7aabab0532e7ad086c5f1b0178905","kind":"tag","published_at":"2023-09-26T18:22:06.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.5.1","html_url":"https://github.com/axios/axios/releases/tag/v1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.5.1/manifests"},{"name":"v1.5.0","sha":"6365751ba6725cc283f7364b9ee6ca9917e9737c","kind":"tag","published_at":"2023-08-26T19:10:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.5.0","html_url":"https://github.com/axios/axios/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.5.0/manifests"},{"name":"v1.4.0","sha":"21a5ad34c4a5956d81d338059ac0dd34a19ed094","kind":"tag","published_at":"2023-04-27T23:05:47.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.4.0","html_url":"https://github.com/axios/axios/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.4.0/manifests"},{"name":"v1.3.6","sha":"59eb99183546d822bc27e881f5dcd748daa04173","kind":"tag","published_at":"2023-04-19T19:38:50.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.6","html_url":"https://github.com/axios/axios/releases/tag/v1.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.6/manifests"},{"name":"v1.3.5","sha":"4af78a72eee06172c53383aaed74e2dcaf44d620","kind":"tag","published_at":"2023-04-05T18:02:58.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.5","html_url":"https://github.com/axios/axios/releases/tag/v1.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.5/manifests"},{"name":"v1.3.4","sha":"2e70cecda42993e1153248f0f96715c3c55f7f39","kind":"tag","published_at":"2023-02-22T21:06:15.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.4","html_url":"https://github.com/axios/axios/releases/tag/v1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.4/manifests"},{"name":"v1.3.3","sha":"d9ebf8fb3ab2e6d277626d72bcf5580e2a6e795b","kind":"tag","published_at":"2023-02-13T18:47:11.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.3","html_url":"https://github.com/axios/axios/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"0b449293fc238f30f39ab9ed0fca86a23c8a6a79","kind":"tag","published_at":"2023-02-03T18:10:43.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.2","html_url":"https://github.com/axios/axios/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"54d3facb3b032665e6ae84e157073702b5c2e4d9","kind":"tag","published_at":"2023-02-01T23:30:55.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.1","html_url":"https://github.com/axios/axios/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"7fbfbbeff69904cd64e8ac62da8969a1e633ee23","kind":"tag","published_at":"2023-01-31T16:55:43.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.3.0","html_url":"https://github.com/axios/axios/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.3.0/manifests"},{"name":"v1.2.6","sha":"5bde91cac787d92ae56c6cb293941244cc4c617d","kind":"tag","published_at":"2023-01-28T16:41:04.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.6","html_url":"https://github.com/axios/axios/releases/tag/v1.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.6/manifests"},{"name":"v1.2.5","sha":"366161e5e48f818fa42c906e91b71f7876aadabb","kind":"tag","published_at":"2023-01-26T15:06:30.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.5","html_url":"https://github.com/axios/axios/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"6600d51e6bbb7db984484ea09f62ec22f9044ed8","kind":"tag","published_at":"2023-01-24T17:21:52.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.4","html_url":"https://github.com/axios/axios/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"557ed0a7489b1bf62296ea34568eeea8975ff4f9","kind":"tag","published_at":"2023-01-15T23:57:44.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.3","html_url":"https://github.com/axios/axios/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.3/manifests"},{"name":"1.2.2","sha":"8ea432429b81c2f1aa8b03e43d0bdb498f21c4f4","kind":"commit","published_at":"2022-12-29T06:31:54.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/1.2.2","html_url":"https://github.com/axios/axios/releases/tag/1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/1.2.2/manifests"},{"name":"v1.2.2","sha":"3b6d5274aab55ce51cbf63ff04837a33a8bea985","kind":"tag","published_at":"2022-12-20T18:59:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.2","html_url":"https://github.com/axios/axios/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"981265dbf464de00e57c6e9eaaca051510fb6021","kind":"commit","published_at":"2022-12-05T19:43:37.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.1","html_url":"https://github.com/axios/axios/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"f92e167f768437ae17f361b2ea36c9b9d48aa814","kind":"commit","published_at":"2022-11-22T18:59:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.2.0","html_url":"https://github.com/axios/axios/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.2.0/manifests"},{"name":"1.2.0-alpha.1","sha":"3a7c363e540e388481346e0c0a3c80e8318dbf5d","kind":"commit","published_at":"2022-11-10T18:59:51.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/1.2.0-alpha.1","html_url":"https://github.com/axios/axios/releases/tag/1.2.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/1.2.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/1.2.0-alpha.1/manifests"},{"name":"v1.1.3","sha":"9bd53214f6339c3064d4faee91c223b35846f2dd","kind":"commit","published_at":"2022-10-15T13:43:01.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.1.3","html_url":"https://github.com/axios/axios/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"1b29f4e98e5bb44a125230398f61aa5b0add91c2","kind":"commit","published_at":"2022-10-07T10:09:17.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.1.2","html_url":"https://github.com/axios/axios/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"1315e2282f9463bac77b0c0672f47d8d69804677","kind":"commit","published_at":"2022-10-07T09:08:35.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.1.1","html_url":"https://github.com/axios/axios/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"9c3dce366bd594558e5e474ce9135af22a0d9949","kind":"commit","published_at":"2022-10-06T19:17:46.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.1.0","html_url":"https://github.com/axios/axios/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"484aa4fe6addccbd32206a31eb3d2d000843066e","kind":"commit","published_at":"2022-10-04T19:19:36.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.0.0","html_url":"https://github.com/axios/axios/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.0.0/manifests"},{"name":"v1.0.0-alpha.1","sha":"3cf6ad72033fd6eacf720a7d700f99dc96f586a3","kind":"commit","published_at":"2022-05-31T19:14:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v1.0.0-alpha.1","html_url":"https://github.com/axios/axios/releases/tag/v1.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v1.0.0-alpha.1/manifests"},{"name":"v0.27.2","sha":"bc733fec78326609e751187c9d453cee9bf1993a","kind":"commit","published_at":"2022-04-27T09:58:12.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.27.2","html_url":"https://github.com/axios/axios/releases/tag/v0.27.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.2/manifests"},{"name":"v0.27.1","sha":"838f53b4bb6616d8ec8efdae0612c9c74b8c3804","kind":"commit","published_at":"2022-04-26T07:31:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.27.1","html_url":"https://github.com/axios/axios/releases/tag/v0.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.1/manifests"},{"name":"v0.27.0","sha":"008dd9d466167e97727bdba13f4937bb9d7f3baa","kind":"commit","published_at":"2022-04-21T10:55:24.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.27.0","html_url":"https://github.com/axios/axios/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.27.0/manifests"},{"name":"v0.26.1","sha":"8e67551177990ed067384e1641d6964dcab773f7","kind":"commit","published_at":"2022-03-08T06:26:07.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.26.1","html_url":"https://github.com/axios/axios/releases/tag/v0.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.26.1/manifests"},{"name":"v0.26.0","sha":"c9aca7525703ab600eacd9e95fd7f6ecc9942616","kind":"commit","published_at":"2022-02-13T14:20:24.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.26.0","html_url":"https://github.com/axios/axios/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.26.0/manifests"},{"name":"v0.25.0","sha":"5c5cbdf4ba1e2b55b6bff35673bdd5206b4eddf8","kind":"commit","published_at":"2022-01-18T07:24:55.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.25.0","html_url":"https://github.com/axios/axios/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.25.0/manifests"},{"name":"v0.24.0","sha":"53d6d37556a3443b00b3d9b4e7a934bf1d81aabe","kind":"commit","published_at":"2021-10-25T17:47:37.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.24.0","html_url":"https://github.com/axios/axios/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.24.0/manifests"},{"name":"v0.23.0","sha":"1025d1231a7747503188459dd5a6d1effdcea928","kind":"commit","published_at":"2021-10-12T15:34:26.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.23.0","html_url":"https://github.com/axios/axios/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.23.0/manifests"},{"name":"v0.22.0","sha":"72f14ceef7dae917057f1d5c221713610a65217b","kind":"commit","published_at":"2021-10-01T05:53:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.22.0","html_url":"https://github.com/axios/axios/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.22.0/manifests"},{"name":"v0.21.4","sha":"66c46020bd01b39081259ae74edc2afc283818fa","kind":"commit","published_at":"2021-09-06T15:30:11.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.21.4","html_url":"https://github.com/axios/axios/releases/tag/v0.21.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.4/manifests"},{"name":"0.21.3","sha":"e367be54dc0e8e3f5dfcba134c69d4a8f1e40324","kind":"commit","published_at":"2021-09-04T19:01:50.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/0.21.3","html_url":"https://github.com/axios/axios/releases/tag/0.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/0.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/0.21.3/manifests"},{"name":"v0.21.2","sha":"c0c87610911e1edebc923d0e932fea28cdfddae3","kind":"commit","published_at":"2021-09-04T09:57:32.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.21.2","html_url":"https://github.com/axios/axios/releases/tag/v0.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.2/manifests"},{"name":"v0.21.1","sha":"a64050a6cfbcc708a55a7dc8030d85b1c78cdf38","kind":"tag","published_at":"2020-12-22T04:17:55.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.21.1","html_url":"https://github.com/axios/axios/releases/tag/v0.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.1/manifests"},{"name":"v0.21.0","sha":"94ca24b5b23f343769a15f325693246e07c177d2","kind":"tag","published_at":"2020-10-23T16:26:35.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.21.0","html_url":"https://github.com/axios/axios/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.21.0/manifests"},{"name":"v0.20.0","sha":"0d8765562401910c1c509f6739a3bc558721e123","kind":"tag","published_at":"2020-08-21T03:11:58.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.20.0","html_url":"https://github.com/axios/axios/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.20.0/manifests"},{"name":"v0.20.0-0","sha":"ffea03453f77a8176c51554d5f6c3c6829294649","kind":"tag","published_at":"2020-07-15T16:04:59.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.20.0-0","html_url":"https://github.com/axios/axios/releases/tag/v0.20.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.20.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.20.0-0/manifests"},{"name":"v0.19.2","sha":"2a0ff479f9fb7f09a219f5178ca85a6519562ff1","kind":"commit","published_at":"2020-01-22T04:24:50.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.19.2","html_url":"https://github.com/axios/axios/releases/tag/v0.19.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.2/manifests"},{"name":"0.19.1","sha":"351cf290f0478d6e47e74c6da2f3ad8fe8f29887","kind":"commit","published_at":"2020-01-07T18:54:03.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/0.19.1","html_url":"https://github.com/axios/axios/releases/tag/0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/0.19.1/manifests"},{"name":"v0.19.1","sha":"960e1c879892ac6e1c83a798c06b9907e35ad2df","kind":"commit","published_at":"2020-01-07T17:21:04.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.19.1","html_url":"https://github.com/axios/axios/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.1/manifests"},{"name":"v0.18.1","sha":"face0165de613696d10b1fd2a0e2f7b3852fa018","kind":"tag","published_at":"2019-06-01T00:46:00.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.18.1","html_url":"https://github.com/axios/axios/releases/tag/v0.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.18.1/manifests"},{"name":"v0.19.0","sha":"8d0b92b2678d96770304dd767cd05a59d37f12cf","kind":"tag","published_at":"2019-05-30T16:10:07.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.19.0","html_url":"https://github.com/axios/axios/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.0/manifests"},{"name":"v0.19.0-beta.1","sha":"527381198e8112dd298918b3d9d6c643763a59c3","kind":"tag","published_at":"2018-08-09T18:39:17.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.19.0-beta.1","html_url":"https://github.com/axios/axios/releases/tag/v0.19.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.19.0-beta.1/manifests"},{"name":"v0.18.0","sha":"d59c70fdfd35106130e9f783d0dbdcddd145b58f","kind":"tag","published_at":"2018-02-19T23:23:58.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.18.0","html_url":"https://github.com/axios/axios/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"ad1195f0702381a77b4f2863aad6ddb1002ffd51","kind":"tag","published_at":"2017-11-11T23:24:16.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.17.1","html_url":"https://github.com/axios/axios/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"2c0e3183215d9a5fbc2ee8f35f459ac0e4d9f99c","kind":"tag","published_at":"2017-10-21T18:00:45.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.17.0","html_url":"https://github.com/axios/axios/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.17.0/manifests"},{"name":"v0.16.2","sha":"46e275c407f81c44dd9aad419b6e861d8a936580","kind":"tag","published_at":"2017-06-03T19:28:26.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.16.2","html_url":"https://github.com/axios/axios/releases/tag/v0.16.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.2/manifests"},{"name":"v0.16.1","sha":"5c8095e48329dacaec1f8d43a9b84ed275fbd0ef","kind":"tag","published_at":"2017-04-08T18:51:20.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.16.1","html_url":"https://github.com/axios/axios/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"19b794848047e51f5d8689cf48820c986df49d25","kind":"tag","published_at":"2017-04-01T02:29:37.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.16.0","html_url":"https://github.com/axios/axios/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.16.0/manifests"},{"name":"v0.15.3","sha":"4976816808c4e81acad2393c429832afeaf9664d","kind":"tag","published_at":"2016-11-27T21:52:12.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.15.3","html_url":"https://github.com/axios/axios/releases/tag/v0.15.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.3/manifests"},{"name":"v0.15.2","sha":"3af756049f102be2eebafdbb108f10173380a68d","kind":"tag","published_at":"2016-10-18T01:29:32.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.15.2","html_url":"https://github.com/axios/axios/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"3f8b128da4ab11e34f0b880381f9395b2ab0e22f","kind":"tag","published_at":"2016-10-15T06:35:21.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.15.1","html_url":"https://github.com/axios/axios/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"e8c5c49ea2f2cf4fd45eaf81270a6d23546e2c93","kind":"tag","published_at":"2016-10-11T04:39:50.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.15.0","html_url":"https://github.com/axios/axios/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.15.0/manifests"},{"name":"v0.14.0","sha":"c96348660dacddd32676924d4f1bde535c45fb77","kind":"tag","published_at":"2016-08-27T18:29:52.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.14.0","html_url":"https://github.com/axios/axios/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.14.0/manifests"},{"name":"v0.13.1","sha":"377efb89aed819ed1cd416b69f057632ad5664a5","kind":"tag","published_at":"2016-07-16T17:13:15.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.13.1","html_url":"https://github.com/axios/axios/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"ff919487e13430098d3da37a37cc04c3f24b59c4","kind":"tag","published_at":"2016-07-13T19:42:23.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.13.0","html_url":"https://github.com/axios/axios/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.13.0/manifests"},{"name":"v0.12.0","sha":"4d1269cb4a9773db128f459046b6c4c2a0926859","kind":"tag","published_at":"2016-06-01T05:22:00.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.12.0","html_url":"https://github.com/axios/axios/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"2e949495f0177bd4f4faab8ce031aa32bef50f47","kind":"tag","published_at":"2016-05-17T15:59:07.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.11.1","html_url":"https://github.com/axios/axios/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"82d34ac743022aaf0c4e68650b39d2f7edab73a4","kind":"commit","published_at":"2016-04-27T04:13:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.11.0","html_url":"https://github.com/axios/axios/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.11.0/manifests"},{"name":"v0.10.0","sha":"2797f10ea5d2cd963a8e5c80da319848bad9f499","kind":"tag","published_at":"2016-04-21T04:51:56.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.10.0","html_url":"https://github.com/axios/axios/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.10.0/manifests"},{"name":"v0.9.1","sha":"5176623d6c70e9d66c17f7867703a8e9990554bd","kind":"tag","published_at":"2016-01-24T22:18:42.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.9.1","html_url":"https://github.com/axios/axios/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"7ec97dd26b3af7bb0995eef178c4edd8989c3152","kind":"tag","published_at":"2016-01-18T18:19:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.9.0","html_url":"https://github.com/axios/axios/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.9.0/manifests"},{"name":"v0.8.1","sha":"9a5dec2dc5aef6eaa0bc4f72f714656bcf29dac3","kind":"tag","published_at":"2015-12-15T03:43:51.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.8.1","html_url":"https://github.com/axios/axios/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"908d12b8ef41af4de5226b7e88eb971798d99207","kind":"tag","published_at":"2015-12-11T19:09:31.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.8.0","html_url":"https://github.com/axios/axios/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"e8136b1f746d87d9ac620cb50c26722db555169a","kind":"tag","published_at":"2015-09-29T06:39:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.7.0","html_url":"https://github.com/axios/axios/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"cd0cd1805434dea0d250d195a466a1236b98e502","kind":"tag","published_at":"2015-09-21T20:20:49.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.6.0","html_url":"https://github.com/axios/axios/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.6.0/manifests"},{"name":"v0.5.4","sha":"8a4e502e3a76b8e41b2f896e05b92db3c0f543f7","kind":"tag","published_at":"2015-04-08T18:49:23.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.5.4","html_url":"https://github.com/axios/axios/releases/tag/v0.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.4/manifests"},{"name":"v0.5.3","sha":"9d31a867166e9224f0c5168d84560abe85868404","kind":"tag","published_at":"2015-04-08T03:01:00.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.5.3","html_url":"https://github.com/axios/axios/releases/tag/v0.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.3/manifests"},{"name":"v0.5.2","sha":"2ce5aa77df30369960924ee70956f6ac0d37a1aa","kind":"tag","published_at":"2015-03-13T23:13:59.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.5.2","html_url":"https://github.com/axios/axios/releases/tag/v0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.2/manifests"},{"name":"v0.5.1","sha":"bd5d9b7258dd27648caddeba8259a4ed020b6724","kind":"tag","published_at":"2015-03-10T20:47:07.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.5.1","html_url":"https://github.com/axios/axios/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"fa6c26a0e5eaad5d58071eb39d7afff0c7dc051c","kind":"tag","published_at":"2015-01-23T10:12:14.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.5.0","html_url":"https://github.com/axios/axios/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.5.0/manifests"},{"name":"v0.4.2","sha":"2d5250ce0ae02ee9f6412f776690d8b99f11fb1e","kind":"tag","published_at":"2014-12-11T07:12:48.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.4.2","html_url":"https://github.com/axios/axios/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"789baf3a58b717e270ded37d4416ae25a650d99d","kind":"tag","published_at":"2014-10-15T18:18:33.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.4.1","html_url":"https://github.com/axios/axios/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"1d6430f667486ca9de390ccec242114b36c41377","kind":"tag","published_at":"2014-10-05T23:54:05.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.4.0","html_url":"https://github.com/axios/axios/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.4.0/manifests"},{"name":"v0.3.1","sha":"d8f687dc52d6ee5242798ceac34e05f86853250d","kind":"tag","published_at":"2014-09-17T00:33:18.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.3.1","html_url":"https://github.com/axios/axios/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"0f2461a6bb90efdbc54c8c2a234062a24b8222ca","kind":"tag","published_at":"2014-09-16T18:22:00.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.3.0","html_url":"https://github.com/axios/axios/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.3.0/manifests"},{"name":"v0.2.2","sha":"f2fd9f7dd3a644ddbd25b4bfe59c86313b24a443","kind":"tag","published_at":"2014-09-15T03:32:20.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.2.2","html_url":"https://github.com/axios/axios/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"629c576f23e2983382ff7251a5c18b44249b0d2b","kind":"tag","published_at":"2014-09-12T22:59:02.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.2.1","html_url":"https://github.com/axios/axios/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"3b7132ee1b9dffa4927735e49598dcd92836fcb2","kind":"tag","published_at":"2014-09-12T20:05:48.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.2.0","html_url":"https://github.com/axios/axios/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"00724fdd0bb5bfa66f466cbf459e590a5d7c0c9d","kind":"tag","published_at":"2014-08-29T23:08:48.000Z","download_url":"https://codeload.github.com/axios/axios/tar.gz/v0.1.0","html_url":"https://github.com/axios/axios/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/axios%2Faxios/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2025-06-06T07:32:59.348Z","dependent_packages_count":97210,"downloads":273533655,"downloads_period":"last-month","dependent_repos_count":453457,"rankings":{"downloads":0.003887935462461709,"dependent_repos_count":0.05421205785686046,"dependent_packages_count":0.0009309141248147754,"stargazers_count":0.016811213901066827,"forks_count":0.36346720608576893,"docker_downloads_count":0.01922063869470507,"average":0.07642166102094629},"purl":"pkg:npm/axios","advisories":[{"uuid":"GSA_kwCzR0hTQS04aGM0LXZoNjQtY3htas4AA-hD","url":"https://github.com/advisories/GHSA-8hc4-vh64-cxmj","title":"Server-Side Request Forgery in axios","description":"axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-08-12T15:30:49.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2024-39338","https://github.com/axios/axios/releases","https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html","https://github.com/axios/axios/issues/6463","https://github.com/axios/axios/pull/6539","https://github.com/axios/axios/pull/6543","https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a","https://github.com/axios/axios/releases/tag/v1.7.4","https://github.com/advisories/GHSA-8hc4-vh64-cxmj"],"source_kind":"github","identifiers":["GHSA-8hc4-vh64-cxmj","CVE-2024-39338"],"repository_url":"https://github.com/axios/axios","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.7.4","vulnerable_version_range":"\u003e= 1.3.2, \u003c= 1.7.3"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2024-08-12T18:05:32.119Z","updated_at":"2025-03-30T03:08:22.201Z","epss_percentage":0.00079,"epss_percentile":0.13494},{"uuid":"GSA_kwCzR0hTQS1qcjVmLXYyanYtNjl4Ns4ABFM2","url":"https://github.com/advisories/GHSA-jr5f-v2jv-69x6","title":"axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL","description":"### Summary\n\nA previously reported issue in axios demonstrated that using protocol-relative URLs could lead to SSRF (Server-Side Request Forgery).\nReference: axios/axios#6463\n\nA similar problem that occurs when passing absolute URLs rather than protocol-relative URLs to axios has been identified. Even if ⁠`baseURL` is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios.\n\n### Details\n\nConsider the following code snippet:\n\n```js\nimport axios from \"axios\";\n\nconst internalAPIClient = axios.create({\n  baseURL: \"http://example.test/api/v1/users/\",\n  headers: {\n    \"X-API-KEY\": \"1234567890\",\n  },\n});\n\n// const userId = \"123\";\nconst userId = \"http://attacker.test/\";\n\nawait internalAPIClient.get(userId); // SSRF\n```\n\nIn this example, the request is sent to `http://attacker.test/` instead of the `baseURL`. As a result, the domain owner of `attacker.test` would receive the `X-API-KEY` included in the request headers.\n\nIt is recommended that:\n\n-\tWhen `baseURL` is set, passing an absolute URL such as `http://attacker.test/` to `get()` should not ignore `baseURL`.\n-\tBefore sending the HTTP request (after combining the `baseURL` with the user-provided parameter), axios should verify that the resulting URL still begins with the expected `baseURL`.\n\n### PoC\n\nFollow the steps below to reproduce the issue:\n\n1.\tSet up two simple HTTP servers:\n\n```\nmkdir /tmp/server1 /tmp/server2\necho \"this is server1\" \u003e /tmp/server1/index.html \necho \"this is server2\" \u003e /tmp/server2/index.html\npython -m http.server -d /tmp/server1 10001 \u0026\npython -m http.server -d /tmp/server2 10002 \u0026\n```\n\n\n2.\tCreate a script (e.g., main.js):\n\n```js\nimport axios from \"axios\";\nconst client = axios.create({ baseURL: \"http://localhost:10001/\" });\nconst response = await client.get(\"http://localhost:10002/\");\nconsole.log(response.data);\n```\n\n3.\tRun the script:\n\n```\n$ node main.js\nthis is server2\n```\n\nEven though `baseURL` is set to `http://localhost:10001/`, axios sends the request to `http://localhost:10002/`.\n\n### Impact\n\n-\tCredential Leakage: Sensitive API keys or credentials (configured in axios) may be exposed to unintended third-party hosts if an absolute URL is passed.\n-\tSSRF (Server-Side Request Forgery): Attackers can send requests to other internal hosts on the network where the axios program is running.\n-\tAffected Users: Software that uses `baseURL` and does not validate path parameters is affected by this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-03-07T15:16:00.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6","https://github.com/axios/axios/issues/6463","https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f","https://github.com/axios/axios/releases/tag/v1.8.2","https://nvd.nist.gov/vuln/detail/CVE-2025-27152","https://github.com/axios/axios/pull/6829","https://github.com/axios/axios/commit/02c3c69ced0f8fd86407c23203835892313d7fde","https://github.com/advisories/GHSA-jr5f-v2jv-69x6"],"source_kind":"github","identifiers":["GHSA-jr5f-v2jv-69x6","CVE-2025-27152"],"repository_url":"https://github.com/axios/axios","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.30.0","vulnerable_version_range":"\u003c 0.30.0"},{"first_patched_version":"1.8.2","vulnerable_version_range":"\u003e= 1.0.0, \u003c 1.8.2"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2025-03-07T16:08:18.305Z","updated_at":"2025-03-30T03:07:17.591Z","epss_percentage":0.00044,"epss_percentile":0.06871},{"uuid":"GSA_kwCzR0hTQS1jcGg1LW04ZjctNmM1eM0VhQ","url":"https://github.com/advisories/GHSA-cph5-m8f7-6c5x","title":"axios Inefficient Regular Expression Complexity vulnerability","description":"axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-09-01T18:23:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-3749","https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929","https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31","https://www.npmjs.com/package/axios","https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E","https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E","https://www.oracle.com/security-alerts/cpujul2022.html","https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://github.com/advisories/GHSA-cph5-m8f7-6c5x"],"source_kind":"github","identifiers":["GHSA-cph5-m8f7-6c5x","CVE-2021-3749"],"repository_url":"https://github.com/axios/axios","blast_radius":42.424020828555875,"packages":[{"versions":[{"first_patched_version":"0.21.2","vulnerable_version_range":"\u003c 0.21.2"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2022-12-21T16:12:31.076Z","updated_at":"2025-02-12T05:10:46.000Z","epss_percentage":0.24006,"epss_percentile":0.93629},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3MnYtcTIzNS12cDk5","url":"https://github.com/advisories/GHSA-4w2v-q235-vp99","title":"Axios vulnerable to Server-Side Request Forgery","description":"Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-04T20:59:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-28168","https://github.com/axios/axios/issues/3369","https://github.com/axios/axios/commit/c7329fefc890050edd51e40e469a154d0117fc55","https://snyk.io/vuln/SNYK-JS-AXIOS-1038255","https://www.npmjs.com/package/axios","https://www.npmjs.com/advisories/1594","https://lists.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r25d53acd06f29244b8a103781b0339c5e7efee9099a4d52f0c230e4a@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rdfd2901b8b697a3f6e2c9c6ecc688fd90d7f881937affb5144d61d6e@%3Ccommits.druid.apache.org%3E","https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://github.com/advisories/GHSA-4w2v-q235-vp99"],"source_kind":"github","identifiers":["GHSA-4w2v-q235-vp99","CVE-2020-28168"],"repository_url":"https://github.com/axios/axios","blast_radius":33.37356305179729,"packages":[{"versions":[{"first_patched_version":"0.21.1","vulnerable_version_range":"\u003c 0.21.1"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2022-12-21T16:13:12.279Z","updated_at":"2023-02-01T05:05:04.000Z","epss_percentage":0.00899,"epss_percentile":0.61292},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQyeHctMnh2Yy1xeDht","url":"https://github.com/advisories/GHSA-42xw-2xvc-qx8m","title":"Denial of Service in axios","description":"Versions of `axios` prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the `maxContentLength` property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service.\n\n\n## Recommendation\n\nUpgrade to 0.18.1 or later.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-05-29T18:04:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-10742","https://app.snyk.io/vuln/SNYK-JS-AXIOS-174505","https://github.com/axios/axios/issues/1098","https://github.com/axios/axios/pull/1485","https://snyk.io/vuln/SNYK-JS-AXIOS-174505","https://www.npmjs.com/advisories/880","https://github.com/axios/axios/commit/acabfbdf00a58bb866c9d070e8a10d1d0dbeb572","https://github.com/advisories/GHSA-42xw-2xvc-qx8m"],"source_kind":"github","identifiers":["GHSA-42xw-2xvc-qx8m","CVE-2019-10742"],"repository_url":"https://github.com/axios/axios","blast_radius":42.424020828555875,"packages":[{"versions":[{"first_patched_version":"0.18.1","vulnerable_version_range":"\u003c= 0.18.0"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2022-12-21T16:13:29.681Z","updated_at":"2023-04-14T19:12:35.000Z","epss_percentage":0.68373,"epss_percentile":0.98086},{"uuid":"GSA_kwCzR0hTQS13ZjVwLWc2dnctcmh4eM4AA2_y","url":"https://github.com/advisories/GHSA-wf5p-g6vw-rhxx","title":"Axios Cross-Site Request Forgery Vulnerability","description":"An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-11-08T21:30:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-45857","https://github.com/axios/axios/issues/6006","https://github.com/axios/axios/issues/6022","https://github.com/axios/axios/pull/6028","https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0","https://github.com/axios/axios/releases/tag/v1.6.0","https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459","https://github.com/axios/axios/pull/6091","https://github.com/axios/axios/commit/2755df562b9c194fba6d8b609a383443f6a6e967","https://github.com/axios/axios/releases/tag/v0.28.0","https://security.netapp.com/advisory/ntap-20240621-0006","https://github.com/advisories/GHSA-wf5p-g6vw-rhxx"],"source_kind":"github","identifiers":["GHSA-wf5p-g6vw-rhxx","CVE-2023-45857"],"repository_url":"https://github.com/axios/axios","blast_radius":36.76748471808176,"packages":[{"versions":[{"first_patched_version":"0.28.0","vulnerable_version_range":"\u003e= 0.8.1, \u003c 0.28.0"},{"first_patched_version":"1.6.0","vulnerable_version_range":"\u003e= 1.0.0, \u003c 1.6.0"}],"ecosystem":"npm","package_name":"axios"}],"created_at":"2023-11-10T01:05:47.772Z","updated_at":"2024-06-21T21:33:58.000Z","epss_percentage":0.01561,"epss_percentile":0.69853}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/axios","docker_dependents_count":20221,"docker_downloads_count":5576113741,"usage_url":"https://repos.ecosyste.ms/usage/npm/axios","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/axios/dependencies","status":null,"funding_links":["https://opencollective.com/axios","https://github.com/sponsors/axios"],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/axios/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/axios/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/axios/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/axios/related_packages","maintainers":[{"uuid":"mzabriskie","login":"mzabriskie","name":null,"email":"mzabriskie@gmail.com","url":null,"packages_count":25,"html_url":"https://www.npmjs.com/~mzabriskie","role":null,"created_at":"2022-11-10T11:06:13.322Z","updated_at":"2022-11-10T11:06:13.322Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/mzabriskie/packages"},{"uuid":"nickuraltsev","login":"nickuraltsev","name":null,"email":"nick.uraltsev@gmail.com","url":null,"packages_count":8,"html_url":"https://www.npmjs.com/~nickuraltsev","role":null,"created_at":"2022-11-10T11:06:13.325Z","updated_at":"2022-11-10T11:06:13.325Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/nickuraltsev/packages"},{"uuid":"emilyemorehouse","login":"emilyemorehouse","name":null,"email":"emilyemorehouse@gmail.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~emilyemorehouse","role":null,"created_at":"2022-11-10T11:06:13.329Z","updated_at":"2022-11-10T11:06:13.329Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/emilyemorehouse/packages"},{"uuid":"jasonsaayman","login":"jasonsaayman","name":null,"email":"jasonsaayman@gmail.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~jasonsaayman","role":null,"created_at":"2022-11-10T11:06:13.332Z","updated_at":"2022-11-10T11:06:13.332Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jasonsaayman/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5006531,"maintainers_count":1012930,"namespaces_count":295512,"keywords_count":700181,"github":"npm","metadata":{"funded_packages_count":150239},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-06T05:58:05.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":40206,"unique_repositories_count_past_30_days":303,"recent_issues":[{"uuid":"5906038794","node_id":"PR_kwDOLHSps88AAAABJHAMiw","number":256,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T04:13:54.000Z","updated_at":"2026-10-18T04:14:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":22,"packages":[{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@swc/html","old_version":"1.13.19","new_version":"1.16.18","repository_url":"https://github.com/swc-project/swc"},{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.13","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"qs","old_version":"6.13.0","new_version":"6.14.0","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.0.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"image-size","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/image-size/image-size"},{"name":"joi","old_version":"17.13.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"launch-editor","old_version":"2.13.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"sprintf-js","old_version":"1.0.3","new_version":"removed","repository_url":"https://github.com/alexei/sprintf.js"},{"name":"svgo","old_version":"3.3.3","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.13","repository_url":"https://github.com/websockets/ws"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 22 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@swc/html](https://github.com/swc-project/swc/tree/HEAD/packages/html) | `1.13.19` | `1.16.18` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.13` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.3` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [image-size](https://github.com/image-size/image-size) | `2.0.2` | `2.0.4` |\n| [joi](https://github.com/hapijs/joi) | `17.13.3` | `17.13.8` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [sprintf-js](https://github.com/alexei/sprintf.js) | `1.0.3` | `removed` |\n| [svgo](https://github.com/svg/svgo) | `3.3.3` | `3.3.5` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@swc/html` from 1.13.19 to 1.16.18\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swc-project/swc/blob/main/CHANGELOG.md\"\u003e@​swc/html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.18] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a safe cache root on Unix (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12500\"\u003e#12500\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2125403ad6c5cb7b8329852f5f84b797ede99146\"\u003e2125403\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/minifier)\u003c/strong\u003e Check decl for side effect (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12501\"\u003e#12501\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6841927dd3b72b51b7deaa238d88df9ce0f3fb9f\"\u003e6841927\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.17] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a secure Windows profile cache (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12452\"\u003e#12452\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2c0fb896611f5b9d462886db9d8089813a99a4a6\"\u003e2c0fb89\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Allow opting out of Unix cache root security checks (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12469\"\u003e#12469\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/e87fa401933d6c27e5b14f26d9c3381cccc53cdc\"\u003ee87fa40\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Run main CodSpeed benchmarks after policy skips (\u003ca href=\"https://github.com/swc-project/swc/commit/1b6d869ec415609664a06150df8ec4d614fdb3f8\"\u003e1b6d869\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Match Rust's z10 baseline in s390x release builds (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12489\"\u003e#12489\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/b96f92fa6ddafac71133185c7c760855f27b6ed6\"\u003eb96f92f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Raise native addon MSRV to Rust 1.85 (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12491\"\u003e#12491\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/54a232401c81a3c97851128b92904b5b0308c4b4\"\u003e54a2324\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Repair empty crate release changeset (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12499\"\u003e#12499\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6bf5f8cf38e005fd03c2a4bc49d9021432033695\"\u003e6bf5f8c\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(cli)\u003c/strong\u003e Resolve out-dir source map paths relative to output (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12481\"\u003e#12481\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/717914f88f4f19caa1dd93e971628acb4bd608d1\"\u003e717914f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(deps)\u003c/strong\u003e Update cargo (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/10278\"\u003e#10278\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/fc7a9e2c159409d97ae0647534a9b9cdefb6eaed\"\u003efc7a9e2\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/compat)\u003c/strong\u003e Preserve consecutive loop labels (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12472\"\u003e#12472\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/28c33708dc691a64358255b5aec02f1c7eb62cdf\"\u003e28c3370\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/estree)\u003c/strong\u003e Fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/898b5926d17b86e14262437b90ca37b043adecda\"\u003e898b592\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBREAKING\u003c/strong\u003e: fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/fixer)\u003c/strong\u003e Preserve parentheses in JSX sequence expressions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12485\"\u003e#12485\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/7a36735f5636e5880cc4030d3b916dd19cedeb9b\"\u003e7a36735\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/63ced3ba33a9c31737ad056b39c9a8cdb4fcc486\"\u003e\u003ccode\u003e63ced3b\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/ff4257e08f565ef3dea4219a1f9d148c15d7496f\"\u003e\u003ccode\u003eff4257e\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d2bfb947435b19f82532cea721f12fb950ccde7a\"\u003e\u003ccode\u003ed2bfb94\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/52746278c3e2566264370ea072076fad91eadbaf\"\u003e\u003ccode\u003e5274627\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/f8269e6342753d1d859dcf8d932e1bbe2c8592ef\"\u003e\u003ccode\u003ef8269e6\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.16-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/3e034f2b1897174e6d6c53fb9fae6b8cefd717ed\"\u003e\u003ccode\u003e3e034f2\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.15-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d6b897c58d250c4088dbd842d0e8fd318515eb7c\"\u003e\u003ccode\u003ed6b897c\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.14-nightly-20261006.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1391a346e1ba8ef0cbaaa7c1b90c391ad6d150c5\"\u003e\u003ccode\u003e1391a34\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/a006b7fabd19b909c803822360c217706313acbb\"\u003e\u003ccode\u003ea006b7f\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13-nightly-20260930.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1b2c264916cb664d259113717851275fb6b01620\"\u003e\u003ccode\u003e1b2c264\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.12\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swc-project/swc/commits/v1.16.18/packages/html\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.13 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.13.0 to 6.14.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003ethrowOnParameterLimitExceeded\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/517\"\u003e#517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e[patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e[actions] use shared action; re-add finishers\u003c/li\u003e\n\u003cli\u003e[meta] Fix changelog formatting bug\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e, \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cp\u003e[Fix] fix regressions from robustness refactor\n[actions] update reusable workflows\u003c/p\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: avoid a crash when a \u003ccode\u003efilter\u003c/code\u003e key is \u003ccode\u003enull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils.merge\u003c/code\u003e: functions should not be stringified into keys\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ensure a non-string \u003ccode\u003efilter\u003c/code\u003e does not crash\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003e__proto__\u003c/code\u003e syntax instead of \u003ccode\u003eObject.create\u003c/code\u003e for null objects\u003c/li\u003e\n\u003cli\u003e[Refactor] misc cleanup\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils.merge\u003c/code\u003e: add some coverage\u003c/li\u003e\n\u003cli\u003e[Tests] fix a test case\u003c/li\u003e\n\u003cli\u003e[actions] split out node 10-20, and 20+\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003eobject-inspect\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/32dcc637f90be175c0d4617b429263115a87e3a8\"\u003e\u003ccode\u003e32dcc63\u003c/code\u003e\u003c/a\u003e v6.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4ec582b07a411f49b3192ea92562e2ad503a4dc0\"\u003e\u003ccode\u003e4ec582b\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/a240c52c7c48d3ead6bd77c5bc3b1275bab252fc\"\u003e\u003ccode\u003ea240c52\u003c/code\u003e\u003c/a\u003e [Tests] increase coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/25956a73e8cf56d445b0972cc3d9d16eb0958435\"\u003e\u003ccode\u003e25956a7\u003c/code\u003e\u003c/a\u003e [Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b189ed49c8dfe5b41afe6cecabdaa562de56764b\"\u003e\u003ccode\u003eb189ed4\u003c/code\u003e\u003c/a\u003e [patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/1d590de5eb325a6ea332812b260c024e6a58ab8c\"\u003e\u003ccode\u003e1d590de\u003c/code\u003e\u003c/a\u003e [actions] simplify finisher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/6cd60a59aae428123d45810996f4ac6b2c4e5c52\"\u003e\u003ccode\u003e6cd60a5\u003c/code\u003e\u003c/a\u003e [actions] use shared action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/89edfd25f9598b5ccfe7eec9c4c184d5e8854ee2\"\u003e\u003ccode\u003e89edfd2\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e26e7a8946b507c9445e08de04ee1b95c8eb6693\"\u003e\u003ccode\u003ee26e7a8\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51fdc98d72cbfb33f5bab9da1eb8d511b3160249\"\u003e\u003ccode\u003e51fdc98\u003c/code\u003e\u003c/a\u003e [actions] re-add finishers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.13.0...v6.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.0.3 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github...\n\n_Description has been truncated_","html_url":"https://github.com/2000Arion/gsc-docs/pull/256","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/2000Arion%2Fgsc-docs/issues/256","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/256/packages"},{"uuid":"5902711374","node_id":"PR_kwDOQGACbs8AAAABJEc85A","number":55,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T21:26:04.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T20:21:36.000Z","updated_at":"2026-10-17T21:26:07.000Z","time_to_close":3868,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.35.3","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"js-yaml","old_version":"3.15.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.24.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-copy","old_version":"4.0.2","new_version":"4.2.0","repository_url":"https://github.com/planttheidea/fast-copy"},{"name":"fast-uri","old_version":"3.1.7","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"ip-address","old_version":"10.5.0","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.15.1` | `3.15.2` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `5.0.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.24.2` | `4.29.3` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-copy](https://github.com/planttheidea/fast-copy) | `4.0.2` | `4.2.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.7` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.4` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `sharp` from 0.35.3 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.3...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.15.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/mocker` from 4.1.10 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099\"\u003e\u003ccode\u003ef341015\u003c/code\u003e\u003c/a\u003e 5.0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\"\u003e\u003ccode\u003e33a5ef1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568\"\u003e\u003ccode\u003e8247927\u003c/code\u003e\u003c/a\u003e 5.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c\"\u003e\u003ccode\u003e935d78f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f\"\u003e\u003ccode\u003edf7682f\u003c/code\u003e\u003c/a\u003e 5.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02\"\u003e\u003ccode\u003e1ade9de\u003c/code\u003e\u003c/a\u003e npm run format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3\"\u003e\u003ccode\u003e6735c94\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18\"\u003e\u003ccode\u003e4e70465\u003c/code\u003e\u003c/a\u003e chore: ensure prettier formatting (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/154\"\u003e#154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff\"\u003e\u003ccode\u003efd7a5e3\u003c/code\u003e\u003c/a\u003e Bump ip-address from 10.2.0 to 10.4.0 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4\"\u003e\u003ccode\u003e1790143\u003c/code\u003e\u003c/a\u003e Bump uuid and \u003ccode\u003e@​tapjs/processinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.24.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.24.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-copy` from 4.0.2 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/releases\"\u003efast-copy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd test cases requested from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/152\"\u003e#152\u003c/a\u003e) (721c4a1)\u003c/li\u003e\n\u003cli\u003ePreserve own \u003cstrong\u003eproto\u003c/strong\u003e properties when copying objects (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e) (3606924)\u003c/li\u003e\n\u003cli\u003eupdate CHANGELOG (0315cda)\u003c/li\u003e\n\u003cli\u003e[Documentaion] Loose array copies do not maintain sparseness (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/151\"\u003e#151\u003c/a\u003e) (fca2350)\u003c/li\u003e\n\u003cli\u003e[Cleanup] Test suite cleanup from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e (cac4371)\u003c/li\u003e\n\u003cli\u003efix: preserve Date own properties in strict copies (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e) (ec1ff4f)\u003c/li\u003e\n\u003cli\u003eHandle non-function prototype constructors when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/146\"\u003e#146\u003c/a\u003e) (07333a5)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.7.0 to 10.7.3 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/145\"\u003e#145\u003c/a\u003e) (0851ef5)\u003c/li\u003e\n\u003cli\u003eBump serialize-javascript from 7.1.1 to 7.1.2 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/144\"\u003e#144\u003c/a\u003e) (87936ba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate CHANGELOG (2c19569)\u003c/li\u003e\n\u003cli\u003e[Bugfix] Preserve DataView byte offset and length when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/143\"\u003e#143\u003c/a\u003e) (851526c)\u003c/li\u003e\n\u003cli\u003edocs: correct strict and recursive copier examples (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/142\"\u003e#142\u003c/a\u003e) (3b447e0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Bugfix] Audit for edge-case gaps (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/141\"\u003e#141\u003c/a\u003e) (decb094)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/140\"\u003e#140\u003c/a\u003e) (74edf81)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Security] Unbounded recursion on deep instances (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/137\"\u003e#137\u003c/a\u003e) (caa7caa)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Enhancement] Micro-optimizations (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/136\"\u003e#136\u003c/a\u003e) (ceb5366)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/135\"\u003e#135\u003c/a\u003e) (949215c)\u003c/li\u003e\n\u003cli\u003eBump the npm_and_yarn group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/134\"\u003e#134\u003c/a\u003e) (5acb8f5)\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.2 to 7.3.5 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/133\"\u003e#133\u003c/a\u003e) (572108e)\u003c/li\u003e\n\u003cli\u003eBump postcss from 8.5.9 to 8.5.14 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/132\"\u003e#132\u003c/a\u003e) (e82e93c)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.1.0 to 10.2.0 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/131\"\u003e#131\u003c/a\u003e) (c0a0a45)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Issue 128] Incorrect bigint arrays (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/130\"\u003e#130\u003c/a\u003e) (61cf3b2)\u003c/li\u003e\n\u003cli\u003eremove blurb about copying generators (91f692f)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/blob/main/CHANGELOG.md\"\u003efast-copy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/150\"\u003e#150\u003c/a\u003e - Preserve own \u003ccode\u003eDate\u003c/code\u003e properties in \u003ccode\u003estrict\u003c/code\u003e mode (thanks\n\u003ca href=\"https://github.com/xiehuanyi\"\u003e\u003ccode\u003e@​xiehuanyi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/146\"\u003e#146\u003c/a\u003e - Ensure \u003ccode\u003eConstructor\u003c/code\u003e is a function before performing\nnative code check, preventing edge case throw condition (thanks \u003ca href=\"https://github.com/fhgffy\"\u003e\u003ccode\u003e@​fhgffy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/147\"\u003e#147\u003c/a\u003e - Preserve own \u003ccode\u003e__proto__\u003c/code\u003e properties when copying objects\n(thanks \u003ca href=\"https://github.com/feritcemkahraman\"\u003e\u003ccode\u003e@​feritcemkahraman\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/143\"\u003e#143\u003c/a\u003e - Preserve the \u003ccode\u003ebyteOffset\u003c/code\u003e and \u003ccode\u003ebyteLength\u003c/code\u003e of a copied\n\u003ccode\u003eDataView\u003c/code\u003e. The copy previously covered the entire backing buffer, so a view over part of a buffer read from the wrong\nposition, and reads beyond its original bounds no longer threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/pralav-25\"\u003e\u003ccode\u003e@​pralav-25\u003c/code\u003e\u003c/a\u003e for identifying and fixing this.\u003c/p\u003e\n\u003ch2\u003e4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Copy the contents of a \u003ccode\u003eBuffer\u003c/code\u003e into memory it owns,\ninstead of returning a view over the original's memory. \u003ccode\u003eBuffer\u003c/code\u003e overrides \u003ccode\u003eslice\u003c/code\u003e with one that does not copy, so\nmutating the copy previously mutated the original.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Use a \u003ccode\u003enull\u003c/code\u003e prototype for the internal map of\ntag-specific copiers, so that a value carrying a custom \u003ccode\u003eSymbol.toStringTag\u003c/code\u003e cannot resolve to an inherited\n\u003ccode\u003eObject.prototype\u003c/code\u003e member as its copier. Tags such as \u003ccode\u003etoString\u003c/code\u003e, \u003ccode\u003evalueOf\u003c/code\u003e, or \u003ccode\u003ehasOwnProperty\u003c/code\u003e previously produced a\ngarbage copy or threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Add \u003ccode\u003emaxDepth\u003c/code\u003e option to \u003ccode\u003ecreateCopier\u003c/code\u003e, bounding the\nnumber of nested objects traversed (defaults to \u003ccode\u003e1000\u003c/code\u003e, pass \u003ccode\u003eInfinity\u003c/code\u003e to traverse without a limit)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Throw the new \u003ccode\u003eMaxDepthExceededError\u003c/code\u003e when a value is\nnested more deeply than \u003ccode\u003emaxDepth\u003c/code\u003e, instead of exhausting the call stack with a native \u003ccode\u003eRangeError\u003c/code\u003e; the error extends\n\u003ccode\u003eRangeError\u003c/code\u003e, so existing handling continues to work\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lenny-ts\"\u003e\u003ccode\u003e@​lenny-ts\u003c/code\u003e\u003c/a\u003e for identifying this.\u003c/p\u003e\n\u003ch3\u003eInternal changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eState\u003c/code\u003e object passed to custom \u003ccode\u003emethods\u003c/code\u003e now includes a \u003ccode\u003edepth\u003c/code\u003e property. This is maintained internally and\nshould not be modified, but it is a required property on the exported \u003ccode\u003eState\u003c/code\u003e type, so any code constructing a \u003ccode\u003eState\u003c/code\u003e\ndirectly (such as a test mock) will need to provide it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/commit/5c4e3acd3189d7919bcfd4bcf0041e0174cc31ff\"\u003e\u003ccode\u003e5c4e3ac\u003c/code\u003e\u003c/a\u003e Release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/comm...\n\n_Description has been truncated_","html_url":"https://github.com/xavisavvy/toa-website/pull/55","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xavisavvy%2Ftoa-website/issues/55","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/55/packages"},{"uuid":"5900723627","node_id":"PR_kwDOQsOEzM8AAAABJC6UUw","number":157,"state":"open","title":"chore(deps): bump the dependencies group across 1 directory with 18 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-17T16:44:46.000Z","updated_at":"2026-10-17T16:45:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"dependencies","update_count":18,"packages":[{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"dotenv","old_version":"17.4.2","new_version":"18.0.8","repository_url":"https://github.com/motdotla/dotenv"},{"name":"express","old_version":"5.2.1","new_version":"5.3.0","repository_url":"https://github.com/expressjs/express"},{"name":"nanoid","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/ai/nanoid"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"@apify/actor-memory-expression","old_version":"0.2.11","new_version":"1.0.1","repository_url":"https://github.com/apify/apify-shared-js"},{"name":"@apify/input_secrets","old_version":"1.2.55","new_version":"2.0.6","repository_url":"https://github.com/apify/apify-shared-js"},{"name":"@types/node","old_version":"26.2.0","new_version":"26.6.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"apify-cli","old_version":"1.8.0","new_version":"1.10.0","repository_url":"https://github.com/apify/apify-cli"},{"name":"eslint","old_version":"10.8.1","new_version":"10.12.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-plugin-sonarjs","old_version":"4.2.0","new_version":"4.2.2","repository_url":"https://github.com/SonarSource/SonarJS"},{"name":"eventsource","old_version":"5.1.0","new_version":"5.1.3","repository_url":"https://github.com/EventSource/eventsource"},{"name":"globals","old_version":"17.11.0","new_version":"17.13.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"jest","old_version":"30.4.2","new_version":"30.5.2","repository_url":"https://github.com/jestjs/jest"},{"name":"lint-staged","old_version":"17.3.0","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.10","repository_url":"https://github.com/prettier/prettier"},{"name":"supertest","old_version":"7.2.2","new_version":"7.3.1","repository_url":"https://github.com/ladjs/supertest"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 18 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.8` |\n| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |\n| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [@apify/actor-memory-expression](https://github.com/apify/apify-shared-js) | `0.2.11` | `1.0.1` |\n| [@apify/input_secrets](https://github.com/apify/apify-shared-js) | `1.2.55` | `2.0.6` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.5` |\n| [apify-cli](https://github.com/apify/apify-cli) | `1.8.0` | `1.10.0` |\n| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.12.0` |\n| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.2` |\n| [eventsource](https://github.com/EventSource/eventsource) | `5.1.0` | `5.1.3` |\n| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` |\n| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.2` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.6.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |\n| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |\n\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dotenv` from 17.4.2 to 18.0.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md\"\u003edotenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.7...v18.0.8\"\u003e18.0.8\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFast parser should strip appended extra quotes (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1073\"\u003e#1073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eType detail improvement (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1074\"\u003e#1074\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7\"\u003e18.0.7\u003c/a\u003e (2026-10-09)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat undefined settings like \u003ccode\u003equiet: true\u003c/code\u003e as null rather than falsey (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1070\"\u003e#1070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCLI should honor \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting in \u003ccode\u003e.env\u003c/code\u003e file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.5...v18.0.6\"\u003e18.0.6\u003c/a\u003e (2026-10-06)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse smarter \u003ccode\u003eparseBoolean\u003c/code\u003e not Boolean() to fix override (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1069\"\u003e#1069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.4...v18.0.5\"\u003e18.0.5\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing typescript module declaration (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1068\"\u003e#1068\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance for large .env files (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1066\"\u003e#1066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.3...v18.0.4\"\u003e18.0.4\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport dotenv/config\u003c/code\u003e should default quiet: true (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1063\"\u003e#1063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.2...v18.0.3\"\u003e18.0.3\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting when inside .env file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1059\"\u003e#1059\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.1...v18.0.2\"\u003e18.0.2\u003c/a\u003e (2026-09-21)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch additional edge cases for the fast parser (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1056\"\u003e#1056\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.0...v18.0.1\"\u003e18.0.1\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle file urls in config logging (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/e2fe95e8e952e881787d8207b654c80326f821d8\"\u003e\u003ccode\u003ee2fe95e\u003c/code\u003e\u003c/a\u003e 18.0.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/7aa712ab2914c0cf128ea8ccdaf5e918a867db59\"\u003e\u003ccode\u003e7aa712a\u003c/code\u003e\u003c/a\u003e type detail improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/53405b0b140debc002e41c5abb671d5da5f3e8f9\"\u003e\u003ccode\u003e53405b0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1074\"\u003e#1074\u003c/a\u003e from himanshu748/codex/fix-dotenv-populate-undefined...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/0b4843a90d6d70b110d1f1a309f209c3d8d7cb6e\"\u003e\u003ccode\u003e0b4843a\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/55855ab6bffb017ca94cb273704c055f2d977c57\"\u003e\u003ccode\u003e55855ab\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1073\"\u003e#1073\u003c/a\u003e from xiehuanyi/fix/unicode-unquoting-parity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/f7578114202cf0b8df31775225a9233ead6b2a80\"\u003e\u003ccode\u003ef757811\u003c/code\u003e\u003c/a\u003e fix(types): allow undefined values in populate output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/fde5db2bca73438a013ee8837b021a436e65dac7\"\u003e\u003ccode\u003efde5db2\u003c/code\u003e\u003c/a\u003e Keep fast-parser unquoting consistent at Unicode line boundaries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/295320751866efa323236c719cdc1b5306fa3de7\"\u003e\u003ccode\u003e2953207\u003c/code\u003e\u003c/a\u003e 18.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9944723d89e6f776897f171bfc6b945dfad23c57\"\u003e\u003ccode\u003e9944723\u003c/code\u003e\u003c/a\u003e make more readable for undefined -\u0026gt; null\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/d455db06a7b37acd8b240793a888efaba75885f4\"\u003e\u003ccode\u003ed455db0\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:motdotla/dotenv\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `express` from 5.2.1 to 5.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/express/releases\"\u003eexpress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by \u003ca href=\"https://github.com/YuryShkoda\"\u003e\u003ccode\u003e@​YuryShkoda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/4893\"\u003e#4893\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFixed the behavior of \u003ccode\u003eres.send()\u003c/code\u003e to prevent conflicts between \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e HTTP headers in responses. The \u003ccode\u003eContent-Length\u003c/code\u003e header in \u003ccode\u003eres.send()\u003c/code\u003e is now only added when a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header - by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7459\"\u003e#7459\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eqs\u003c/code\u003e to \u003ccode\u003e^6.16.0\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-2391\"\u003eCVE-2026-2391\u003c/a\u003e (\u003ca href=\"https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883\"\u003eGHSA-w7fw-mjwx-w883\u003c/a\u003e), \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82417\"\u003eCVE-2026-82417\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-4mjr-xmp4-gh2g\"\u003eGHSA-4mjr-xmp4-gh2g\u003c/a\u003e) and \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82562\"\u003eCVE-2026-82562\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-x5fp-wj9c-mxmx\"\u003eGHSA-x5fp-wj9c-mxmx\u003c/a\u003e): \u003ccode\u003earrayLimit\u003c/code\u003e bypasses in comma parsing and a denial of service via an attacker-controlled \u003ccode\u003eisBuffer\u003c/code\u003e - by \u003ca href=\"https://github.com/davetashner\"\u003e\u003ccode\u003e@​davetashner\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7057\"\u003e#7057\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7478\"\u003e#7478\u003c/a\u003e, and \u003ca href=\"https://github.com/cyphercodes\"\u003e\u003ccode\u003e@​cyphercodes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7305\"\u003e#7305\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eproxy-addr\u003c/code\u003e to \u003ccode\u003e^2.0.8\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e - by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7474\"\u003e#7474\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🚀 Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow conditional revalidation for QUERY requests. \u003ccode\u003ereq.fresh\u003c/code\u003e previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7366\"\u003e#7366\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// QUERY /reports with If-None-Match: \u0026quot;12345\u0026quot;\r\napp.query('/reports', (req, res) =\u0026gt; {\r\n  res.set('ETag', '\u0026quot;12345\u0026quot;');\r\n  res.send(results); // now responds 304 Not Modified\r\n});\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove HTML structure in \u003ccode\u003eres.redirect()\u003c/code\u003e responses when HTML format is accepted by adding \u003ccode\u003e\u0026lt;!DOCTYPE html\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;title\u0026gt;\u003c/code\u003e, and \u003ccode\u003e\u0026lt;body\u0026gt;\u003c/code\u003e tags for better browser compatibility - by \u003ca href=\"https://github.com/Bernice55231\"\u003e\u003ccode\u003e@​Bernice55231\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/5167\"\u003e#5167\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWhen calling \u003ccode\u003eapp.render\u003c/code\u003e with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by \u003ca href=\"https://github.com/AkaHarshit\"\u003eAkaHarshit\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6903\"\u003e#6903\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eapp.render('index', null, callback); // now works as expected\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-type\u003c/code\u003e to \u003ccode\u003e^2.0.0\u003c/code\u003e, bringing a faster parser (~1.5x quicker \u003ccode\u003eContent-Type\u003c/code\u003e parsing/formatting in \u003ccode\u003eres.send()\u003c/code\u003e) along with a behavior change: \u003ccode\u003eres.send()\u003c/code\u003e now keeps any existing parameters when adding the charset and no longer throws on a \u003ccode\u003eContent-Type\u003c/code\u003e that fails to parse. \u003ccode\u003etype-is\u003c/code\u003e is upgraded to \u003ccode\u003e^2.1.0\u003c/code\u003e as part of the same change - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7234\"\u003e#7234\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.set('Content-Type', 'text/plain; foo=bar').send('hey');\r\n// -\u0026gt; Content-Type: text/plain; foo=bar; charset=utf-8\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default error handler now logs the full error object instead of only its stack trace, so nested details such as \u003ccode\u003eError.cause\u003c/code\u003e and library-specific properties (e.g. Sequelize's \u003ccode\u003eparent\u003c/code\u003e/\u003ccode\u003eoriginal\u003c/code\u003e) are no longer swallowed - by \u003ca href=\"https://github.com/Nitin-Mohapatra\"\u003e\u003ccode\u003e@​Nitin-Mohapatra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6464\"\u003e#6464\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-disposition\u003c/code\u003e to \u003ccode\u003e^2.0.1\u003c/code\u003e, which changes the \u003ccode\u003eContent-Disposition\u003c/code\u003e header emitted by \u003ccode\u003eres.download()\u003c/code\u003e, \u003ccode\u003eres.attachment()\u003c/code\u003e, and \u003ccode\u003eres.sendFile()\u003c/code\u003e: file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7233\"\u003e#7233\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.attachment('user.html');\r\n// before -\u0026gt; Content-Disposition: attachment; filename=\u0026quot;user.html\u0026quot;\r\n// after  -\u0026gt; Content-Disposition: attachment; filename=user.html\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/express/blob/master/History.md\"\u003eexpress's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.3.0\u003c/h1\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by \u003ca href=\"https://github.com/YuryShkoda\"\u003e\u003ccode\u003e@​YuryShkoda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/4893\"\u003e#4893\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFixed the behavior of \u003ccode\u003eres.send()\u003c/code\u003e to prevent conflicts between \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e HTTP headers in responses. The \u003ccode\u003eContent-Length\u003c/code\u003e header in \u003ccode\u003eres.send()\u003c/code\u003e is now only added when a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header - by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7459\"\u003e#7459\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eqs\u003c/code\u003e to \u003ccode\u003e^6.16.0\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-2391\"\u003eCVE-2026-2391\u003c/a\u003e (\u003ca href=\"https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883\"\u003eGHSA-w7fw-mjwx-w883\u003c/a\u003e), \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82417\"\u003eCVE-2026-82417\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-4mjr-xmp4-gh2g\"\u003eGHSA-4mjr-xmp4-gh2g\u003c/a\u003e) and \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82562\"\u003eCVE-2026-82562\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-x5fp-wj9c-mxmx\"\u003eGHSA-x5fp-wj9c-mxmx\u003c/a\u003e): \u003ccode\u003earrayLimit\u003c/code\u003e bypasses in comma parsing and a denial of service via an attacker-controlled \u003ccode\u003eisBuffer\u003c/code\u003e - by \u003ca href=\"https://github.com/davetashner\"\u003e\u003ccode\u003e@​davetashner\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7057\"\u003e#7057\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7478\"\u003e#7478\u003c/a\u003e, and \u003ca href=\"https://github.com/cyphercodes\"\u003e\u003ccode\u003e@​cyphercodes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7305\"\u003e#7305\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eproxy-addr\u003c/code\u003e to \u003ccode\u003e^2.0.8\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e - by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7474\"\u003e#7474\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 Improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow conditional revalidation for QUERY requests. \u003ccode\u003ereq.fresh\u003c/code\u003e previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7366\"\u003e#7366\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// QUERY /reports with If-None-Match: \u0026quot;12345\u0026quot;\napp.query('/reports', (req, res) =\u0026gt; {\n  res.set('ETag', '\u0026quot;12345\u0026quot;');\n  res.send(results); // now responds 304 Not Modified\n});\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove HTML structure in \u003ccode\u003eres.redirect()\u003c/code\u003e responses when HTML format is accepted by adding \u003ccode\u003e\u0026lt;!DOCTYPE html\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;title\u0026gt;\u003c/code\u003e, and \u003ccode\u003e\u0026lt;body\u0026gt;\u003c/code\u003e tags for better browser compatibility - by \u003ca href=\"https://github.com/Bernice55231\"\u003e\u003ccode\u003e@​Bernice55231\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/5167\"\u003e#5167\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWhen calling \u003ccode\u003eapp.render\u003c/code\u003e with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by \u003ca href=\"https://github.com/AkaHarshit\"\u003eAkaHarshit\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6903\"\u003e#6903\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eapp.render('index', null, callback); // now works as expected\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-type\u003c/code\u003e to \u003ccode\u003e^2.0.0\u003c/code\u003e, bringing a faster parser (~1.5x quicker \u003ccode\u003eContent-Type\u003c/code\u003e parsing/formatting in \u003ccode\u003eres.send()\u003c/code\u003e) along with a behavior change: \u003ccode\u003eres.send()\u003c/code\u003e now keeps any existing parameters when adding the charset and no longer throws on a \u003ccode\u003eContent-Type\u003c/code\u003e that fails to parse. \u003ccode\u003etype-is\u003c/code\u003e is upgraded to \u003ccode\u003e^2.1.0\u003c/code\u003e as part of the same change - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7234\"\u003e#7234\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.set('Content-Type', 'text/plain; foo=bar').send('hey');\n// -\u0026gt; Content-Type: text/plain; foo=bar; charset=utf-8\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default error handler now logs the full error object instead of only its stack trace, so nested details such as \u003ccode\u003eError.cause\u003c/code\u003e and library-specific properties (e.g. Sequelize's \u003ccode\u003eparent\u003c/code\u003e/\u003ccode\u003eoriginal\u003c/code\u003e) are no longer swallowed - by \u003ca href=\"https://github.com/Nitin-Mohapatra\"\u003e\u003ccode\u003e@​Nitin-Mohapatra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6464\"\u003e#6464\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-disposition\u003c/code\u003e to \u003ccode\u003e^2.0.1\u003c/code\u003e, which changes the \u003ccode\u003eContent-Disposition\u003c/code\u003e header emitted by \u003ccode\u003eres.download()\u003c/code\u003e, \u003ccode\u003eres.attachment()\u003c/code\u003e, and \u003ccode\u003eres.sendFile()\u003c/code\u003e: file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7233\"\u003e#7233\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.attachment('user.html');\n// before -\u0026gt; Content-Disposition: attachment; filename=\u0026quot;user.html\u0026quot;\n// after  -\u0026gt; Content-Disposition: attachment; filename=user.html\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/cf6722bf89a86905281d9160b6482e08166b5ef0\"\u003e\u003ccode\u003ecf6722b\u003c/code\u003e\u003c/a\u003e 5.3.0 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7468\"\u003e#7468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/8c2fcfcb7d37c9c2e89363b7b86a092768c3a8a3\"\u003e\u003ccode\u003e8c2fcfc\u003c/code\u003e\u003c/a\u003e docs: fix typos and a stale API reference in lib comments (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9efc29e280018dafc1f0617f3a3d28f4e463b7be\"\u003e\u003ccode\u003e9efc29e\u003c/code\u003e\u003c/a\u003e docs: fix pass-through typos (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7509\"\u003e#7509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/2717ae3cbf2bdc3f946d22ea6a4e0b5bd438b87b\"\u003e\u003ccode\u003e2717ae3\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 3 updates (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/de777714df3fb1e81ac2d95f509c421478ab1e56\"\u003e\u003ccode\u003ede77771\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump hbs from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7500\"\u003e#7500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9169cbe1127ed1f9bc4f80a70b82c412467dd156\"\u003e\u003ccode\u003e9169cbe\u003c/code\u003e\u003c/a\u003e docs: add missing apostrophe in example (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7483\"\u003e#7483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/7ef98448f8b38099ab1ded55e458538ad47a51e7\"\u003e\u003ccode\u003e7ef9844\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump morgan from 1.12.0 to 1.12.1 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7493\"\u003e#7493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/3b7e39fe74371ddabc77fed736dd22aa71c14f5c\"\u003e\u003ccode\u003e3b7e39f\u003c/code\u003e\u003c/a\u003e deps: bump qs minimum to 6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/98bd4cd96b250d25e1672c36f49cfc743bc801e7\"\u003e\u003ccode\u003e98bd4cd\u003c/code\u003e\u003c/a\u003e deps: proxy-addr@^2.0.8 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9a34acf03cb818ff3f8bc40e44176e277a25cbb9\"\u003e\u003ccode\u003e9a34acf\u003c/code\u003e\u003c/a\u003e fix(res.send): preserve ETag generation with Transfer-Encoding (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/express/compare/v5.2.1...v5.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for express since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced JS bundle size (by \u003ca href=\"https://github.com/bayandin\"\u003e\u003ccode\u003e@​bayandin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed floats in size of \u003ccode\u003ecustomRandom\u003c/code\u003e (by \u003ca href=\"https://github.com/lost-signals\"\u003e\u003ccode\u003e@​lost-signals\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed performance of \u003ccode\u003ecustomRandom\u003c/code\u003e on changes size (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/Likio3000\"\u003e\u003ccode\u003e@​Likio3000\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced JS bundle size (by \u003ca href=\"https://github.com/bayandin\"\u003e\u003ccode\u003e@​bayandin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed floats in size of \u003ccode\u003ecustomRandom\u003c/code\u003e (by \u003ca href=\"https://github.com/lost-signals\"\u003e\u003ccode\u003e@​lost-signals\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed performance of \u003ccode\u003ecustomRandom\u003c/code\u003e on changes size (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/Likio3000\"\u003e\u003ccode\u003e@​Likio3000\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/3167e108865702c0539d8e552365ed840ac9d8d9\"\u003e\u003ccode\u003e3167e10\u003c/code\u003e\u003c/a\u003e Release 6.0.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/05057d860107d47c09f356da8347179e2ce9c23c\"\u003e\u003ccode\u003e05057d8\u003c/code\u003e\u003c/a\u003e Reduce Nano ID size to 117 bytes (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/613\"\u003e#613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/85f50f164b2bae635edaad8f63df833e7330af6a\"\u003e\u003ccode\u003e85f50f1\u003c/code\u003e\u003c/a\u003e Update size limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/0b2cec58ffd5ddc45978bf75a3bab46f53c76128\"\u003e\u003ccode\u003e0b2cec5\u003c/code\u003e\u003c/a\u003e Fix non-integer size in customRandom() (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ccb0e6ee5582eeb241ed3ea361eb98d5c5c7aea4\"\u003e\u003ccode\u003eccb0e6e\u003c/code\u003e\u003c/a\u003e fix: size customRandom's byte request from the ID length (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/612\"\u003e#612\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac313f907589482217a2f3be702b5c6a3ccc8b29\"\u003e\u003ccode\u003eac313f9\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/5a33c04974880a21d615efd2aa05b122f5fff96f\"\u003e\u003ccode\u003e5a33c04\u003c/code\u003e\u003c/a\u003e Backport changelog changes from v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/bb68abcd59ebb86a849d634320726add6be54d47\"\u003e\u003ccode\u003ebb68abc\u003c/code\u003e\u003c/a\u003e docs: fix custom generator JSDoc examples (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/610\"\u003e#610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/57009b5eb8d757ae39bf5f4361dd30c9f23391b7\"\u003e\u003ccode\u003e57009b5\u003c/code\u003e\u003c/a\u003e Update Size Limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8041d7d183e41cdc06273dee8105ece52175a959\"\u003e\u003ccode\u003e8041d7d\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/6.0.1...6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pino` from 10.3.1 to 10.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pinojs/pino/releases\"\u003epino's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd warning on incompatible formatters.level with multi-target transports by \u003ca href=\"https://github.com/lraveri\"\u003e\u003ccode\u003e@​lraveri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2381\"\u003epinojs/pino#2381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: use TSTyche for type testing by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2376\"\u003epinojs/pino#2376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Sentry Native Integration Docs by \u003ca href=\"https://github.com/KyleTryon\"\u003e\u003ccode\u003e@​KyleTryon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2394\"\u003epinojs/pino#2394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add flush limitation warning for pino-pretty, fix \u003ca href=\"https://redirect.github.com/pinojs/pino/issues/1015\"\u003e#1015\u003c/a\u003e by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2402\"\u003epinojs/pino#2402\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(browser): add redaction support by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2396\"\u003epinojs/pino#2396\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: lint the type declaration file by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2408\"\u003epinojs/pino#2408\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove TSTyche config file by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2409\"\u003epinojs/pino#2409\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify multi-target formatter limitation by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2410\"\u003epinojs/pino#2410\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNo bots allowed by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2412\"\u003epinojs/pino#2412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump real-require from 0.2.0 to 1.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2414\"\u003epinojs/pino#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2418\"\u003epinojs/pino#2418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: use util.getCallSites when able to allow frozen intrinsics by \u003ca href=\"https://github.com/CarlOlson\"\u003e\u003ccode\u003e@​CarlOlson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2294\"\u003epinojs/pino#2294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate AWS Lambda reference in asynchronous docs by \u003ca href=\"https://github.com/urbanautomaton\"\u003e\u003ccode\u003e@​urbanautomaton\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2413\"\u003epinojs/pino#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update license by \u003ca href=\"https://github.com/Tony133\"\u003e\u003ccode\u003e@​Tony133\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2375\"\u003epinojs/pino#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add named \u003ccode\u003edefault\u003c/code\u003e export by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2421\"\u003epinojs/pino#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate contrib doc by \u003ca href=\"https://github.com/jsumners\"\u003e\u003ccode\u003e@​jsumners\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2424\"\u003epinojs/pino#2424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use \u003ccode\u003e@​hono/structured-logger\u003c/code\u003e for Pino with Hono by \u003ca href=\"https://github.com/brunorodmoreira\"\u003e\u003ccode\u003e@​brunorodmoreira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2425\"\u003epinojs/pino#2425\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): remove \u003ccode\u003epre-commit\u003c/code\u003e by \u003ca href=\"https://github.com/kshitijanurag\"\u003e\u003ccode\u003e@​kshitijanurag\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2423\"\u003epinojs/pino#2423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/github-script from 8 to 9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2427\"\u003epinojs/pino#2427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2428\"\u003epinojs/pino#2428\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2429\"\u003epinojs/pino#2429\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix flaky transport config test by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2434\"\u003epinojs/pino#2434\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: upgrade typescript to v6.0.2 by \u003ca href=\"https://github.com/Tony133\"\u003e\u003ccode\u003e@​Tony133\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2419\"\u003epinojs/pino#2419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typo \u0026quot;compatability\u0026quot; → \u0026quot;compatibility\u0026quot; in README by \u003ca href=\"https://github.com/premsreelathasugeendran\"\u003e\u003ccode\u003e@​premsreelathasugeendran\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2435\"\u003epinojs/pino#2435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: warn against untrusted top-level log keys by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2450\"\u003epinojs/pino#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(transport): keep event loop alive while awaiting async flush by \u003ca href=\"https://github.com/YBJ0000\"\u003e\u003ccode\u003e@​YBJ0000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2470\"\u003epinojs/pino#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify Node.js version support policy in LTS doc by \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2472\"\u003epinojs/pino#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor per-target level filter on single-element \u003ccode\u003etargets\u003c/code\u003e array by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2432\"\u003epinojs/pino#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(multistream): resolve string level labels in write() by \u003ca href=\"https://github.com/xianjianlf2\"\u003e\u003ccode\u003e@​xianjianlf2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2474\"\u003epinojs/pino#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: escape child binding keys by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2452\"\u003epinojs/pino#2452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify stringification limits by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2475\"\u003epinojs/pino#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add setBindings to the browser logger by \u003ca href=\"https://github.com/ankit1324\"\u003e\u003ccode\u003e@​ankit1324\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2471\"\u003epinojs/pino#2471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2486\"\u003epinojs/pino#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump through2 from 4.0.2 to 5.0.10 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2488\"\u003epinojs/pino#2488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump bole from 5.0.29 to 6.0.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2489\"\u003epinojs/pino#2489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2492\"\u003epinojs/pino#2492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.2 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2485\"\u003epinojs/pino#2485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: log objects with an own \u003cstrong\u003eproto\u003c/strong\u003e key instead of crashing by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2457\"\u003epinojs/pino#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: build the redaction shape without Object.prototype by \u003ca href=\"https://github.com/luantaraschi\"\u003e\u003ccode\u003e@​luantaraschi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2495\"\u003epinojs/pino#2495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Node.js 26 to test matrix by \u003ca href=\"https://github.com/aquie00t\"\u003e\u003ccode\u003e@​aquie00t\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2480\"\u003epinojs/pino#2480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(multistream): fix clone add crash and missing end/remove methods by \u003ca href=\"https://github.com/spellsaif\"\u003e\u003ccode\u003e@​spellsaif\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2493\"\u003epinojs/pino#2493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: check pull requests target main by \u003ca href=\"https://github.com/marktran0710\"\u003e\u003ccode\u003e@​marktran0710\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2500\"\u003epinojs/pino#2500\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2513\"\u003epinojs/pino#2513\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2515\"\u003epinojs/pino#2515\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDelete .github/dependabot.yml by \u003ca href=\"https://github.com/jsumners\"\u003e\u003ccode\u003e@​jsumners\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2517\"\u003epinojs/pino#2517\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: document the APIs that are unavailable in the browser by \u003ca href=\"https://github.com/kavish-19\"\u003e\u003ccode\u003e@​kavish-19\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2521\"\u003epinojs/pino#2521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: pin lock-threads to upstream v6.0.2 to fix token validation failure by \u003ca href=\"https://github.com/simpleqt\"\u003e\u003ccode\u003e@​simpleqt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2525\"\u003epinojs/pino#2525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bindings() method to browser logger by \u003ca href=\"https://github.com/RT1811\"\u003e\u003ccode\u003e@​RT1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2504\"\u003epinojs/pino#2504\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/b29dbe97820630e7128e464c50263b427965ec99\"\u003e\u003ccode\u003eb29dbe9\u003c/code\u003e\u003c/a\u003e Bumped v10.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6ba157b1a6727399f9dc01a584d2e08d5094ea57\"\u003e\u003ccode\u003e6ba157b\u003c/code\u003e\u003c/a\u003e docs: fix the pino-pretty flush explanation after thread-stream#198 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2524\"\u003e#2524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6429c14b02ca0253a3a961cfc34ab96790d504f7\"\u003e\u003ccode\u003e6429c14\u003c/code\u003e\u003c/a\u003e docs: Note that serializers run on child bindings at creation time (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6c71bc98ff17dfb7b12de18c6b48cd465acfa6fc\"\u003e\u003ccode\u003e6c71bc9\u003c/code\u003e\u003c/a\u003e Add bindings method to browser logger (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2504\"\u003e#2504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/b557f727237ddc4c246b1798c543c35f7bf21ac1\"\u003e\u003ccode\u003eb557f72\u003c/code\u003e\u003c/a\u003e ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2525\"\u003e#2525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/1de1212b31f569c50bb14ca11e13a8f8bb2b2407\"\u003e\u003ccode\u003e1de1212\u003c/code\u003e\u003c/a\u003e docs: document the APIs that are unavailable in the browser (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/af2fe10c73182d63310c61393ecd7ed4031ad1d7\"\u003e\u003ccode\u003eaf2fe10\u003c/code\u003e\u003c/a\u003e Delete .github/dependabot.yml (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/5aa62305c57709ebd6f6b7c328e8830eeb29b297\"\u003e\u003ccode\u003e5aa6230\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2515\"\u003e#2515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6f5af07f122a74044afb50b208491b79255a0ef2\"\u003e\u003ccode\u003e6f5af07\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2513\"\u003e#2513\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/2ffe576ab7f3a48d80bd59b6177b790c53840606\"\u003e\u003ccode\u003e2ffe576\u003c/code\u003e\u003c/a\u003e ci: check pull requests target main (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2500\"\u003e#2500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pinojs/pino/compare/v10.3.1...v10.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@apify/actor-memory-expression` from 0.2.11 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apify/apify-shared-js/releases\"\u003e@​apify/actor-memory-expression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​apify/actor-memory-expression\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/compare/@apify/actor-memory-expression@0.3.0...@apify/actor-memory-expression@1.0.1\"\u003e1.0.1\u003c/a\u003e (2026-09-03)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egraduate remaining 0.x packages to v1 (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/700\"\u003e#700\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/1d754faa579c748be9f1a0da7bf0c325e42858d8\"\u003e1d754fa\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apify/actor-memory-expression\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/compare/@apify/actor-memory-expression@0.2.16...@apify/actor-memory-expression@0.3.0\"\u003e0.3.0\u003c/a\u003e (2026-09-03)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003einput_secrets:\u003c/strong\u003e replace ow with zod validation (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/685\"\u003e#685\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/38a6890fd724743b7c07c752766c69f47a1f7694\"\u003e38a6890\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epublish ESM-only packages and require Node.js 22+ (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/684\"\u003e#684\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/338dbac5df0cd7a991e06c747bb82af9aec562a6\"\u003e338dbac\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003einput_secrets:\u003c/strong\u003e Invalid arguments throw ArgumentValidationError instead of ow's ArgumentError, with differently formatted messages.\u003c/li\u003e\n\u003cli\u003eAll packages are ESM-only and require Node.js 22 or higher. CommonJS consumers on Node.js 22+ can still require() them thanks to native require(esm) support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/CHANGELOG.md\"\u003e@​apify/actor-memory-expression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ccode\u003eapify-shared\u003c/code\u003e monorepo\u003c/h1\u003e\n\u003cp\u003e\u003ccode\u003eapify-shared\u003c/code\u003e is now an independently versioned monorepo.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eThis file is generated.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eSee the changelogs of each package:\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003epackage\u003c/th\u003e\n\u003cth\u003eversion\u003c/th\u003e\n\u003cth\u003echangelog\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/actor-categories\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.3.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/actor-categories/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/actor-memory-expression\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/actor-memory-expression/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/consts\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/consts/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/datastructures\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/datastructures/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/git\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/git/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/image_proxy_client\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/image_proxy_client/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/input_schema\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e4.0.6\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/input_schema/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/input_secrets\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e2.0.6\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/input_secrets/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/json_schemas\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/json_schemas/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/log\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/log/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/markdown\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e4.1.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/markdown/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/payment_qr_codes\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/payment_qr_codes/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/pseudo_url\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/pseudo_url/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/timeout\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/timeout/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apif...\n\n_Description has been truncated_","html_url":"https://github.com/ar27111994/webhook-debugger-logger/pull/157","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ar27111994%2Fwebhook-debugger-logger/issues/157","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/157/packages"},{"uuid":"5900085089","node_id":"PR_kwDOOzFZtM8AAAABJCag2Q","number":176,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-17T15:42:13.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T15:41:53.000Z","updated_at":"2026-10-17T15:42:32.000Z","time_to_close":20,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"@tiptap/core","old_version":"3.20.1","new_version":"3.30.5","repository_url":"https://github.com/ueberdosis/tiptap"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"next","old_version":"16.1.6","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"baseline-browser-mapping","old_version":"2.9.15","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"linkify-it","old_version":"5.0.0","new_version":"5.0.2","repository_url":"https://github.com/markdown-it/linkify-it"},{"name":"markdown-it","old_version":"14.1.0","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss","old_version":"8.4.31","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"prosemirror-view","old_version":"1.41.4","new_version":"1.42.6","repository_url":"https://github.com/prosemirror/prosemirror-view"},{"name":"sharp","old_version":"0.34.5","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"3.3.2","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.20.1` | `3.30.5` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [next](https://github.com/vercel/next.js) | `16.1.6` | `16.3.8` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.15` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [linkify-it](https://github.com/markdown-it/linkify-it) | `5.0.0` | `5.0.2` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.0` | `14.3.3` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.5.23` |\n| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.41.4` | `1.42.6` |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.5` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `3.3.2` | `3.3.5` |\n\n\nUpdates `@tiptap/core` from 3.20.1 to 3.30.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ueberdosis/tiptap/releases\"\u003e@​tiptap/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.30.5\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.4\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent untrusted HTML attributes from changing an object's prototype when merged with \u003ccode\u003emergeAttributes\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.3\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/extension-text-style\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnsetting one text style inside a blockquote no longer removes the other text styles in it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/extension-youtube\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eYouTube live URLs (\u003ccode\u003e/live/\u0026lt;id\u0026gt;\u003c/code\u003e) now embed the video.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/react\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix ReactNodeViewRenderer crash when contentComponent is not available\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/ai-toolkit\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003eMinor Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd the \u003ccode\u003eAiInsertReveal\u003c/code\u003e extension (\u003ccode\u003e@tiptap/ai-toolkit/streaming-reveal\u003c/code\u003e) to fade in text as the AI streams it into a collaborative document.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.2\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/core/CHANGELOG.md\"\u003e@​tiptap/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.30.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ed0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.5\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with \u003ccode\u003emergeAttributes\u003c/code\u003e.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.4\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e965a880: Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e3dffed5: Keep mixed JSX children as separate siblings in DOM output.\u003c/li\u003e\n\u003cli\u003e214a140: Fixed a bug where \u003ccode\u003eeditor.chain\u003c/code\u003e and \u003ccode\u003eeditor.can\u003c/code\u003e can not be accessed on editor initialization\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabc8828: Added new ProseMirror helpers that check whether a value is a specific ProseMirror type.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e0247d39: \u003ccode\u003eListKeymap\u003c/code\u003e now registers a \u003ccode\u003eTab\u003c/code\u003e shortcut that sinks a top-level textblock into the previous list's last item. Pressing Tab at the start of a paragraph right after a bullet/ordered/task list moves the paragraph inside the last list item. The handler does nothing when the cursor is already inside a list item (\u003ccode\u003esinkListItem\u003c/code\u003e keeps working), when there is no list before the paragraph, when the caret is mid-textblock, or when the selection is not a text selection (for example a gap cursor).\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003e@tiptap/core\u003c/code\u003e also exposes a new \u003ccode\u003egetPreviousBlockSibling($pos)\u003c/code\u003e helper that returns the block-level sibling before the cursor's textblock, or null at the first child of the block parent.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e3099eef: \u003cstrong\u003eNew Decorations API\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eFinally the decorations API is here! Even though Decorations itself are nothing new in ProseMirror, the new API makes it much easier to use them in Tiptap without leaving your extensions.\u003c/p\u003e\n\u003cp\u003eDecorations change how the document looks without changing the document itself. Highlighting search results, marking spelling mistakes, showing collaborator cursors, putting a drag handle next to every block.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/b0c188b1bc919b204beace074de36f5cb2a2d961\"\u003e\u003ccode\u003eb0c188b\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8261\"\u003e#8261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/d0d499be3cce633cf54ca9aa9f3d8a5a1f98bd74\"\u003e\u003ccode\u003ed0d499b\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/55f59e4907b37e0aa4404c52e965014f66158393\"\u003e\u003ccode\u003e55f59e4\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8260\"\u003e#8260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/01d7af8c983ee5954c63734f4fa46cb23ae3246d\"\u003e\u003ccode\u003e01d7af8\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/98b469dbb7fb51e4c306dc2860355307801e8897\"\u003e\u003ccode\u003e98b469d\u003c/code\u003e\u003c/a\u003e chore: complete Vite+ migration (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8258\"\u003e#8258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/db790a7c5a6009b0a94382e12e1a5e9c642e1660\"\u003e\u003ccode\u003edb790a7\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/f434577e6bb2010b321653cb132a57bda18764fa\"\u003e\u003ccode\u003ef434577\u003c/code\u003e\u003c/a\u003e chore: migrate over to vite+ for tooling (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8151\"\u003e#8151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/965a880c1f0af94b992722d1fdfbc53029d20e90\"\u003e\u003ccode\u003e965a880\u003c/code\u003e\u003c/a\u003e fix(core): preserve JSX child boundaries (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/7491\"\u003e#7491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/cef2c9aa1534b31662014bd1a3b4d9022da1b403\"\u003e\u003ccode\u003ecef2c9a\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8190\"\u003e#8190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/214a140450a06cb787543bac55757b9dcde1dd9e\"\u003e\u003ccode\u003e214a140\u003c/code\u003e\u003c/a\u003e fixed \u003ccode\u003eeditor.can\u003c/code\u003e and \u003ccode\u003eeditor.chain\u003c/code\u003e to not be accessible on editor … (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8210\"\u003e#8210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.1.6 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.1.6...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.15 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.15...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fflate` from 0.8.2 to 0.8.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/101arrowz/fflate/releases\"\u003efflate's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.8.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix buffer over-read for Zip64 extra fields\u003c/li\u003e\n\u003cli\u003eSupport sync flushes (\u003ccode\u003eZ_SYNC_FLUSH\u003c/code\u003e in zlib)\n\u003cul\u003e\n\u003cli\u003eAllows for immediate decompression of all pushed bytes\u003c/li\u003e\n\u003cli\u003eEnables DEFLATE stream concatenation\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ezip\u003c/code\u003e/\u003ccode\u003ezipSync\u003c/code\u003e when using cross-realm \u003ccode\u003eUint8Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImprove Zip64 support for streamed or undersized archives\u003c/li\u003e\n\u003cli\u003eUpdate performance estimates in README\u003c/li\u003e\n\u003cli\u003eFix typings for TypeScript v5.7+\u003c/li\u003e\n\u003cli\u003eReduce memory consumption after compression stream completion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/101arrowz/fflate/blob/master/CHANGELOG.md\"\u003efflate's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.8.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix buffer over-read for Zip64 extra fields\u003c/li\u003e\n\u003cli\u003eSupport sync flushes (\u003ccode\u003eZ_SYNC_FLUSH\u003c/code\u003e in zlib)\n\u003cul\u003e\n\u003cli\u003eAllows for immediate decompression of all pushed bytes\u003c/li\u003e\n\u003cli\u003eEnables DEFLATE stream concatenation\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ezip\u003c/code\u003e/\u003ccode\u003ezipSync\u003c/code\u003e when using cross-realm \u003ccode\u003eUint8Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImprove Zip64 support for streamed or undersized archives\u003c/li\u003e\n\u003cli\u003eUpdate performance estimates in README\u003c/li\u003e\n\u003cli\u003eFix typings for TypeScript v5.7+\u003c/li\u003e\n\u003cli\u003eReduce memory consumption after compression stream completion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/dcb3714a6c25db3a2748641019c5277413d09714\"\u003e\u003ccode\u003edcb3714\u003c/code\u003e\u003c/a\u003e 0.8.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/31acfb8d282ae3a8bf5b81841aaf5f547c2c455c\"\u003e\u003ccode\u003e31acfb8\u003c/code\u003e\u003c/a\u003e prepare for v0.8.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/7b71e3ce08f856dc3ce2b40884ffc4c0bb210f8a\"\u003e\u003ccode\u003e7b71e3c\u003c/code\u003e\u003c/a\u003e update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/44ff62dd96f7dca9afa8a0b02ef4868d5ac3eae4\"\u003e\u003ccode\u003e44ff62d\u003c/code\u003e\u003c/a\u003e fix zip64 header parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/7235df5d89a02ae0a6d32c86785427ff41108b34\"\u003e\u003ccode\u003e7235df5\u003c/code\u003e\u003c/a\u003e Fix TypeScript issues (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/242\"\u003e#242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/a44eda041adf490cd060129f96bc9a7bcbfcc602\"\u003e\u003ccode\u003ea44eda0\u003c/code\u003e\u003c/a\u003e release compression buffers after stream end (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/d94deb6b8a8718b3a337f8eee9f95d575822b014\"\u003e\u003ccode\u003ed94deb6\u003c/code\u003e\u003c/a\u003e allow cross-realm Uint8Array for zip/zipSync (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/234\"\u003e#234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/2e1fb75b19f8555a33c8f1ab636a2de42e22a0ff\"\u003e\u003ccode\u003e2e1fb75\u003c/code\u003e\u003c/a\u003e export package.json (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/244\"\u003e#244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/0f430b492b57703128d50353e798f5033014cc80\"\u003e\u003ccode\u003e0f430b4\u003c/code\u003e\u003c/a\u003e support sync flushes for compression streams (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/222\"\u003e#222\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/4b7a6cbf7658271f0554521f53c0aad771cc7d14\"\u003e\u003ccode\u003e4b7a6cb\u003c/code\u003e\u003c/a\u003e skip transferring pooled Node buffers (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/227\"\u003e#227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/101arrowz/fflate/compare/v0.8.2...v0.8.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `linkify-it` from 5.0.0 to 5.0.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md\"\u003elinkify-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.0.2 / 2026-07-02\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DoS in \u003ccode\u003emailto:\u003c/code\u003e links (restrict user name to 64 chars).\u003c/li\u003e\n\u003cli\u003eRestricted user/pass part length in links.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.1 / 2026-05-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DoS in fuzzy links/emails search.\u003c/li\u003e\n\u003cli\u003eReworked search logic - check each pattern separate, use \u003ccode\u003eg\u003c/code\u003e regexes instead\nof slice.\u003c/li\u003e\n\u003cli\u003eRemoved internal cache - useless overcomplication.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/50a0c914f834b201cab25ff4faefd1f832b37332\"\u003e\u003ccode\u003e50a0c91\u003c/code\u003e\u003c/a\u003e 5.0.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/de3b88554b5e465d5fa19914e2a1801ebb3069ef\"\u003e\u003ccode\u003ede3b885\u003c/code\u003e\u003c/a\u003e Update package hooks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/13effaaa4600d1fcff9f63c38fecdd601bfd83e7\"\u003e\u003ccode\u003e13effaa\u003c/code\u003e\u003c/a\u003e Add package lock\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/39d748dbfc77534e9be04d87cd9f57a13b9b4216\"\u003e\u003ccode\u003e39d748d\u003c/code\u003e\u003c/a\u003e Bump c8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/00ce8771ac0c3e6784dcacaa1625ca0fc1b62a12\"\u003e\u003ccode\u003e00ce877\u003c/code\u003e\u003c/a\u003e Drop tlds deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/ecde82341a1b2e349b03eb01f3e1d2cc105bcd7f\"\u003e\u003ccode\u003eecde823\u003c/code\u003e\u003c/a\u003e Update benchmark to mitata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/23c62cdd14ef36e89c175c6726e2229e5b76e75f\"\u003e\u003ccode\u003e23c62cd\u003c/code\u003e\u003c/a\u003e Refactor demo / doc build and publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/fd63f3b4ab433ca3561304409b572eed465706cd\"\u003e\u003ccode\u003efd63f3b\u003c/code\u003e\u003c/a\u003e CI config update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/f4ea5afaa6a8e1109c44898158d4910b3fb128fb\"\u003e\u003ccode\u003ef4ea5af\u003c/code\u003e\u003c/a\u003e demo: update bootstrap \u0026amp; layout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/1454fb645f00c33a05edbded18640d5078ba7710\"\u003e\u003ccode\u003e1454fb6\u003c/code\u003e\u003c/a\u003e lint: dim warnings\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/linkify-it/compare/5.0.0...5.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 14.1.0 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.1.0...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.11 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.11...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.4.31 to 8.5.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/...\n\n_Description has been truncated_","html_url":"https://github.com/cjc-it-ltd/CIPP/pull/176","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cjc-it-ltd%2FCIPP/issues/176","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/176/packages"},{"uuid":"5889337729","node_id":"PR_kwDOQoQiFc8AAAABI6D6Tg","number":1983,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 9 directories with 6 updates","user":"dependabot[bot]","labels":["size/XL","type: dependencies","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T18:35:54.000Z","updated_at":"2026-10-16T18:38:21.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":6,"packages":[{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.0.2","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.15.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.0.2","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.15.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 3 updates in the /apps/services/crop-growth-model directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 4 updates in the /apps/services/disaster-assessment directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [handlebars](https://github.com/handlebars-lang/handlebars.js), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/lai-estimation directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/marketplace-service directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [handlebars](https://github.com/handlebars-lang/handlebars.js) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 1 update in the /apps/services/user-service directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/yield-prediction directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /archive/deprecated-services/community-chat directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [engine.io](https://github.com/socketio/socket.io) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 2 updates in the /archive/kernel-legacy/kernel/services/field_core directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 1 update in the /packages/shared-crypto directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.0.2 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.15.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.0.2 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.8 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.7.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2\u003c/li\u003e\n\u003cli\u003efix type \u0026quot;RuntimeOptions\u0026quot; also accepting string partials - eab1d14\u003c/li\u003e\n\u003cli\u003efeat(types): set \u003ccode\u003ehash\u003c/code\u003e to be a \u003ccode\u003eRecord\u0026lt;string, any\u0026gt;\u003c/code\u003e - de4414d\u003c/li\u003e\n\u003cli\u003efix non-contiguous program indices - 4512766\u003c/li\u003e\n\u003cli\u003erefactor: rename i to startPartIndex - e497a35\u003c/li\u003e\n\u003cli\u003esecurity: fix security issues - 68d8df5\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.7.9 - March 26th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2\u003c/li\u003e\n\u003cli\u003efix type \u0026quot;RuntimeOptions\u0026quot; also accepting string partials - eab1d14\u003c/li\u003e\n\u003cli\u003efeat(types): set \u003ccode\u003ehash\u003c/code\u003e to be a \u003ccode\u003eRecord\u0026lt;string, any\u0026gt;\u003c/code\u003e - de4414d\u003c/li\u003e\n\u003cli\u003efix non-contiguous program indices - 4512766\u003c/li\u003e\n\u003cli\u003erefactor: rename i to startPartIndex - e497a35\u003c/li\u003e\n\u003cli\u003esecurity: fix security issues - 68d8df5\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navi...\n\n_Description has been truncated_","html_url":"https://github.com/kafaat/sahool-unified-v15-idp/pull/1983","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kafaat%2Fsahool-unified-v15-idp/issues/1983","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1983/packages"},{"uuid":"5828516724","node_id":"PR_kwDOLIswH88AAAABIJaT2w","number":1737,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","javascript","js-sdk"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-13T14:22:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T10:14:53.000Z","updated_at":"2026-10-13T14:23:00.000Z","time_to_close":14873,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"@modelcontextprotocol/sdk","old_version":"1.29.0","new_version":"1.32.1","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.18.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /examples/openai-agents-js-app directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript directory: [axios](https://github.com/axios/axios) and [handlebars](https://github.com/handlebars-lang/handlebars.js).\n\nUpdates `@modelcontextprotocol/sdk` from 1.29.0 to 1.32.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.32.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] docs: state the principles in CLAUDE.md by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2939\"\u003emodelcontextprotocol/typescript-sdk#2939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] docs: point the README at v2 and say what v1.x supports by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2942\"\u003emodelcontextprotocol/typescript-sdk#2942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2954\"\u003emodelcontextprotocol/typescript-sdk#2954\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.32.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRedirects:\u003c/strong\u003e the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets \u003ccode\u003eredirectPolicy: 'follow'\u003c/code\u003e on \u003ccode\u003eStreamableHTTPClientTransport\u003c/code\u003e or \u003ccode\u003eSSEClientTransport\u003c/code\u003e. In browsers, a redirected request fails unless that option is set.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew options, both off unless you set them:\u003c/strong\u003e \u003ccode\u003emaxToolInputElements\u003c/code\u003e on \u003ccode\u003eMcpServer\u003c/code\u003e limits the number of array elements and object members in a tool call's arguments. \u003ccode\u003eexpectedResource\u003c/code\u003e on \u003ccode\u003erequireBearerAuth\u003c/code\u003e accepts only tokens issued for this server (the token's audience).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(client): follow redirects only within the endpoint's origin by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2902\"\u003emodelcontextprotocol/typescript-sdk#2902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: point SECURITY.md at GitHub Security Advisories (v1.x) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2910\"\u003emodelcontextprotocol/typescript-sdk#2910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] examples: close idle sessions and cap the session map by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2914\"\u003emodelcontextprotocol/typescript-sdk#2914\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2925\"\u003emodelcontextprotocol/typescript-sdk#2925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2927\"\u003emodelcontextprotocol/typescript-sdk#2927\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by \u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(auth): add expectedResource to requireBearerAuth by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2930\"\u003emodelcontextprotocol/typescript-sdk#2930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] test(e2e): cover tools/call and prompts/get without arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2931\"\u003emodelcontextprotocol/typescript-sdk#2931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2935\"\u003emodelcontextprotocol/typescript-sdk#2935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/ff07b001194fe60ee9deb2121cf119057565796d\"\u003e\u003ccode\u003eff07b00\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2954\"\u003e#2954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/8a74d504a9ac1250f209325536f2f6c443e04ae6\"\u003e\u003ccode\u003e8a74d50\u003c/code\u003e\u003c/a\u003e [v1.x] docs: point the README at v2 and say what v1.x supports (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a8cf50360f1366ffee174ac337146657bad9be2c\"\u003e\u003ccode\u003ea8cf503\u003c/code\u003e\u003c/a\u003e [v1.x] docs: state the principles in CLAUDE.md (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/32549b00a9a808265f35a29f92fdf27fa4aac2ef\"\u003e\u003ccode\u003e32549b0\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2935\"\u003e#2935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/588d51dbe337000705890fad81e874eb080174c2\"\u003e\u003ccode\u003e588d51d\u003c/code\u003e\u003c/a\u003e [v1.x] test(e2e): cover tools/call and prompts/get without arguments (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2931\"\u003e#2931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/5a0724d14cf34a27a3b070224d2996cdd611df9f\"\u003e\u003ccode\u003e5a0724d\u003c/code\u003e\u003c/a\u003e [v1.x] feat(auth): add expectedResource to requireBearerAuth (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2930\"\u003e#2930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ca0b62d93c6cb403b3b96122eff3a3140b84cc0\"\u003e\u003ccode\u003e0ca0b62\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f\"\u003e\u003ccode\u003efd26801\u003c/code\u003e\u003c/a\u003e [v1.x] feat(server): add maxToolInputElements option to limit the number of e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa\"\u003e\u003ccode\u003e727075b\u003c/code\u003e\u003c/a\u003e [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ff63772dae796f41578ace47f7c814f4d86fa24\"\u003e\u003ccode\u003e0ff6377\u003c/code\u003e\u003c/a\u003e [v1.x] examples: close idle sessions and cap the session map (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2914\"\u003e#2914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.32.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​modelcontextprotocol/sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.18.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/openlit/openlit/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Generated by sourcery-ai[bot]: start fixed-security --\u003e\n- Resolves [CVE-2026-104850 — @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials](https://app.sourcery.ai/dashboard/security/issues?groupId=133308485\u0026issueIds=137600912)\n- Resolves [CVE-2026-90711 — proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet](https://app.sourcery.ai/dashboard/security/issues?groupId=133308499\u0026issueIds=137600926)\n\u003c!-- Generated by sourcery-ai[bot]: end fixed-security --\u003e","html_url":"https://github.com/openlit/openlit/pull/1737","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openlit%2Fopenlit/issues/1737","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1737/packages"},{"uuid":"5824923227","node_id":"PR_kwDOPCDvZs8AAAABIGihcw","number":10,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":true,"comments_count":1,"pull_request":true,"closed_at":"2026-10-13T05:35:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T05:13:52.000Z","updated_at":"2026-10-13T05:35:33.000Z","time_to_close":1290,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"@modelcontextprotocol/sdk","old_version":"1.26.0","new_version":"1.31.0","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@hono/node-server","old_version":"1.19.9","new_version":"2.1.4","repository_url":"https://github.com/honojs/node-server"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"hono","old_version":"4.11.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"ip-address","old_version":"10.0.1","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.31.0` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.9` | `2.1.4` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.13.13` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.0.1` | `10.7.4` |\n\n\nUpdates `@modelcontextprotocol/sdk` from 1.26.0 to 1.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.30.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.30.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(server): prioritize zod issues and format them by \u003ca href=\"https://github.com/mozmo15\"\u003e\u003ccode\u003e@​mozmo15\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503\"\u003emodelcontextprotocol/typescript-sdk#1503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): switch publish to OIDC trusted publishing by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1839\"\u003emodelcontextprotocol/typescript-sdk#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd end-to-end test suite by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2167\"\u003emodelcontextprotocol/typescript-sdk#2167\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1 stdio buffer limit by \u003ca href=\"https://github.com/KKonstantinov\"\u003e\u003ccode\u003e@​KKonstantinov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2239\"\u003emodelcontextprotocol/typescript-sdk#2239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: support Zod 3.25 method literals by \u003ca href=\"https://github.com/mattzcarey\"\u003e\u003ccode\u003e@​mattzcarey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2368\"\u003emodelcontextprotocol/typescript-sdk#2368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate Content-Type by parsed media type instead of substring match (v1.x) by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2444\"\u003emodelcontextprotocol/typescript-sdk#2444\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send SSE keep-alive comment frames from Streamable HTTP server transport (v1.x) by \u003ca href=\"https://github.com/mattzcarey\"\u003e\u003ccode\u003e@​mattzcarey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2538\"\u003emodelcontextprotocol/typescript-sdk#2538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(deps): widen \u003ccode\u003e@​hono/node-server\u003c/code\u003e past GHSA-frvp-7c67-39w9 by \u003ca href=\"https://github.com/arimu1\"\u003e\u003ccode\u003e@​arimu1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549\"\u003emodelcontextprotocol/typescript-sdk#2549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x) by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2547\"\u003emodelcontextprotocol/typescript-sdk#2547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.0 by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2563\"\u003emodelcontextprotocol/typescript-sdk#2563\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mozmo15\"\u003e\u003ccode\u003e@​mozmo15\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503\"\u003emodelcontextprotocol/typescript-sdk#1503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arimu1\"\u003e\u003ccode\u003e@​arimu1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549\"\u003emodelcontextprotocol/typescript-sdk#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/4b0051f400219f8d8855f9a5433c6df35f15a639\"\u003e\u003ccode\u003e4b0051f\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.31.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2890\"\u003e#2890\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/51ad4f03190dc5c84ab8b1a25f9b78b277be0dc7\"\u003e\u003ccode\u003e51ad4f0\u003c/code\u003e\u003c/a\u003e [v1.x] Bind stored OAuth credentials to the authorization server that issued ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/289ac2c3af7e1536160e80414296b175171a1a87\"\u003e\u003ccode\u003e289ac2c\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.30.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2848\"\u003e#2848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/12b425678a76cd54b0452a2ccf1e5dc7740f73ef\"\u003e\u003ccode\u003e12b4256\u003c/code\u003e\u003c/a\u003e fix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1972\"\u003e#1972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a9f6eb709b85459d01e8f2a9e881fef2621756c1\"\u003e\u003ccode\u003ea9f6eb7\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/2d889f2b329e46680ec9bdd565de4616c497825a\"\u003e\u003ccode\u003e2d889f2\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.30.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2563\"\u003e#2563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/e3f3daa12cc2603919939b72136ce9d9e800b868\"\u003e\u003ccode\u003ee3f3daa\u003c/code\u003e\u003c/a\u003e Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/bb5a718cbf90796bacbf62218b359196d210426b\"\u003e\u003ccode\u003ebb5a718\u003c/code\u003e\u003c/a\u003e fix(deps): widen \u003ccode\u003e@​hono/node-server\u003c/code\u003e past GHSA-frvp-7c67-39w9 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2549\"\u003e#2549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/1dad2634ce5799fb386283d14291d1b4935a9a52\"\u003e\u003ccode\u003e1dad263\u003c/code\u003e\u003c/a\u003e fix: send SSE keep-alive comment frames from Streamable HTTP server transport...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/69749aa5081ddfe675d36da8d96c7e27d83742b8\"\u003e\u003ccode\u003e69749aa\u003c/code\u003e\u003c/a\u003e Validate Content-Type by parsed media type instead of substring match (v1.x) ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.26.0...1.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​modelcontextprotocol/sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hono/node-server` from 1.19.9 to 2.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/node-server/releases\"\u003e@​hono/node-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: allow hono v5 as a peer dependency by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/406\"\u003ehonojs/node-server#406\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.3...v2.1.4\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.3...v2.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003e@hono/node-server/serve-static\u003c/code\u003e. Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eserveStatic\u003c/code\u003e now rejects request paths that still contain \u003ccode\u003e%\u003c/code\u003e after decoding. To serve files whose names contain a literal \u003ccode\u003e%\u003c/code\u003e, set \u003ccode\u003eallowPercentInPath: true\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe same fix ships in \u003ccode\u003ehono\u003c/code\u003e v4.13.11.\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: add autofix.ci by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/392\"\u003ehonojs/node-server#392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: type error in early hints and add typecheck to CI by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/390\"\u003ehonojs/node-server#390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add better benchmarks by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/391\"\u003ehonojs/node-server#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(readme): update the benchmark by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/394\"\u003ehonojs/node-server#394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(request): accept asynchronous body read errors by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/403\"\u003ehonojs/node-server#403\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(listener): avoid mutating response headers when setting Content-Length by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/402\"\u003ehonojs/node-server#402\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: lazily materialize request headers by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/389\"\u003ehonojs/node-server#389\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.0...v2.1.1\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.0...v2.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Early Hints (HTTP 103) middleware by \u003ca href=\"https://github.com/bilal-azam\"\u003e\u003ccode\u003e@​bilal-azam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/378\"\u003ehonojs/node-server#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(listener): avoid uncaught error when force-closing a non-standard socket by \u003ca href=\"https://github.com/mohamedramadan14\"\u003e\u003ccode\u003e@​mohamedramadan14\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/383\"\u003ehonojs/node-server#383\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bilal-azam\"\u003e\u003ccode\u003e@​bilal-azam\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/378\"\u003ehonojs/node-server#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mohamedramadan14\"\u003e\u003ccode\u003e@​mohamedramadan14\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/383\"\u003ehonojs/node-server#383\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0\"\u003ehttps://github.com/honojs/node-server/compare/v2.0.12...v2.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/d57ed9b9dad4d44b20caa0cdb1b10d8360d8b734\"\u003e\u003ccode\u003ed57ed9b\u003c/code\u003e\u003c/a\u003e 2.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/92b014c1b6a3634a5cb2fcc9ddcc10e9bc68e48d\"\u003e\u003ccode\u003e92b014c\u003c/code\u003e\u003c/a\u003e chore: allow hono v5 as a peer dependency (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/720ac7843fbc7c1bdae1beaa47e2ab5db7f99a9b\"\u003e\u003ccode\u003e720ac78\u003c/code\u003e\u003c/a\u003e 2.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/982179278529d5673812116b042829f27794966f\"\u003e\u003ccode\u003e9821792\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/35bca95b8e5ef5facc799c57a7e69aa3ec5111b1\"\u003e\u003ccode\u003e35bca95\u003c/code\u003e\u003c/a\u003e 2.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/90a2600d9bfe76ab4774c028704c2a09c5930bb1\"\u003e\u003ccode\u003e90a2600\u003c/code\u003e\u003c/a\u003e fix(listener): avoid mutating response headers when setting Content-Length (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/fe7467ca2f0027b8189ae3c0a5d35d1144f909bc\"\u003e\u003ccode\u003efe7467c\u003c/code\u003e\u003c/a\u003e test(request): accept asynchronous body read errors (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/403\"\u003e#403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/64dc09e0c37eab30b51d33d61a3a2bae3fdee263\"\u003e\u003ccode\u003e64dc09e\u003c/code\u003e\u003c/a\u003e docs(readm): update the benchmark (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/394\"\u003e#394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/8f505aed205297c033afab80597e5ab990f2082f\"\u003e\u003ccode\u003e8f505ae\u003c/code\u003e\u003c/a\u003e chore: add better benchmarks (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/391\"\u003e#391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/2469b1a3bb3c70cda6ab795202f0e42d6324447c\"\u003e\u003ccode\u003e2469b1a\u003c/code\u003e\u003c/a\u003e fix: type error in early hints and add typecheck to CI (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/390\"\u003e#390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/node-server/compare/v1.19.9...v2.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hono/node-server\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.1.0 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.5\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eFix for \u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7\"\u003ehttps://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.4\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Release\u003c/h2\u003e\n\u003cp\u003eFix for \u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx\"\u003ehttps://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/ead3ab7bb134c989e972c8174632d0670023f269\"\u003e\u003ccode\u003eead3ab7\u003c/code\u003e\u003c/a\u003e Bumped v3.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c88b59e3e3a20af1d5d6e499f48908d0fb12a66d\"\u003e\u003ccode\u003ec88b59e\u003c/code\u003e\u003c/a\u003e fix: normalize decoded reg-name case\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/412e40abd4eb8beabfb952d80abf949a2baf27a3\"\u003e\u003ccode\u003e412e40a\u003c/code\u003e\u003c/a\u003e Bumped v3.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/9f4c943e4d2133e8d78e0941203879216255bb01\"\u003e\u003ccode\u003e9f4c943\u003c/code\u003e\u003c/a\u003e fix: backport port and IP-literal validation to v3.x (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/216\"\u003e#216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/1eb3ce436fe050807caba79f886ab894f485a588\"\u003e\u003ccode\u003e1eb3ce4\u003c/code\u003e\u003c/a\u003e fix: treat unterminated bracket hosts as reg-names again (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/6f970b2951fd896aa0f3a7ff28eeb6640c137d33\"\u003e\u003ccode\u003e6f970b2\u003c/code\u003e\u003c/a\u003e Bumped v3.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/d941579a84273ec7e96bde596b1f7a8be447df2a\"\u003e\u003ccode\u003ed941579\u003c/code\u003e\u003c/a\u003e fix: never run IDN canonicalization on bracketed IP literals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c0f0279cf370cb89ee56b04bbcde2a7afbe81aba\"\u003e\u003ccode\u003ec0f0279\u003c/code\u003e\u003c/a\u003e test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/37f3417c82994279656854f83ce938acd81c3862\"\u003e\u003ccode\u003e37f3417\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/607bfbe953f28a14c2e06ae64aff38c81ca2937f\"\u003e\u003ccode\u003e607bfbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.11.7 to 4.13.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.13.13\u003c/h2\u003e\n\u003ch2\u003eMount Middleware\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e is now available as the Mount Middleware, \u003ccode\u003ehono/mount\u003c/code\u003e. It is just a handler, so you register it with \u003ccode\u003eapp.all()\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eimport { Router as IttyRouter } from 'itty-router'\r\nimport { Hono } from 'hono'\r\nimport { mount } from 'hono/mount'\r\n\u003cp\u003econst ittyRouter = IttyRouter()\u003cbr /\u003e\nittyRouter.get('/hello', () =\u0026gt; new Response('Hello from itty-router'))\u003c/p\u003e\n\u003cp\u003econst app = new Hono()\u003cbr /\u003e\napp.all('/itty-router/*', mount(ittyRouter.handle))\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e- app.mount('/itty-router', ittyRouter.handle)\r\n+ app.all('/itty-router/*', mount(ittyRouter.handle))\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest(client): simulate network error for undefined route in parseResponse test in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5439\"\u003ehonojs/hono#5439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(request): fix jsdoc comments for some getters in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5445\"\u003ehonojs/hono#5445\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): allow JSXNode function component results in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5476\"\u003ehonojs/hono#5476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5221\"\u003ehonojs/hono#5221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.12...v4.13.13\"\u003ehttps://github.com/honojs/hono/compare/v4.13.12...v4.13.13\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(build): keep internal types private in bundled d.ts and avoid a self-referencing JSX.IntrinsicElements in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5485\"\u003ehonojs/hono#5485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(build): type-check the bundled declarations from a consumer project in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5486\"\u003ehonojs/hono#5486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): correctly match mixed-case header name in retainedHeader option in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5475\"\u003ehonojs/hono#5475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5487\"\u003ehonojs/hono#5487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(combine): return a Response from a short-circuiting middleware in some() in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5391\"\u003ehonojs/hono#5391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): upgrade vite-plus to 1.0.0 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5464\"\u003ehonojs/hono#5464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.11...v4.13.12\"\u003ehttps://github.com/honojs/hono/compare/v4.13.11...v4.13.12\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.11\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/serve-static\u003c/code\u003e and the adapters built on it (\u003ccode\u003ehono/bun\u003c/code\u003e, \u003ccode\u003ehono/deno\u003c/code\u003e, \u003ccode\u003ehono/cloudflare-workers\u003c/code\u003e, \u003ccode\u003e@hono/bun\u003c/code\u003e, \u003ccode\u003e@hono/deno\u003c/code\u003e, \u003ccode\u003e@hono/cloudflare-workers\u003c/code\u003e). Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-5r4p-p66f-jhc7\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/08a023cbfde55b434fb0fb30fae35d42e4bf20aa\"\u003e\u003ccode\u003e08a023c\u003c/code\u003e\u003c/a\u003e 4.13.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ae595de8ae05ea548560da93140ee1d53e5a8202\"\u003e\u003ccode\u003eae595de\u003c/code\u003e\u003c/a\u003e feat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5221\"\u003e#5221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/f23b146afcec63606144cde50b5fbd360dd60238\"\u003e\u003ccode\u003ef23b146\u003c/code\u003e\u003c/a\u003e fix(jsx): allow JSXNode function component results (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5476\"\u003e#5476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6d73a74f9757ed65d6103c0e8375097fa20873c4\"\u003e\u003ccode\u003e6d73a74\u003c/code\u003e\u003c/a\u003e docs(request): fix jsdoc comments for some getters (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5445\"\u003e#5445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/deff529656cff775b35956f7f9071388d4eb55ae\"\u003e\u003ccode\u003edeff529\u003c/code\u003e\u003c/a\u003e test(client): simulate network error for undefined route in parseResponse tes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6abd35b0a5f35f67b6417627d5b0a6c2d266ac04\"\u003e\u003ccode\u003e6abd35b\u003c/code\u003e\u003c/a\u003e 4.13.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/95eb860473d26bd303a2a29716e61a77c8c5e5f5\"\u003e\u003ccode\u003e95eb860\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade vite-plus to 1.0.0 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5464\"\u003e#5464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/afb2068c1c53a530528ac5f237e245793dd03c07\"\u003e\u003ccode\u003eafb2068\u003c/code\u003e\u003c/a\u003e fix(combine): return a Response from a short-circuiting middleware in some() ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e5bb2062a3ddd645e3a16d1300bd76d6c9af33a5\"\u003e\u003ccode\u003ee5bb206\u003c/code\u003e\u003c/a\u003e fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5487\"\u003e#5487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/c3053ccf14f1c4c70a0c2888eed6121b9f6c8f95\"\u003e\u003ccode\u003ec3053cc\u003c/code\u003e\u003c/a\u003e fix(etag): correctly match mixed-case header name in retainedHeader option (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.11.7...v4.13.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ip-address` from 10.0.1 to 10.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beaugunderson/ip-address/releases\"\u003eip-address's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.7.4\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.3...v10.7.4\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.3...v10.7.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReject an in-addr.arpa name longer than 32 characters before splitting it by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/228\"\u003ebeaugunderson/ip-address#228\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.2...v10.7.3\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.2...v10.7.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAccept an arpa suffix in any case and without the root dot in fromArpa by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/227\"\u003ebeaugunderson/ip-address#227\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump js-yaml and brace-expansion in the lockfile by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/226\"\u003ebeaugunderson/ip-address#226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct the IPv6 end-address docs by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/225\"\u003ebeaugunderson/ip-address#225\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd isGlobal() and pin the classifiers to the IANA special-purpose registries by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/224\"\u003ebeaugunderson/ip-address#224\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.5.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHonor the fromURL graceful-failure contract for non-IPv6 hosts by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/218\"\u003ebeaugunderson/ip-address#218\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCorrect the documentation where it disagreed with the library by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/219\"\u003ebeaugunderson/ip-address#219\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.4.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/651c1dd35e55593b337d21c8e2a990b3743d1b3a\"\u003e\u003ccode\u003e651c1dd\u003c/code\u003e\u003c/a\u003e 10.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/ec80fcd5d7b97defecfd39717d782a9f9f8b89dd\"\u003e\u003ccode\u003eec80fcd\u003c/code\u003e\u003c/a\u003e Find an IPv6 zone by index so a rejected zone costs one pass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/e22eb4a14575fae3d773c5c3a24962cbfc4f3a31\"\u003e\u003ccode\u003ee22eb4a\u003c/code\u003e\u003c/a\u003e Check generated docs without writing or hiding partial staging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/c7f838eeca573fa14838f3f18c0cfadcc719dcb9\"\u003e\u003ccode\u003ec7f838e\u003c/code\u003e\u003c/a\u003e 10.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/09b8072f5e45e13fd2c4772aeb5d4a7d8a1174d4\"\u003e\u003ccode\u003e09b8072\u003c/code\u003e\u003c/a\u003e Reject an in-addr.arpa name longer than 32 characters before splitting it (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/228\"\u003e#228\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/974b48d9ade9348accdb377ba0a15feba4a11361\"\u003e\u003ccode\u003e974b48d\u003c/code\u003e\u003c/a\u003e 10.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/4dfe8e5eb34fdb47698834b213526814234c0cb1\"\u003e\u003ccode\u003e4dfe8e5\u003c/code\u003e\u003c/a\u003e Accept an arpa suffix in any case and without the root dot in fromArpa (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/227\"\u003e#227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/f0c25dfd4fbf7886e45116ba0940207f81401e28\"\u003e\u003ccode\u003ef0c25df\u003c/code\u003e\u003c/a\u003e 10.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/8b34a21e0839b37c094066816fb2c2c48a2adcf5\"\u003e\u003ccode\u003e8b34a21\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/13b615554f129bdcdbd10f39b5918fef4bcf96c5\"\u003e\u003ccode\u003e13b6155\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.0.1...v10.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for ip-address since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/warengonzaga/relay-protocol-mcp-server/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/warengonzaga/relay-protocol-mcp-server/pull/10","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/warengonzaga%2Frelay-protocol-mcp-server/issues/10","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10/packages"},{"uuid":"5823543649","node_id":"PR_kwDOQ8uS9M8AAAABIFdB2A","number":52,"state":"open","title":"deps(deps): bump the security-updates group across 1 directory with 94 updates","user":"dependabot[bot]","labels":["documentation","GSSoC'25","level2"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-13T02:37:43.000Z","updated_at":"2026-10-13T02:37:58.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"security-updates","update_count":94,"packages":[{"name":"@google-cloud/translate","old_version":"9.3.0","new_version":"10.2.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@playwright/test","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"axios","old_version":"1.18.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"dotenv","old_version":"17.2.3","new_version":"18.0.7","repository_url":"https://github.com/motdotla/dotenv"},{"name":"google-translate-api-x","old_version":"10.7.2","new_version":"10.7.3","repository_url":"https://github.com/AidanWelch/google-translate-api"},{"name":"helmet","old_version":"8.1.0","new_version":"8.3.0","repository_url":"https://github.com/helmetjs/helmet"},{"name":"i18n","old_version":"0.15.3","new_version":"0.15.4","repository_url":"https://github.com/mashpie/i18n-node"},{"name":"joi","old_version":"18.2.3","new_version":"18.2.9","repository_url":"https://github.com/hapijs/joi"},{"name":"mongodb","old_version":"7.0.0","new_version":"7.7.0","repository_url":"https://github.com/mongodb/node-mongodb-native"},{"name":"node-cron","old_version":"4.2.1","new_version":"4.6.0","repository_url":"https://github.com/node-cron/node-cron"},{"name":"openai","old_version":"6.16.0","new_version":"7.32.0","repository_url":"https://github.com/openai/openai-node"},{"name":"playwright","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"socket.io","old_version":"4.8.3","new_version":"4.8.4","repository_url":"https://github.com/socketio/socket.io"},{"name":"babel-plugin-istanbul","old_version":"7.0.1","new_version":"8.0.0","repository_url":"https://github.com/istanbuljs/babel-plugin-istanbul"},{"name":"js-yaml","old_version":"4.3.0","new_version":"5.4.3","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"supertest","old_version":"7.2.2","new_version":"7.3.1","repository_url":"https://github.com/ladjs/supertest"},{"name":"@babel/generator","old_version":"7.29.7","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-plugin-utils","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helpers","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/parser","old_version":"7.29.7","new_version":"7.29.9","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-attributes","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-jsx","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-typescript","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/runtime","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/traverse","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/types","old_version":"7.29.7","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@emnapi/core","old_version":"1.8.1","new_version":"1.11.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@emnapi/runtime","old_version":"1.8.1","new_version":"1.11.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@emnapi/wasi-threads","old_version":"1.1.0","new_version":"1.2.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@google-cloud/common","old_version":"6.0.0","new_version":"8.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@google-cloud/promisify","old_version":"4.1.0","new_version":"6.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@google-cloud/projectify","old_version":"4.0.0","new_version":"6.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@grpc/grpc-js","old_version":"1.14.4","new_version":"1.14.6","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@grpc/proto-loader","old_version":"0.8.0","new_version":"0.8.1","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@hapi/tlds","old_version":"1.1.4","new_version":"1.1.7","repository_url":"https://github.com/hapijs/tlds"},{"name":"@istanbuljs/schema","old_version":"0.1.3","new_version":"0.1.6","repository_url":"https://github.com/istanbuljs/schema"},{"name":"@jridgewell/sourcemap-codec","old_version":"1.5.5","new_version":"1.6.0","repository_url":"https://github.com/jridgewell/sourcemaps"},{"name":"@mongodb-js/saslprep","old_version":"1.4.4","new_version":"1.6.0","repository_url":"https://github.com/mongodb-js/devtools-shared"},{"name":"@pkgr/core","old_version":"0.2.9","new_version":"0.2.10","repository_url":"https://github.com/un-ts/pkgr"},{"name":"@sinclair/typebox","old_version":"0.34.47","new_version":"0.34.52","repository_url":"https://github.com/sinclairzx81/sinclair-typebox"},{"name":"@tybys/wasm-util","old_version":"0.10.1","new_version":"0.10.4","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@types/http-cache-semantics","old_version":"4.0.4","new_version":"4.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/node","old_version":"25.0.6","new_version":"26.6.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/ws","old_version":"8.18.1","new_version":"8.18.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@ungap/structured-clone","old_version":"1.3.0","new_version":"1.4.0","repository_url":"https://github.com/ungap/structured-clone"},{"name":"form-data","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/form-data/form-data"},{"name":"baseline-browser-mapping","old_version":"2.11.3","new_version":"2.11.28","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.6","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.16","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.7","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"caniuse-lite","old_version":"1.0.30001806","new_version":"1.0.30001815","repository_url":"https://github.com/browserslist/caniuse-lite"},{"name":"ci-info","old_version":"4.3.1","new_version":"4.4.0","repository_url":"https://github.com/watson/ci-info"},{"name":"cjs-module-lexer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/nodejs/cjs-module-lexer"},{"name":"core-js","old_version":"3.47.0","new_version":"3.50.0","repository_url":"https://github.com/zloirock/core-js"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"dedent","old_version":"1.7.1","new_version":"1.7.2","repository_url":"https://github.com/dmnd/dedent"},{"name":"dompurify","old_version":"3.4.12","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"electron-to-chromium","old_version":"1.5.396","new_version":"1.5.452","repository_url":"https://github.com/Kilian/electron-to-chromium"},{"name":"engine.io","old_version":"6.6.9","new_version":"6.6.11","repository_url":"https://github.com/socketio/socket.io"},{"name":"es-object-atoms","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/ljharb/es-object-atoms"},{"name":"fb-watchman","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/facebook/watchman"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"filelist","old_version":"1.0.4","new_version":"1.0.6","repository_url":"https://github.com/mde/filelist"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"fsevents","old_version":"2.3.2","new_version":"2.3.3","repository_url":"https://github.com/fsevents/fsevents"},{"name":"gaxios","old_version":"7.1.3","new_version":"7.3.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-auth-library","old_version":"10.5.0","new_version":"11.2.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"gcp-metadata","old_version":"8.1.2","new_version":"9.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-gax","old_version":"5.0.6","new_version":"6.12.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-logging-utils","old_version":"1.1.3","new_version":"2.0.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"http-proxy-agent","old_version":"5.0.0","new_version":"7.0.2","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"is-core-module","old_version":"2.16.1","new_version":"2.17.0","repository_url":"https://github.com/inspect-js/is-core-module"},{"name":"minipass","old_version":"7.1.2","new_version":"7.1.3","repository_url":"https://github.com/isaacs/minipass"},{"name":"moo","old_version":"0.5.2","new_version":"0.5.3","repository_url":"https://github.com/tjvr/moo"},{"name":"node-releases","old_version":"2.0.51","new_version":"2.0.58","repository_url":"https://github.com/chicoxyzzy/node-releases"},{"name":"pako","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/nodeca/pako"},{"name":"playwright-core","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"proto3-json-serializer","old_version":"3.0.4","new_version":"4.0.2","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"protobufjs","old_version":"7.6.5","new_version":"7.6.6","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"pump","old_version":"3.0.3","new_version":"3.0.4","repository_url":"https://github.com/mafintosh/pump"},{"name":"resolve","old_version":"1.22.11","new_version":"1.22.13","repository_url":"https://github.com/browserify/resolve"},{"name":"retry-request","old_version":"8.0.2","new_version":"9.0.2","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"spdx-license-ids","old_version":"3.0.22","new_version":"3.0.24","repository_url":"https://github.com/jslicense/spdx-license-ids"},{"name":"superagent","old_version":"10.3.0","new_version":"10.4.1","repository_url":"https://github.com/ladjs/superagent"},{"name":"synckit","old_version":"0.11.11","new_version":"0.11.13","repository_url":"https://github.com/un-ts/synckit"},{"name":"teeny-request","old_version":"10.1.0","new_version":"11.0.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"undici-types","old_version":"7.16.0","new_version":"8.9.0","repository_url":"https://github.com/nodejs/undici"},{"name":"unrs-resolver","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"update-browserslist-db","old_version":"1.2.3","new_version":"1.3.4","repository_url":"https://github.com/browserslist/update-db"},{"name":"validator","old_version":"13.15.26","new_version":"13.15.35","repository_url":"https://github.com/validatorjs/validator.js"},{"name":"ws","old_version":"8.21.1","new_version":"8.21.3","repository_url":"https://github.com/websockets/ws"},{"name":"yargs","old_version":"17.7.2","new_version":"17.7.3","repository_url":"https://github.com/yargs/yargs"}],"path":null,"ecosystem":"npm"},"body":"Bumps the security-updates group with 94 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@google-cloud/translate](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-translate) | `9.3.0` | `10.2.0` |\n| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [axios](https://github.com/axios/axios) | `1.18.1` | `1.20.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `18.0.7` |\n| [google-translate-api-x](https://github.com/AidanWelch/google-translate-api) | `10.7.2` | `10.7.3` |\n| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` |\n| [i18n](https://github.com/mashpie/i18n-node) | `0.15.3` | `0.15.4` |\n| [joi](https://github.com/hapijs/joi) | `18.2.3` | `18.2.9` |\n| [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.0.0` | `7.7.0` |\n| [node-cron](https://github.com/node-cron/node-cron) | `4.2.1` | `4.6.0` |\n| [openai](https://github.com/openai/openai-node) | `6.16.0` | `7.32.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [socket.io](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |\n| [babel-plugin-istanbul](https://github.com/istanbuljs/babel-plugin-istanbul) | `7.0.1` | `8.0.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.0` | `5.4.3` |\n| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |\n| [@babel/generator](https://github.com/babel/babel/tree/HEAD/packages/babel-generator) | `7.29.7` | `7.29.8` |\n| [@babel/helper-plugin-utils](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-plugin-utils) | `7.27.1` | `7.29.7` |\n| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.7` | `7.29.10` |\n| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.7` | `7.29.9` |\n| [@babel/plugin-syntax-import-attributes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-attributes) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-syntax-jsx](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-jsx) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-syntax-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-typescript) | `7.27.1` | `7.29.7` |\n| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.29.7` | `7.29.10` |\n| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.7` | `7.29.10` |\n| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.7` | `7.29.8` |\n| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.8.1` | `1.11.3` |\n| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.8.1` | `1.11.3` |\n| [@emnapi/wasi-threads](https://github.com/toyobayashi/emnapi) | `1.1.0` | `1.2.3` |\n| [@google-cloud/common](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/common) | `6.0.0` | `8.1.0` |\n| [@google-cloud/promisify](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/promisify) | `4.1.0` | `6.1.0` |\n| [@google-cloud/projectify](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/projectify) | `4.0.0` | `6.1.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.4` | `1.14.6` |\n| [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.8.0` | `0.8.1` |\n| [@hapi/tlds](https://github.com/hapijs/tlds) | `1.1.4` | `1.1.7` |\n| [@istanbuljs/schema](https://github.com/istanbuljs/schema) | `0.1.3` | `0.1.6` |\n| [@jridgewell/sourcemap-codec](https://github.com/jridgewell/sourcemaps/tree/HEAD/packages/sourcemap-codec) | `1.5.5` | `1.6.0` |\n| [@mongodb-js/saslprep](https://github.com/mongodb-js/devtools-shared) | `1.4.4` | `1.6.0` |\n| [@pkgr/core](https://github.com/un-ts/pkgr) | `0.2.9` | `0.2.10` |\n| [@sinclair/typebox](https://github.com/sinclairzx81/sinclair-typebox) | `0.34.47` | `0.34.52` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.1` | `0.10.4` |\n| [@types/http-cache-semantics](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/http-cache-semantics) | `4.0.4` | `4.2.0` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.6` | `26.6.5` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |\n| [@ungap/structured-clone](https://github.com/ungap/structured-clone) | `1.3.0` | `1.4.0` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.4` | `3.0.5` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.3` | `2.11.28` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.6` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.16` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.7` | `4.29.3` |\n| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001806` | `1.0.30001815` |\n| [ci-info](https://github.com/watson/ci-info) | `4.3.1` | `4.4.0` |\n| [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.0` | `2.3.0` |\n| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.47.0` | `3.50.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [dedent](https://github.com/dmnd/dedent) | `1.7.1` | `1.7.2` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.396` | `1.5.452` |\n| [engine.io](https://github.com/socketio/socket.io) | `6.6.9` | `6.6.11` |\n| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |\n| [fb-watchman](https://github.com/facebook/watchman) | `2.0.2` | `2.0.4` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [filelist](https://github.com/mde/filelist) | `1.0.4` | `1.0.6` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [fsevents](https://github.com/fsevents/fsevents) | `2.3.2` | `2.3.3` |\n| [gaxios](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gaxios) | `7.1.3` | `7.3.1` |\n| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.5.0` | `11.2.0` |\n| [gcp-metadata](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gcp-metadata) | `8.1.2` | `9.1.0` |\n| [google-gax](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gax) | `5.0.6` | `6.12.1` |\n| [google-logging-utils](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/logging-utils) | `1.1.3` | `2.0.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [http-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/http-proxy-agent) | `5.0.0` | `7.0.2` |\n| [is-core-module](https://github.com/inspect-js/is-core-module) | `2.16.1` | `2.17.0` |\n| [minipass](https://github.com/isaacs/minipass) | `7.1.2` | `7.1.3` |\n| [moo](https://github.com/tjvr/moo) | `0.5.2` | `0.5.3` |\n| [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.51` | `2.0.58` |\n| [pako](https://github.com/nodeca/pako) | `2.1.0` | `2.2.0` |\n| [playwright-core](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [proto3-json-serializer](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/proto3-json-serializer-nodejs) | `3.0.4` | `4.0.2` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.6.5` | `7.6.6` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [pump](https://github.com/mafintosh/pump) | `3.0.3` | `3.0.4` |\n| [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.13` |\n| [retry-request](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/retry-request) | `8.0.2` | `9.0.2` |\n| [spdx-license-ids](https://github.com/jslicense/spdx-license-ids) | `3.0.22` | `3.0.24` |\n| [superagent](https://github.com/ladjs/superagent) | `10.3.0` | `10.4.1` |\n| [synckit](https://github.com/un-ts/synckit) | `0.11.11` | `0.11.13` |\n| [teeny-request](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/teeny-request) | `10.1.0` | `11.0.1` |\n| [undici-types](https://github.com/nodejs/undici) | `7.16.0` | `8.9.0` |\n| [unrs-resolver](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [update-browserslist-db](https://github.com/browserslist/update-db) | `1.2.3` | `1.3.4` |\n| [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` |\n| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` |\n| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `17.7.3` |\n\n\nUpdates `@google-cloud/translate` from 9.3.0 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-node/releases\"\u003e@​google-cloud/translate's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esecurity-center: v10.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/security-center-v10.1.1...security-center-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-10-08)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate API sources and regenerate (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9554\"\u003e#9554\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/8b6837a9757cc8bb281e0611b173cb19b58d4ac5\"\u003e8b6837a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-translate/CHANGELOG.md\"\u003e@​google-cloud/translate's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.1.1...translate-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-10-07)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e Add individual CLI flags for Bun monkey patches (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9533\"\u003e#9533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/a5eec894b054e0605fd8e79591a88393bb2697c6\"\u003ea5eec89\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.1.0...translate-v10.1.1\"\u003e10.1.1\u003c/a\u003e (2026-09-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate package.json and .gitignore across packages (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9378\"\u003e#9378\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/9c54cece565b5cbcae63a9856c1ef3448307d46e\"\u003e9c54cec\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.0.1...translate-v10.1.0\"\u003e10.1.0\u003c/a\u003e (2026-09-08)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade librarian gapic-generator-typescript to v5.2.0 (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/c249594c6ef41e4b36f1ef8869341a4c98c092b0\"\u003ec249594\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.0.0...translate-v10.0.1\"\u003e10.0.1\u003c/a\u003e (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade generated package dependencies to Node 22 version for all core, handwritten and generated dependencies (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9129\"\u003e#9129\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/5f0191225b96dabe41daa9f9d57a8c72749bf62d\"\u003e5f01912\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.2...translate-v10.0.0\"\u003e10.0.0\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade minimum Node.js version to 22 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9026\"\u003e#9026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade minimum Node.js version to 22 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9026\"\u003e#9026\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/1ed703f36743d61fb302b42a6cee53c07034b2fe\"\u003e1ed703f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.1...translate-v9.4.2\"\u003e9.4.2\u003c/a\u003e (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e Remove vulnerable dependency \u003ccode\u003euuid\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/8120\"\u003e#8120\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/3ec901e2cb45859adfbe914bc0385e6cdf2f2e9a\"\u003e3ec901e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.0...translate-v9.4.1\"\u003e9.4.1\u003c/a\u003e (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/google-cloud-node/commits/admin-v10.2.0/packages/google-cloud-translate\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@playwright/test` from 1.57.0 to 1.64.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003e@​playwright/test's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.64.0\u003c/h2\u003e\n\u003ch2\u003e🧰 WebMCP\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-page#page-webmcp\"\u003epage.webmcp\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-frame#frame-webmcp\"\u003eframe.webmcp\u003c/a\u003e give access to the tools that a page registers through the experimental \u003ca href=\"https://playwright.dev/docs/api/class-webmcp\"\u003eWebMCP\u003c/a\u003e browser API, so you can test them like any other part of your app:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });\r\nconst page = await browser.newPage();\r\nawait page.goto('https://example.com');\r\n\u003cp\u003efor (const tool of await page.webmcp.tools())\nconsole.log(tool.name, tool.description);\u003c/p\u003e\n\u003cp\u003econst result = await page.webmcp.callTool('add', { a: 2, b: 40 });\nconsole.log(result.content[0].text); // \u0026quot;42\u0026quot;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://playwright.dev/docs/getting-started-mcp\"\u003ePlaywright MCP\u003c/a\u003e also supports WebMCP by default, with page-defined tools offered to the agent as \u003ccode\u003ewebmcp_\u0026lt;tool\u0026gt;\u003c/code\u003e. Pass \u003ccode\u003e--no-webmcp\u003c/code\u003e to opt out.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://playwright.dev/docs/getting-started-cli\"\u003e\u003ccode\u003eplaywright-cli\u003c/code\u003e\u003c/a\u003e exposes them as well:\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003eplaywright-cli webmcp-list\r\nplaywright-cli webmcp-call search_catalog --params '{\u0026quot;query\u0026quot;:\u0026quot;cats\u0026quot;}'\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003e🎬 Better videos\u003c/h2\u003e\n\u003cp\u003eVideos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// playwright.config.ts\r\nimport { defineConfig } from '@playwright/test';\r\n\u003cp\u003eexport default defineConfig({\nuse: {\nvideo: {\nmode: 'on',\nsize: { width: 1920, height: 1080 },\nfps: 60,\nshow: {\nactions: {\nstyle: {\npoint: 'width: 20px; height: 20px; border-radius: 50%; background: red',\nhighlight: 'outline: 2px solid \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/333\"\u003e#333\u003c/a\u003e; background: rgba(0, 128, 255, .15)',\ntitle: 'font-size: 16px',\n},\n},\n},\n},\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/606ecd8b34bac100db32561b6278ffd76e5eb3cd\"\u003e\u003ccode\u003e606ecd8\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43192\"\u003e#43192\u003c/a\u003e): fix(locators): parse locators the way the client API bui...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/e4f872c79530583300185d3e4aa9689e2f85d0b0\"\u003e\u003ccode\u003ee4f872c\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43188\"\u003e#43188\u003c/a\u003e): feat(api): expose asLocatorDescription via LocalUtils fo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/f6a439e6f496f75d8e8b687116eef8c21316aa1f\"\u003e\u003ccode\u003ef6a439e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43189\"\u003e#43189\u003c/a\u003e): docs(webmcp): expose WebMCP to all languages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/e2335c30f16196a96f81c099598803ca74f9120c\"\u003e\u003ccode\u003ee2335c3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43174\"\u003e#43174\u003c/a\u003e): fix(mcp): do not close the browser twice when the client...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d2a436e0111091ba99836fa6711de28201606cfc\"\u003e\u003ccode\u003ed2a436e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43163\"\u003e#43163\u003c/a\u003e): Revert \u0026quot;fix(blob): do not remove existing reports from o...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a0c4b5efc965577e19f5ebfdcc27f384d3058783\"\u003e\u003ccode\u003ea0c4b5e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43175\"\u003e#43175\u003c/a\u003e): feat(api): return language-specific locator code from re...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/3f7d535c7b69ff1997307dc304c3c8c76b51179d\"\u003e\u003ccode\u003e3f7d535\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43131\"\u003e#43131\u003c/a\u003e): docs: fix broken C# samples in API docs and handles guide\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cde64f74a0f85304f2f4091a46670bf9a3e0dc3\"\u003e\u003ccode\u003e1cde64f\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43170\"\u003e#43170\u003c/a\u003e): fix(locators): parse mixed role options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/8851e7296508ae50cd1f822e50d1e4fa92eab218\"\u003e\u003ccode\u003e8851e72\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43171\"\u003e#43171\u003c/a\u003e): fix(locators): parse JavaScript escapes and regex classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/dcc50654872510b630c73ec6eba1fb3d625c735e\"\u003e\u003ccode\u003edcc5065\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43172\"\u003e#43172\u003c/a\u003e): fix(locator): parse within and getByRef locators\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.57.0...v1.64.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.18.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dotenv` from 17.2.3 to 18.0.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md\"\u003edotenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7\"\u003e18.0.7\u003c/a\u003e (2026-10-09)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat undefined settings like \u003ccode\u003equiet: true\u003c/code\u003e as null rather than falsey (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1070\"\u003e#1070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCLI should honor \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting in \u003ccode\u003e.env\u003c/code\u003e file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.5...v18.0.6\"\u003e18.0.6\u003c/a\u003e (2026-10-06)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse smarter \u003ccode\u003eparseBoolean\u003c/code\u003e not Boolean() to fix override (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1069\"\u003e#1069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.4...v18.0.5\"\u003e18.0.5\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing typescript module declaration (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1068\"\u003e#1068\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance for large .env files (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1066\"\u003e#1066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.3...v18.0.4\"\u003e18.0.4\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport dotenv/config\u003c/code\u003e should default quiet: true (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1063\"\u003e#1063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.2...v18.0.3\"\u003e18.0.3\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting when inside .env file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1059\"\u003e#1059\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.1...v18.0.2\"\u003e18.0.2\u003c/a\u003e (2026-09-21)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch additional edge cases for the fast parser (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1056\"\u003e#1056\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.0...v18.0.1\"\u003e18.0.1\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle file urls in config logging (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.0\"\u003e18.0.0\u003c/a\u003e (2026-09-17)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNEW: Dotenv now has a CLI. (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1022\"\u003e#1022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/295320751866efa323236c719cdc1b5306fa3de7\"\u003e\u003ccode\u003e2953207\u003c/code\u003e\u003c/a\u003e 18.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9944723d89e6f776897f171bfc6b945dfad23c57\"\u003e\u003ccode\u003e9944723\u003c/code\u003e\u003c/a\u003e make more readable for undefined -\u0026gt; null\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/d455db06a7b37acd8b240793a888efaba75885f4\"\u003e\u003ccode\u003ed455db0\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:motdotla/dotenv\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/e411e021fc649cc449200f593b41e0a7fb07d93b\"\u003e\u003ccode\u003ee411e02\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/6237c356bf7b3e47d79b0c625e79c38c42b86773\"\u003e\u003ccode\u003e6237c35\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1070\"\u003e#1070\u003c/a\u003e from Utkarsh-Singhal-26/fix/ignore-undefined-config-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9af8c280d9e5f80d330d3427dfa8261c5d99b489\"\u003e\u003ccode\u003e9af8c28\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1071\"\u003e#1071\u003c/a\u003e from himanshu748/fix-cli-env-quiet\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/c7161c6e18a59ed93b0e6548bc45ce9bd3af9e43\"\u003e\u003ccode\u003ec7161c6\u003c/code\u003e\u003c/a\u003e fix(cli): honor quiet settings loaded from .env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/39904662e1205caf24f257a3c840ecbdfdf99c10\"\u003e\u003ccode\u003e3990466\u003c/code\u003e\u003c/a\u003e fix: ignore undefined options so they don't mask DOTENV_* env settings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/5d7cc39e468b96cd7c82c02aaf74b3fdcacf1a4b\"\u003e\u003ccode\u003e5d7cc39\u003c/code\u003e\u003c/a\u003e 18.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/750ba030e7840edee4b65dbf10a0d6e468a230e4\"\u003e\u003ccode\u003e750ba03\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.2.3...v18.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google-translate-api-x` from 10.7.2 to 10.7.3\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/1917916bfdaea75bf8202b8661e7c25f415b9efc\"\u003e\u003ccode\u003e1917916\u003c/code\u003e\u003c/a\u003e 10.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/363bea91ae7cdd56cb92a48475b850dddf2e1369\"\u003e\u003ccode\u003e363bea9\u003c/code\u003e\u003c/a\u003e clean up eslint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/5f69e3c157aefb4f4e693afff0203ff12b397a57\"\u003e\u003ccode\u003e5f69e3c\u003c/code\u003e\u003c/a\u003e npm prune\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/7b95325afc1d93420ef970775708a5c431217b8d\"\u003e\u003ccode\u003e7b95325\u003c/code\u003e\u003c/a\u003e Update to latest eslint, fix required node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/5f97c17a987a43cd539b43570851c19be09e0a4c\"\u003e\u003ccode\u003e5f97c17\u003c/code\u003e\u003c/a\u003e Update dev dependencies and fix test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/11dab7c7d494085ccab97830931f9e8114b31f4d\"\u003e\u003ccode\u003e11dab7c\u003c/code\u003e\u003c/a\u003e update singleTranslate japanese test with new expected translation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/f9d0e6a83a3563bf8ac77ff9163a8c6173462136\"\u003e\u003ccode\u003ef9d0e6a\u003c/code\u003e\u003c/a\u003e Don't enforce capitalization for batch translate test of several sentences wi...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/AidanWelch/google-translate-api/compare/v10.7.2...v10.7.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helmet` from 8.1.0 to 8.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md\"\u003ehelmet's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.3.0 - 2026-07-11\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: improved performance by ~7% when there are no dynamic directives\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: improved error handling for invalid directive names\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: \u003ccode\u003euseDefaults: false\u003c/code\u003e with no directives is no longer valid, both at runtime and the type level\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: dynamically-computed directive values would \u003ccode\u003ethrow\u003c/code\u003e, not call \u003ccode\u003enext\u003c/code\u003e, when invalid\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: dynamically-computed directive value entries would \u003ccode\u003ethrow\u003c/code\u003e, not call \u003ccode\u003enext\u003c/code\u003e, when function threw\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.2.0 - 2026-05-21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eCross-Origin-Opener-Policy\u003c/code\u003e: support \u003ccode\u003enoopener-allow-popups\u003c/code\u003e. See \u003ca href=\"https://redirect.github.com/helmetjs/helmet/pull/522\"\u003e#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message when passing duplicate options\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/75f1a98ec3cf092cc985985efcc0479265c9fe32\"\u003e\u003ccode\u003e75f1a98\u003c/code\u003e\u003c/a\u003e 8.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/f03f70da21409f525f90418a049ae7222261e9a2\"\u003e\u003ccode\u003ef03f70d\u003c/code\u003e\u003c/a\u003e Update changelog for 8.3.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/a307fce3b8714e7dfddba6a6979317dc8bc2e373\"\u003e\u003ccode\u003ea307fce\u003c/code\u003e\u003c/a\u003e Fix capitalization in CSP package changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/5347b43be7e340f3cd3407ba2d156a771cf9c371\"\u003e\u003ccode\u003e5347b43\u003c/code\u003e\u003c/a\u003e Format default CSP in README for readability\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/9afc570f67615f48bf8634ea75ad5e0b204f856b\"\u003e\u003ccode\u003e9afc570\u003c/code\u003e\u003c/a\u003e CSP: fix middleware-specific README missing link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/266c95ca6541f0627e4622d0b6844c9e24108b85\"\u003e\u003ccode\u003e266c95c\u003c/code\u003e\u003c/a\u003e Minor speedups to project setups test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/7a4196c3d9f2efdaeada5e18243bd974262505ee\"\u003e\u003ccode\u003e7a4196c\u003c/code\u003e\u003c/a\u003e CSP: update package-specific changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/02716b4b7dc5099fe3c21bb1a89f954404632180\"\u003e\u003ccode\u003e02716b4\u003c/code\u003e\u003c/a\u003e CSP: improve performance when there are no dynamic directives\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/3f511ed75fa12dd456e5338dc7a9b578b5aafac1\"\u003e\u003ccode\u003e3f511ed\u003c/code\u003e\u003c/a\u003e CSP: move utility functions to separate file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/80338af26325af6d47b0cfd5a4a43a5be52c3973\"\u003e\u003ccode\u003e80338af\u003c/code\u003e\u003c/a\u003e CSP: disabling defaults with no directives is now an error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helmetjs/helmet/compare/v8.1.0...v8.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18n` from 0.15.3 to 0.15.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mashpie/i18n-node/releases\"\u003ei18n's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.15.4 - Maintenance\u003c/h2\u003e\n\u003ch1\u003eChanged\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003evalidate and normalize locale names in \u003ccode\u003egetStorageFilePath\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eCI runs on node 22 and 24, drops node 18/20 (EOL)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/e522e85624fd974d256581f151decb03bd704aed\"\u003e\u003ccode\u003ee522e85\u003c/code\u003e\u003c/a\u003e version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/83dc25b85ace0bf73e9109d02d96e61642ae9d79\"\u003e\u003ccode\u003e83dc25b\u003c/code\u003e\u003c/a\u003e ci: drop EOL Node 18/20 from matrix, pin pnpm 10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/a3e06a2227d55f21671d940933375671644cd8f2\"\u003e\u003ccode\u003ea3e06a2\u003c/code\u003e\u003c/a\u003e update supported versions in SECURITY.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/91c86d8b50e42e3124d1430f30f1bec79234c645\"\u003e\u003ccode\u003e91c86d8\u003c/code\u003e\u003c/a\u003e validate and normalize locale in getStorageFilePath\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mashpie/i18n-node/compare/v.0.15.3...v0.15.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 18.2.3 to 18.2.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/fc3f3bcb58ce7c3d2e7645bc7b17f012a2e7649b\"\u003e\u003ccode\u003efc3f3bc\u003c/code\u003e\u003c/a\u003e 18.2.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/e7791cbaef3dcec74473e1320e44082d1037254b\"\u003e\u003ccode\u003ee7791cb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3152\"\u003e#3152\u003c/a\u003e from hapijs/chore/3151-cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/7363128f9b9a0b70e049cbed286bcc25c3be0ca9\"\u003e\u003ccode\u003e7363128\u003c/code\u003e\u003c/a\u003e chore: cleanup for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/03a95430c3ae1f89bcdf7e0e176f32fd0e833ae1\"\u003e\u003ccode\u003e03a9543\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e from carfeii/fix/messages-flat-code-proto-pollution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/5b8333c9177e08b4ef4ed02903c2d657084e7afb\"\u003e\u003ccode\u003e5b8333c\u003c/code\u003e\u003c/a\u003e Reject \u003cstrong\u003eproto\u003c/strong\u003e as a flat messages() code, closing a sibling of GHSA-gg4h-3h...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/e30b50e242c91ae9f54bf3c3be0e48a03a13cca0\"\u003e\u003ccode\u003ee30b50e\u003c/code\u003e\u003c/a\u003e 18.2.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1c9dede7376d84eeb89e0e4472e519f2dd323a4d\"\u003e\u003ccode\u003e1c9dede\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3149\"\u003e#3149\u003c/a\u003e from hapijs/chore/optimize-schema-creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/cdad986c2a0e5a180cced83eb06f984f6fd52691\"\u003e\u003ccode\u003ecdad986\u003c/code\u003e\u003c/a\u003e chore: optimize schema creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/057dff24f9d0e9bf405501ac33618c5425d27484\"\u003e\u003ccode\u003e057dff2\u003c/code\u003e\u003c/a\u003e 18.2.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/a14051a8e67982901d7d24f376931aef38f2972b\"\u003e\u003ccode\u003ea14051a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3148\"\u003e#3148\u003c/a\u003e from hapijs/chore/optimize-large-arrays\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v18.2.3...v18.2.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongodb` from 7.0.0 to 7.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/node-mongodb-native/releases\"\u003emongodb's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.7.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.6.0...v7.7.0\"\u003e7.7.0\u003c/a\u003e (2026-09-28)\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Node.js team is pleased to announce version 7.7.0 of the \u003ccode\u003emongodb\u003c/code\u003e package!\u003c/p\u003e\n\u003ch2\u003eRelease Notes\u003c/h2\u003e\n\u003ch3\u003eOIDC authentication recovers from a failed token fetch\u003c/h3\u003e\n\u003cp\u003eA single failed OIDC token fetch, such as a cloud metadata endpoint timing out, used to leave the driver's token-fetch mutex holding that failure. Every later operation on the affected \u003ccode\u003eMongoClient\u003c/code\u003e then failed with the original error without attempting a new token fetch, and only restarting the process restored authentication. A failed token fetch now affects only the operation that triggered it.\u003c/p\u003e\n\u003ch3\u003eDriver dependencies updates\u003c/h3\u003e\n\u003cp\u003eDependency version changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebson\u003c/code\u003e: 7.2.0 -\u0026gt; 7.3.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emongodb-connection-string-url\u003c/code\u003e: 7.0.1 -\u0026gt; 7.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emongodb-js/saslprep\u003c/code\u003e: 1.4.11 -\u0026gt; 1.5.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7670:\u003c/strong\u003e update dependencies, including next BSON minor (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5034\"\u003e#5034\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/995edbf636bb449c3041a15edda9f9fbd88fb939\"\u003e995edbf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7858:\u003c/strong\u003e re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e7e953ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://docs.mongodb.com/drivers/node/current/\"\u003eReference\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://mongodb.github.io/node-mongodb-native/7.7/\"\u003eAPI\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/blob/v7.7.0/HISTORY.md\"\u003eChangelog\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eWe invite you to try the \u003ccode\u003emongodb\u003c/code\u003e library immediately, and report any issues to the \u003ca href=\"https://jira.mongodb.org/projects/NODE\"\u003eNODE project\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev7.6.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.5.0...v7.6.0\"\u003e7.6.0\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Node.js team is pleased to announce version 7.6.0 of the \u003ccode\u003emongodb\u003c/code\u003e package!\u003c/p\u003e\n\u003ch2\u003eRelease Notes\u003c/h2\u003e\n\u003ch3\u003eSupport for MongoDB 4.2 is removed\u003c/h3\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nWhen the driver connects to a MongoDB server of version 4.2 or less, it will now throw an error.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eHTTP proxy support for KMS requests in CSFLE and Queryable Encryption\u003c/h3\u003e\n\u003cp\u003eIn-use encryption can now route KMS requests through an HTTP proxy. Set \u003ccode\u003ekmsConnectCallback\u003c/code\u003e on your \u003ccode\u003eClientEncryption\u003c/code\u003e or auto-encryption options to control how the driver connects to a KMS host. The callback receives the target \u003ccode\u003ehost\u003c/code\u003e and \u003ccode\u003eport\u003c/code\u003e and returns a connected socket (for example, a tunnel\nopened with HTTP CONNECT); the driver then performs the KMS TLS handshake over that socket using the provider's configured TLS options. This unblocks CSFLE and Queryable Encryption in environments that require an HTTP forward proxy for outbound KMS traffic, which the existing SOCKS5 \u003ccode\u003eproxyOptions\u003c/code\u003e does not cover.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md\"\u003emongodb's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.6.0...v7.7.0\"\u003e7.7.0\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7670:\u003c/strong\u003e update dependencies, including next BSON minor (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5034\"\u003e#5034\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/995edbf636bb449c3041a15edda9f9fbd88fb939\"\u003e995edbf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7858:\u003c/strong\u003e re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e7e953ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.5.0...v7.6.0\"\u003e7.6.0\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7546:\u003c/strong\u003e add HTTP Proxy support for QE \u0026amp; CSFLE (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5007\"\u003e#5007\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3366c21a6311e02f1be91da982f9b93d3cce99a0\"\u003e3366c21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7547:\u003c/strong\u003e bump minimum support server/wire versions to '4.4' \u0026amp; '9' respectively (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4994\"\u003e#4994\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3d97028b63c51345aaa2852ed4c467dc21b972bd\"\u003e3d97028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7624:\u003c/strong\u003e support baseBackoffMS and update client backpressure backoff (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5020\"\u003e#5020\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/560837b9a7e76d21cf1baaef894e9301bab0b264\"\u003e560837b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7603:\u003c/strong\u003e emit dynamic \u003ccode\u003eimport('os')\u003c/code\u003e via \u003ccode\u003etsconfig\u003c/code\u003e  (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4992\"\u003e#4992\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/52f5e61c8a439f9284c82f72357c376783f055b4\"\u003e52f5e61\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7660:\u003c/strong\u003e serialize bulk write documents a single time (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4999\"\u003e#4999\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/1217aa1c28a5071f765b69e98a0d6cc5fbc02c87\"\u003e1217aa1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.4.0...v7.5.0\"\u003e7.5.0\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7537:\u003c/strong\u003e promote QE string queries (prefix/suffix/substring) (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4996\"\u003e#4996\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/dc4900c36207d70b718c6fc013c5233ceb9f343c\"\u003edc4900c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7411:\u003c/strong\u003e iterate all servers on close (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4967\"\u003e#4967\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/72c02969f49ebc239dd15ef3deaf9be15fbbb94f\"\u003e72c0296\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.3.0...v7.4.0\"\u003e7.4.0\u003c/a\u003e (2026-06-25)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7634:\u003c/strong\u003e remove experimental tag from async dispose methods (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4976\"\u003e#4976\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/43ce3ebb701bf24af797d24e81788b576dccf1a9\"\u003e43ce3eb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7549:\u003c/strong\u003e send afterClusterTime on writes in causally-consistent sessions (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4963\"\u003e#4963\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3abfd263c5da2eaa5c223a0d5b9b440a1e1d4cf6\"\u003e3abfd26\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/20b001b661ae2cb407a13be0336e73580de4d26c\"\u003e\u003ccode\u003e20b001b\u003c/code\u003e\u003c/a\u003e chore(main): release 7.7.0 (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e\u003ccode\u003e7e953ed\u003c/code\u003e\u003c/a\u003e fix(NODE-7858): re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/73f49829eb26d79fcc6d67692571d28dee4d2116\"\u003e\u003ccode\u003e73f4982\u003c/code\u003e\u003c/a\u003e test(NODE-7831): widen duration bounds in flaky timing assertions (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5050\"\u003e#5050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/cca92501ec1cb2930e9246a4d387e09f36b604eb\"\u003e\u003ccode\u003ecca9250\u003c/code\u003e\u003c/a\u003e chore(NODE-7856): bump drivers-evergreen-tools submodule to unblock CI (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5055\"\u003e#5055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/783d4892539b9f8bcb0216a04347e18f85d08471\"\u003e\u003ccode\u003e783d489\u003c/code\u003e\u003c/a\u003e chore(NODE-7771): align tags to match their versions on evergreen tasks (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5048\"\u003e#5048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/af0bcb2fa4dc97f3a0ad6d03bc88c2e1ac077ad4\"\u003e\u003ccode\u003eaf0bcb2\u003c/code\u003e\u003c/a\u003e chore(NODE-7691): add optional section into PR template for bug fixes (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5042\"\u003e#5042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/83668e620841398713a0fa64b2ed3205fb965152\"\u003e\u003ccode\u003e83668e6\u003c/code\u003e\u003c/a\u003e chore(NODE-7694): Successful lint tasks can precede integration tests as a de...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/28e455de474d0d61404c648a5253031de3935c9b\"\u003e\u003ccode\u003e28e455d\u003c/code\u003e\u003c/a\u003e chore(NODE-7788): remove csot perf tests (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5044\"\u003e#5044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/dba1544add5b757532d853bad9389369563359c8\"\u003e\u003ccode\u003edba1544\u003c/code\u003e\u003c/a\u003e chore(NODE-7805): restrict release_notes to PRs from this repository (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5043\"\u003e#5043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/de31f12d03f7d7263c59935941a81c7afa52df3f\"\u003e\u003ccode\u003ede31f12\u003c/code\u003e\u003c/a\u003e chore: bump drivers-evergreen-tools (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5047\"\u003e#5047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.0.0...v7.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mongodb since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `node-cron` from 4.2.1 to 4.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/node-cron/node-cron/releases\"\u003enode-cron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/node-cron/node-cron/compare/v4.5.0...v4.6.0\"\u003e4.6.0\u003c/a\u003e (2026-07-04)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd cron.shutdown(timeout?) for graceful process teardown (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/589\"\u003e#589\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/35f1a61ba7cef987f7ed342489d8d0f0220553b8\"\u003e35f1a61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd unref option for heartbeat timers (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/588\"\u003e#588\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/35cb140d9c2d790ff295d54fbe82f6eec9b27e33\"\u003e35cb140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eday-of-month:\u003c/strong\u003e Quartz-style W, L-n and ? modifiers (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/570\"\u003e#570\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/cbe379bce9d770c84328399dca514bd92a467c18\"\u003ecbe379b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eemit task:failed when a background daemon exits unexpectedly (\u003ca href=\"https://github.com/node-cron/node-cron/commit/7bd91d62d1472d52f9adbddfddc0c47458623080\"\u003e7bd91d6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport cron expression nicknames (\u003ca href=\"https://github.com/yearly\"\u003e\u003ccode\u003e@​yearly\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/daily\"\u003e\u003ccode\u003e@​daily\u003c/code\u003e\u003c/a\u003e, etc.) (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/579\"\u003e#579\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/6a6e14e43ab4ce5c21b52414a17e3e20311bd7bf\"\u003e6a6e14e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackground task state transition on stop/destroy without fork (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/584\"\u003e#584\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/9dbc6de269cf5855b0afc037fb4446ef9791d761\"\u003e9dbc6de\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclear jitter timeout on runner stop (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/583\"\u003e#583\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/28b8146dd164ea992e1d5a649756b2bba4e062c4\"\u003e28b8146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCommonJS type resolution (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/608\"\u003e#608\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/ee9d294e71e526edffa2a2f902cad71e1f570d44\"\u003eee9d294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrect falied-\u0026gt;failed typo in daemon task error log (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/594\"\u003e#594\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/66c6961f2140d84cb71b101013abc170977297eb\"\u003e66c6961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrect shutdown listener typing that broke the build (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/595\"\u003e#595\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/7aac3adc22516faad054f2b3ef7362edf62e20f3\"\u003e7aac3ad\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrelate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/607\"\u003e#607\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/0f039a94dcaf6221ea406221b1e7c5eb34a47c4b\"\u003e0f039a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edaemon serialized task state with wrong field name (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/587\"\u003e#587\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/688d465b82889f07f39dfef9170d808c1f40330e\"\u003e688d465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eexpand inverted ranges with wrap-around instead of silently swapping (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/602\"\u003e#602\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/a10ae53626f1cc6e426e23266423f5e334a6871e\"\u003ea10ae53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eharden cron.shutdown() teardown (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/598\"\u003e#598\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/a0b0d1ff9313d0f8532130e5fcb873f29f48fd1f\"\u003ea0b0d1f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ekill orphan child process on background task stop/destroy timeout (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/582\"\u003e#582\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/8179e105a02b91035bce441309c1cda12aaf4c4a\"\u003e8179e10\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emake concurrent background start() await the daemon and time out coordinator lookups (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/605\"\u003e#605\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/446f03ae8f366683c43b186b93bcba5091a0...\n\n_Description has been truncated_","html_url":"https://github.com/sumitpraja27/TravelStay_Tours/pull/52","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sumitpraja27%2FTravelStay_Tours/issues/52","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/52/packages"},{"uuid":"5810466475","node_id":"PR_kwDOTmUOqM8AAAABH7D6HA","number":31,"state":"open","title":"chore(deps): bump the production-minor-patch group across 1 directory with 37 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T08:10:13.000Z","updated_at":"2026-10-12T08:10:16.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-minor-patch","update_count":37,"packages":[{"name":"@aws-sdk/client-bedrock-runtime","old_version":"3.1099.0","new_version":"3.1148.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@lobehub/icons","old_version":"5.15.0","new_version":"5.23.0","repository_url":"https://github.com/lobehub/lobe-icons"},{"name":"@modelcontextprotocol/sdk","old_version":"1.30.0","new_version":"1.32.1","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"@toon-format/toon","old_version":"4.1.0","new_version":"4.4.0","repository_url":"https://github.com/toon-format/toon"},{"name":"@xyflow/react","old_version":"12.11.2","new_version":"12.12.0","repository_url":"https://github.com/xyflow/xyflow"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"csv-stringify","old_version":"6.8.1","new_version":"6.9.0","repository_url":"https://github.com/adaltas/node-csv"},{"name":"fumadocs-core","old_version":"16.14.0","new_version":"16.16.2","repository_url":"https://github.com/fuma-nama/fumadocs"},{"name":"fumadocs-ui","old_version":"16.14.0","new_version":"16.16.2","repository_url":"https://github.com/fuma-nama/fumadocs"},{"name":"jose","old_version":"6.2.5","new_version":"6.2.12","repository_url":"https://github.com/panva/jose"},{"name":"js-yaml","old_version":"5.2.2","new_version":"5.4.3","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"jsdom","old_version":"30.0.1","new_version":"30.1.2","repository_url":"https://github.com/jsdom/jsdom"},{"name":"lucide-react","old_version":"1.28.0","new_version":"1.54.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"marked","old_version":"18.0.7","new_version":"18.1.0","repository_url":"https://github.com/markedjs/marked"},{"name":"material-symbols","old_version":"0.45.9","new_version":"0.48.0","repository_url":"https://github.com/marella/material-symbols"},{"name":"monaco-editor","old_version":"0.56.0","new_version":"0.57.0","repository_url":"https://github.com/microsoft/monaco-editor"},{"name":"next","old_version":"16.2.12","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"next-intl","old_version":"4.13.4","new_version":"4.14.9","repository_url":"https://github.com/amannn/next-intl"},{"name":"omniglyph","old_version":"1.3.1","new_version":"1.4.0","repository_url":"https://github.com/diegosouzapw/OmniGlyph"},{"name":"open","old_version":"11.0.0","new_version":"11.0.4","repository_url":"https://github.com/sindresorhus/open"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"pino-pretty","old_version":"13.1.3","new_version":"13.2.0","repository_url":"https://github.com/pinojs/pino-pretty"},{"name":"playwright","old_version":"1.62.1","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"react","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-is","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-reconciler","old_version":"0.33.0","new_version":"0.34.0","repository_url":"https://github.com/react/react"},{"name":"smol-toml","old_version":"1.7.1","new_version":"1.9.0","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"socks","old_version":"2.8.9","new_version":"2.8.10","repository_url":"https://github.com/JoshGlazebrook/socks"},{"name":"sql.js","old_version":"1.14.1","new_version":"1.14.2","repository_url":"https://github.com/sql-js/sql.js"},{"name":"tailwind-merge","old_version":"3.6.0","new_version":"3.7.0","repository_url":"https://github.com/dcastil/tailwind-merge"},{"name":"tsx","old_version":"4.23.1","new_version":"4.23.15","repository_url":"https://github.com/privatenumber/tsx"},{"name":"undici","old_version":"8.9.0","new_version":"8.11.2","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.21.1","new_version":"8.22.0","repository_url":"https://github.com/websockets/ws"},{"name":"zod","old_version":"4.4.3","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"zustand","old_version":"5.0.14","new_version":"5.0.15","repository_url":"https://github.com/pmndrs/zustand"},{"name":"@huggingface/transformers","old_version":"4.2.0","new_version":"4.3.1","repository_url":"https://github.com/huggingface/transformers.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-minor-patch group with 37 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1099.0` | `3.1148.0` |\n| [@lobehub/icons](https://github.com/lobehub/lobe-icons) | `5.15.0` | `5.23.0` |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` |\n| [@toon-format/toon](https://github.com/toon-format/toon) | `4.1.0` | `4.4.0` |\n| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [csv-stringify](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify) | `6.8.1` | `6.9.0` |\n| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.16.2` |\n| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.16.2` |\n| [jose](https://github.com/panva/jose) | `6.2.5` | `6.2.12` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.2` | `5.4.3` |\n| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.2` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.54.0` |\n| [marked](https://github.com/markedjs/marked) | `18.0.7` | `18.1.0` |\n| [material-symbols](https://github.com/marella/material-symbols/tree/HEAD/material-symbols) | `0.45.9` | `0.48.0` |\n| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.56.0` | `0.57.0` |\n| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.4.0` |\n| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.14.9` |\n| [omniglyph](https://github.com/diegosouzapw/OmniGlyph) | `1.3.1` | `1.4.0` |\n| [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.4` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.64.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |\n| [react-is](https://github.com/react/react/tree/HEAD/packages/react-is) | `19.2.8` | `19.3.0` |\n| [react-reconciler](https://github.com/react/react/tree/HEAD/packages/react-reconciler) | `0.33.0` | `0.34.0` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.9.0` |\n| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.9` | `2.8.10` |\n| [sql.js](https://github.com/sql-js/sql.js) | `1.14.1` | `1.14.2` |\n| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |\n| [undici](https://github.com/nodejs/undici) | `8.9.0` | `8.11.2` |\n| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.22.0` |\n| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |\n| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |\n| [@huggingface/transformers](https://github.com/huggingface/transformers.js) | `4.2.0` | `4.3.1` |\n\n\nUpdates `@aws-sdk/client-bedrock-runtime` from 3.1099.0 to 3.1148.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-bedrock-runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1148.0\u003c/h2\u003e\n\u003ch4\u003e3.1148.0(2026-10-08)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-sesv2:\u003c/strong\u003e  SESV2 DEED - Documentation Update (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d227df4561aa503abf0b9c20c5840fd9923bd15\"\u003e3d227df4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pi:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1d99c7c808f4092b0eaef26b1edde32d1dd9bbb0\"\u003e1d99c7c8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-marketplace-agreement:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/404943ce029cf80ea99a9d8e1cbca176ebabaff8\"\u003e404943ce\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-emr-serverless:\u003c/strong\u003e  This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f9ed2f834c52b341e1423789206b61e4446ba83a\"\u003ef9ed2f83\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cost-explorer:\u003c/strong\u003e  Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/7e0afd115d8e342e51c0f26eeda045642deb0d64\"\u003e7e0afd11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-guardduty:\u003c/strong\u003e  Added support for GuardDuty RDS Data Activity Monitoring (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/aa2000207f021c9a315ed8634a066f8738991d9b\"\u003eaa200020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-gamelift:\u003c/strong\u003e  Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/181218406de73dbd7a528b282d8cd1fc0d560d5a\"\u003e18121840\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-datazone:\u003c/strong\u003e  Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/37214f3f63a6d39a58b7cd4a34d7be3384fac8c7\"\u003e37214f3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-devops-agent:\u003c/strong\u003e  Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/55b389d1260095535d24440901bb37a7ebc4582b\"\u003e55b389d1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-security-ir:\u003c/strong\u003e  Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f4f6dfe5a3b215b726b5cc14784cba1d80afd725\"\u003ef4f6dfe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cloudformation:\u003c/strong\u003e  CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/07e146a50091110686ca16c8867c117e914a468b\"\u003e07e146a5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-opensearch:\u003c/strong\u003e  This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/393fb01137d0cc7d99f5590356f867ae8c237560\"\u003e393fb011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda:\u003c/strong\u003e  AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c7696bfa5e04778bf7e253d70eff6ee6e07b5d5d\"\u003ec7696bfa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityhub:\u003c/strong\u003e  Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f53e8a2ac0eb9d38456651ac504ff3ef963930c8\"\u003ef53e8a2a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-medialive:\u003c/strong\u003e  AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/e335e5dc0cadc7e5e180c19ab1acdd9ce90cc2d6\"\u003ee335e5dc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-eks:\u003c/strong\u003e  Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82f87e7c6bd3d55b8ee73f06b592d424d21cf4c8\"\u003e82f87e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-health:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/e2ffc014df0c87a3041f96f9a4215506a0571f74\"\u003ee2ffc014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-budgets:\u003c/strong\u003e  Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/722512d1f8c05c76e0b1f8913cccfabbfb7891c9\"\u003e722512d1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-translate:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/41abffc025d334e51fa8a1ffbdfa217eced258f9\"\u003e41abffc0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/9dc9c38c16a2d9f0ed986541e9c0403817df6630\"\u003e9dc9c38c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-fms:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/bb5e227d58c184ca9518e3359a22faeafed7589e\"\u003ebb5e227d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-codeconnections:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5a0dceeb42b718df91fd5eca63393d5de689e379\"\u003e5a0dceeb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-keyspaces:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0f8c9874ab7aaef16cf1e2bd55a01110eee75502\"\u003e0f8c9874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Include model field for suggested remediation steps as part of findings (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/50a65bf4623e8ff6cb1b90a942e45047b5f93c05\"\u003e50a65bf4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  use the declared checksum algorithm in workers (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8331\"\u003e#8331\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0317bb822abed1302aaae350a8bbfa40f60ef32d\"\u003e0317bb82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1148.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md\"\u003e@​aws-sdk/client-bedrock-runtime's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1147.0...v3.1148.0\"\u003e3.1148.0\u003c/a\u003e (2026-10-08)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1bc04256c276089739faa71754dba4fde75e05aa\"\u003e\u003ccode\u003e1bc0425\u003c/code\u003e\u003c/a\u003e Publish v3.1148.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/clients/client-bedrock-runtime\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@lobehub/icons` from 5.15.0 to 5.23.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lobehub/lobe-icons/blob/master/CHANGELOG.md\"\u003e@​lobehub/icons's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.22.0...v5.23.0\"\u003eVersion 5.23.0\u003c/a\u003e\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eReleased on \u003cstrong\u003e2026-10-03\u003c/strong\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch4\u003e✨ Features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emisc\u003c/strong\u003e: Migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch4\u003eWhat's improved\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emisc\u003c/strong\u003e: Migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components, closes \u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/427\"\u003e#427\u003c/a\u003e (\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/39250a2\"\u003e39250a2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"#readme-top\"\u003e\u003cimg src=\"https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square\" alt=\"\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.21.0...v5.22.0\"\u003eVersion 5.22.0\u003c/a\u003e\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eReleased on \u003cstrong\u003e2026-10-01\u003c/strong\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch4\u003e✨ Features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eauto\u003c/strong\u003e: Auto build static icons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch4\u003eWhat's improved\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eauto\u003c/strong\u003e: Auto build static icons (\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/329f378\"\u003e329f378\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"#readme-top\"\u003e\u003cimg src=\"https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square\" alt=\"\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/82e641b4fece9d1028a127149af9ded00df5ac0c\"\u003e\u003ccode\u003e82e641b\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.23.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/39250a2cd02b4d1ee17537bc1b2568e69ffa8f79\"\u003e\u003ccode\u003e39250a2\u003c/code\u003e\u003c/a\u003e ✨ feat: migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/427\"\u003e#427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/79b551cf26aab9ea4ac701fb807160950a5b860f\"\u003e\u003ccode\u003e79b551c\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.22.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/0ced1eca2c275ed0c11890bddc5731ceac6688df\"\u003e\u003ccode\u003e0ced1ec\u003c/code\u003e\u003c/a\u003e chore: retire issue automation workflows (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/426\"\u003e#426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/329f378cbd1a88f45b60cd096b9111ce16f3ea39\"\u003e\u003ccode\u003e329f378\u003c/code\u003e\u003c/a\u003e ✨ feat(auto): Auto build static icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/22429012231bc321e10d28c61324cf8e638aca11\"\u003e\u003ccode\u003e2242901\u003c/code\u003e\u003c/a\u003e fix: isolate SVG definition IDs per icon instance (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/423\"\u003e#423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/5c1ecb4fb06b92519a39102482d4e8273f000422\"\u003e\u003ccode\u003e5c1ecb4\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.21.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/f0183a25c68fbe94a58ef9bd3bbc5956c82aa042\"\u003e\u003ccode\u003ef0183a2\u003c/code\u003e\u003c/a\u003e ✨ feat: map Composer models to the Cursor icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/951385e6e07a3e99ed8191be14207b9f144d9b3a\"\u003e\u003ccode\u003e951385e\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.20.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/8196babdd3a5eacc8f00fb8823f991f9bb2bd85a\"\u003e\u003ccode\u003e8196bab\u003c/code\u003e\u003c/a\u003e ✨ feat: redesign the docs home and show guide pages in the sidebar\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.15.0...v5.23.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.32.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] docs: state the principles in CLAUDE.md by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2939\"\u003emodelcontextprotocol/typescript-sdk#2939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] docs: point the README at v2 and say what v1.x supports by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2942\"\u003emodelcontextprotocol/typescript-sdk#2942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2954\"\u003emodelcontextprotocol/typescript-sdk#2954\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.32.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRedirects:\u003c/strong\u003e the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets \u003ccode\u003eredirectPolicy: 'follow'\u003c/code\u003e on \u003ccode\u003eStreamableHTTPClientTransport\u003c/code\u003e or \u003ccode\u003eSSEClientTransport\u003c/code\u003e. In browsers, a redirected request fails unless that option is set.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew options, both off unless you set them:\u003c/strong\u003e \u003ccode\u003emaxToolInputElements\u003c/code\u003e on \u003ccode\u003eMcpServer\u003c/code\u003e limits the number of array elements and object members in a tool call's arguments. \u003ccode\u003eexpectedResource\u003c/code\u003e on \u003ccode\u003erequireBearerAuth\u003c/code\u003e accepts only tokens issued for this server (the token's audience).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(client): follow redirects only within the endpoint's origin by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2902\"\u003emodelcontextprotocol/typescript-sdk#2902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: point SECURITY.md at GitHub Security Advisories (v1.x) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2910\"\u003emodelcontextprotocol/typescript-sdk#2910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] examples: close idle sessions and cap the session map by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2914\"\u003emodelcontextprotocol/typescript-sdk#2914\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2925\"\u003emodelcontextprotocol/typescript-sdk#2925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2927\"\u003emodelcontextprotocol/typescript-sdk#2927\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by \u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(auth): add expectedResource to requireBearerAuth by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2930\"\u003emodelcontextprotocol/typescript-sdk#2930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] test(e2e): cover tools/call and prompts/get without arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2931\"\u003emodelcontextprotocol/typescript-sdk#2931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2935\"\u003emodelcontextprotocol/typescript-sdk#2935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/ff07b001194fe60ee9deb2121cf119057565796d\"\u003e\u003ccode\u003eff07b00\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2954\"\u003e#2954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/8a74d504a9ac1250f209325536f2f6c443e04ae6\"\u003e\u003ccode\u003e8a74d50\u003c/code\u003e\u003c/a\u003e [v1.x] docs: point the README at v2 and say what v1.x supports (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a8cf50360f1366ffee174ac337146657bad9be2c\"\u003e\u003ccode\u003ea8cf503\u003c/code\u003e\u003c/a\u003e [v1.x] docs: state the principles in CLAUDE.md (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/32549b00a9a808265f35a29f92fdf27fa4aac2ef\"\u003e\u003ccode\u003e32549b0\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2935\"\u003e#2935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/588d51dbe337000705890fad81e874eb080174c2\"\u003e\u003ccode\u003e588d51d\u003c/code\u003e\u003c/a\u003e [v1.x] test(e2e): cover tools/call and prompts/get without arguments (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2931\"\u003e#2931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/5a0724d14cf34a27a3b070224d2996cdd611df9f\"\u003e\u003ccode\u003e5a0724d\u003c/code\u003e\u003c/a\u003e [v1.x] feat(auth): add expectedResource to requireBearerAuth (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2930\"\u003e#2930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ca0b62d93c6cb403b3b96122eff3a3140b84cc0\"\u003e\u003ccode\u003e0ca0b62\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f\"\u003e\u003ccode\u003efd26801\u003c/code\u003e\u003c/a\u003e [v1.x] feat(server): add maxToolInputElements option to limit the number of e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa\"\u003e\u003ccode\u003e727075b\u003c/code\u003e\u003c/a\u003e [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ff63772dae796f41578ace47f7c814f4d86fa24\"\u003e\u003ccode\u003e0ff6377\u003c/code\u003e\u003c/a\u003e [v1.x] examples: close idle sessions and cap the session map (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2914\"\u003e#2914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.32.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@toon-format/toon` from 4.1.0 to 4.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/toon-format/toon/releases\"\u003e@​toon-format/toon's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport spec v4.4  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/362\"\u003etoon-format/toon#362\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/236a7b9\"\u003e\u003c!-- raw HTML omitted --\u003e(236a7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep usage off stdout and split short option values  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/55483e6\"\u003e\u003c!-- raw HTML omitted --\u003e(55483)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuote a root string that starts with U+FEFF  -  by \u003ca href=\"https://github.com/Iams4kura\"\u003e\u003ccode\u003e@​Iams4kura\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/343\"\u003etoon-format/toon#343\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/0936414\"\u003e\u003c!-- raw HTML omitted --\u003e(09364)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecli\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eKeep the last duplicate key when decoding with \u003ccode\u003e--no-strict\u003c/code\u003e  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/353\"\u003etoon-format/toon#353\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/c6dd07a\"\u003e\u003c!-- raw HTML omitted --\u003e(c6dd0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edecode\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eThree decoder cases that diverged from the spec  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/355\"\u003etoon-format/toon#355\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/4234208\"\u003e\u003c!-- raw HTML omitted --\u003e(42342)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow the spec 4.2 decoder rules  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/357\"\u003etoon-format/toon#357\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/b620f9c\"\u003e\u003c!-- raw HTML omitted --\u003e(b620f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eencode\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eNormalize sparse array holes to null  -  by \u003ca href=\"https://github.com/Iams4kura\"\u003e\u003ccode\u003e@​Iams4kura\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/335\"\u003etoon-format/toon#335\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/033d885\"\u003e\u003c!-- raw HTML omitted --\u003e(033d8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.1...v4.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWrite CLI diagnostics to stderr so stdout carries results only  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/4675789\"\u003e\u003c!-- raw HTML omitted --\u003e(46757)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTerminate the last line of file output with a newline  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/c3d7c2f\"\u003e\u003c!-- raw HTML omitted --\u003e(c3d7c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTreat a tab-indented hash line as content, not a comment  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/6e822b3\"\u003e\u003c!-- raw HTML omitted --\u003e(6e822)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject a raw string whose comment marker follows a byte-order mark  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/bde6eae\"\u003e\u003c!-- raw HTML omitted --\u003e(bde6e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.0...v4.1.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/92d7fc6d8af920afc99d1b6533cfc976c472fe7d\"\u003e\u003ccode\u003e92d7fc6\u003c/code\u003e\u003c/a\u003e chore: release v4.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/83241b8b584b33b3de678e2bbf5b83742760902d\"\u003e\u003ccode\u003e83241b8\u003c/code\u003e\u003c/a\u003e chore: upgrade dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/d0d8268694cd0d4894a8ae61c4c426cc33cf605a\"\u003e\u003ccode\u003ed0d8268\u003c/code\u003e\u003c/a\u003e docs: update the spec versions of the implementations (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/033d8851c579f175490ac8b020451fab072b5bef\"\u003e\u003ccode\u003e033d885\u003c/code\u003e\u003c/a\u003e fix(encode): normalize sparse array holes to null (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/335\"\u003e#335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/236a7b987c896d26d8c9510c2b7571049a3dceaa\"\u003e\u003ccode\u003e236a7b9\u003c/code\u003e\u003c/a\u003e feat: support spec v4.4 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/fee1f34c87b2a9bf80823bf42331001f0d80dbc4\"\u003e\u003ccode\u003efee1f34\u003c/code\u003e\u003c/a\u003e docs: bump toon-fu to spec 4.3 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/3ca0c23bc55587d8b4e7eda1cc2be93c6f1a2895\"\u003e\u003ccode\u003e3ca0c23\u003c/code\u003e\u003c/a\u003e chore: update \u003ccode\u003e@toon-format/spec\u003c/code\u003e to v4.2.1 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/109decf93e4023372e6b4e5ab74fa110096505aa\"\u003e\u003ccode\u003e109decf\u003c/code\u003e\u003c/a\u003e docs: add toon-fu to community implementations (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/356\"\u003e#356\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/a0b3c22fe826f7c48e67cd3e9482bc76ebe7efd5\"\u003e\u003ccode\u003ea0b3c22\u003c/code\u003e\u003c/a\u003e docs: add the v4.2 section to the v4 release page (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/359\"\u003e#359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/12a1bac2e0749aae3d46c2fe13d9fd71f36a04f8\"\u003e\u003ccode\u003e12a1bac\u003c/code\u003e\u003c/a\u003e chore: update \u003ccode\u003e@toon-format/spec\u003c/code\u003e to v4.2.0 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.0...v4.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@xyflow/react` from 12.11.2 to 12.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/xyflow/xyflow/releases\"\u003e@​xyflow/react's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.12.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Always fire onResizeEnd after onResizeStart\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Fix incorrect values during resize when shouldResize returns false\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.83\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5994\"\u003e#5994\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/2350158ba91e82823477b0a1160c0319e79d6172\"\u003e\u003ccode\u003e2350158\u003c/code\u003e\u003c/a\u003e - Reset all properties in provider store when unmounting flow\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5997\"\u003e#5997\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e - Prevent attribution warning when pane is not rendered either\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.82\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/22e0be21507cfc319a97e30b88dd2668fd9086a8\"\u003e\u003ccode\u003e22e0be2\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.81\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5974\"\u003e#5974\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/8c429225b796f28c89c809ac1d4883ea44ae8c5b\"\u003e\u003ccode\u003e8c42922\u003c/code\u003e\u003c/a\u003e - Minimap still works after ReactFlow remounts\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5962\"\u003e#5962\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/cbf40b938f1651321198d3f1b2c1457c2b7145e4\"\u003e\u003ccode\u003ecbf40b9\u003c/code\u003e\u003c/a\u003e - Show log if user hides attribution in development\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5976\"\u003e#5976\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/3319ef4917c3d43a6f3cc035ba9850e5fe72e8d6\"\u003e\u003ccode\u003e3319ef4\u003c/code\u003e\u003c/a\u003e - Fix the \u003ccode\u003eMiniMap\u003c/code\u003e zooming out to include the origin when every node is hidden.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5955\"\u003e#5955\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/965ca7040445780c217c6e25ee5e566f0949e2f6\"\u003e\u003ccode\u003e965ca70\u003c/code\u003e\u003c/a\u003e - Fix \u003ccode\u003eMiniMap\u003c/code\u003e calling \u003ccode\u003euseCallback\u003c/code\u003e conditionally for \u003ccode\u003eonNodeClick\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5902\"\u003e#5902\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/393d95161802948a3c9cca55dde3d807e9a634f1\"\u003e\u003ccode\u003e393d951\u003c/code\u003e\u003c/a\u003e - Allow middle-mouse viewport panning to start from a selection rectangle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5889\"\u003e#5889\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/ff126a06a57c341948407d7f66b2972e2627828a\"\u003e\u003ccode\u003eff126a0\u003c/code\u003e\u003c/a\u003e - Fix \u003ccode\u003eextent: 'parent'\u003c/code\u003e not immediately resolving when parent has \u003ccode\u003ewidth\u003c/code\u003e or \u003ccode\u003einitialWidth\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md\"\u003e@​xyflow/react's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.12.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Always fire onResizeEnd after onResizeStart\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Fix incorrect values during resize when shouldResize returns false\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.83\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5994\"\u003e#5994\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/2350158ba91e82823477b0a1160c0319e79d6172\"\u003e\u003ccode\u003e2350158\u003c/code\u003e\u003c/a\u003e - Reset all properties in provider store when unmounting flow\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5997\"\u003e#5997\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e - Prevent attribution warning when pane is not rendered either\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.82\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/22e0be21507cfc319a97e30b88dd2668fd9086a8\"\u003e\u003ccode\u003e22e0be2\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.81\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5974\"\u003e#5974\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/8c429225b796f28c89c809ac1d4883ea44ae8c5b\"\u003e\u003ccode\u003e8c42922\u003c/code\u003e\u003c/a\u003e - Minimap still works after ReactFlow remounts\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5962\"\u003e#5962\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/cbf40b938f1651321198d3f1b2c1457c2b7145e4\"\u003e\u003ccode\u003ecbf40b9\u003c/code\u003e\u003c/a\u003e - Show log if user hides attribution in development\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/8716946b6b7f537a29049767f1a8d16c2965fe14\"\u003e\u003ccode\u003e8716946\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/9fd41fd4fc18a22b7c461da8888b2ab264a00a29\"\u003e\u003ccode\u003e9fd41fd\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/19f9c2ad98ac71e837d467edf66fea628fd87c55\"\u003e\u003ccode\u003e19f9c2a\u003c/code\u003e\u003c/a\u003e fix(react/store): reset defaultEdgeOptions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/2acefb5b4f3730b28f0480a107a887d35ed92b83\"\u003e\u003ccode\u003e2acefb5\u003c/code\u003e\u003c/a\u003e fix(react/store): reset functions \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5991\"\u003e#5991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/8f0a5d6429ab0ecb16f41b779be38acbdc38c53e\"\u003e\u003ccode\u003e8f0a5d6\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/286816c8368339aa0cd965f831e9dbc6ec9e7c74\"\u003e\u003ccode\u003e286816c\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/3319ef4917c3d43a6f3cc035ba9850e5fe72e8d6\"\u003e\u003ccode\u003e3319ef4\u003c/code\u003e\u003c/a\u003e fix(react): keep minimap bounds at the viewport when all nodes are hidden\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/b7186f335c827c58903ed07f9299a38ad3d22be0\"\u003e\u003ccode\u003eb7186f3\u003c/code\u003e\u003c/a\u003e fix(react): minimap still works after reactflow remounts \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5971\"\u003e#5971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/d8edc77821201d04743cbb75304df5bb5bc8cad8\"\u003e\u003ccode\u003ed8edc77\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5955\"\u003e#5955\u003c/a\u003e from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/59b1a602034d25575498cdc7a5722f8546d0d941\"\u003e\u003ccode\u003e59b1a60\u003c/code\u003e\u003c/a\u003e Simplify node click handling in MiniMap component\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `csv-stringify` from 6.8.1 to 6.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/adaltas/node-csv/blob/master/packages/csv-stringify/CHANGELOG.md\"\u003ecsv-stringify's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.3...csv-stringify@6.9.0\"\u003e6.9.0\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e expose csv error and normalize_options (\u003ca href=\"https://github.com/adaltas/node-csv/commit/963388da88d150e0ab2dafa2ad4382917c25cc06\"\u003e963388d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e do not alter the source record when columns is set (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/504\"\u003e#504\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/041deff3f9b811e73ac0d151d00c605eaf2a00d6\"\u003e041deff\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve header cast context when eof is false (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/505\"\u003e#505\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/a38ef064a099cdac907cd170d028d8ced3fb1c52\"\u003ea38ef06\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve negative numeric values (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/510\"\u003e#510\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/0002d56f882eb386510ee725d318f06bfeccc9cc\"\u003e0002d56\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve objects returned by cast functions (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/509\"\u003e#509\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/1742c9ff3386f9a20e3fdcf452322e75b3a19f1a\"\u003e1742c9f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e quote fields containing a carriage return (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/485\"\u003e#485\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/d64d410b21cf126d410c79c9448b648531a2e8af\"\u003ed64d410\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.2...csv-stringify@6.8.3\"\u003e6.8.3\u003c/a\u003e (2026-08-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e quote every field matching a global quoted_match regexp (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.1...csv-stringify@6.8.2\"\u003e6.8.2\u003c/a\u003e (2026-08-02)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package csv-stringify\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/594c6469c4a7376c1048d13c47859c2f91674206\"\u003e\u003ccode\u003e594c646\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/9f041459c37f881ecf2f3a2610f7b76f5df89632\"\u003e\u003ccode\u003e9f04145\u003c/code\u003e\u003c/a\u003e build: latest dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/d64d410b21cf126d410c79c9448b648531a2e8af\"\u003e\u003ccode\u003ed64d410\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): quote fields containing a carriage return (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/485\"\u003e#485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/963388da88d150e0ab2dafa2ad4382917c25cc06\"\u003e\u003ccode\u003e963388d\u003c/code\u003e\u003c/a\u003e feat(csv-stringify): expose csv error and normalize_options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/041deff3f9b811e73ac0d151d00c605eaf2a00d6\"\u003e\u003ccode\u003e041deff\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): do not alter the source record when columns is set (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/504\"\u003e#504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/a38ef064a099cdac907cd170d028d8ced3fb1c52\"\u003e\u003ccode\u003ea38ef06\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): preserve header cast context when eof is false (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/505\"\u003e#505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/8d4173d6d8dbb375ba8699cfd1d83af93b921f80\"\u003e\u003ccode\u003e8d4173d\u003c/code\u003e\u003c/a\u003e build: latest dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/c8caa1ccd262151c7d11add8fb7b454ed1d447a9\"\u003e\u003ccode\u003ec8caa1c\u003c/code\u003e\u003c/a\u003e build: generate latest dist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/3433750d78b890cb4c05c959af259e950c4ba473\"\u003e\u003ccode\u003e3433750\u003c/code\u003e\u003c/a\u003e test: eslint format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/6c45c9b2f5aac96b2097229749a3521840cf1dc2\"\u003e\u003ccode\u003e6c45c9b\u003c/code\u003e\u003c/a\u003e build: remove npx usage in package scripts\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/adaltas/node-csv/commits/csv-stringify@6.9.0/packages/csv-stringify\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fumadocs-core` from 16.14.0 to 16.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fuma-nama/fumadocs/releases\"\u003efumadocs-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003efumadocs@16.16.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.2\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.2\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFocus inside the AI chat panel when opened\u003c/h3\u003e\n\u003cp\u003eThe \u003ccode\u003eaiChat\u003c/code\u003e panel turns visible as soon as it opens, so its input can take focus right away. It still hides only after the closing transition.\u003c/p\u003e\n\u003ch3\u003eCollapse the sidebar with \u003ccode\u003eCtrl + B\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eOn desktop, press \u003ccode\u003eCtrl + B\u003c/code\u003e (\u003ccode\u003e⌘ + B\u003c/code\u003e on macOS) to collapse or expand the sidebar, in layouts that support collapsing it. Like the theme hotkey, it is ignored while typing in an editable element, or when a dialog is opened.\u003c/p\u003e\n\u003ch3\u003eFix Spacious layout on Firefox mobile\u003c/h3\u003e\n\u003cp\u003eWhen scrolling in Firefox, the top edge of the page panel moved away from the navbar and table of contents bar, ending up in the middle of the page or off screen. It now stays below the bars, without relying on CSS anchor positioning.\u003c/p\u003e\n\u003ch3\u003eIgnore unknown values in tab groups\u003c/h3\u003e\n\u003cp\u003eTabs with a \u003ccode\u003egroupId\u003c/code\u003e, including code block tabs with \u003ccode\u003etab-group\u003c/code\u003e, applied persisted or shared values even when none of their tabs matched, for example after renaming a tab, or when tabs in the same group have different items. They then showed no content until a tab was clicked. Such values are now ignored.\u003c/p\u003e\n\u003ch2\u003efumadocs@16.16.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.1\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.1\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprove Spacious layout on mobile\u003c/h3\u003e\n\u003cp\u003eThe page sits in an inset panel on mobile too, while the navbar and table of contents bar stay on the outer surface.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe sidebar drawer floats as an inset panel, like the AI chat.\u003c/li\u003e\n\u003cli\u003eThe navbar and table of contents bar stay below the \u003ccode\u003e\u0026lt;Banner /\u0026gt;\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eLike the Docs layout, \u003ccode\u003e--fd-docs-row-3\u003c/code\u003e is the bottom of these bars, so API pages scroll their content below them.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003efumadocs@16.16.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.0\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.0\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePlace AI chat in layouts\u003c/h3\u003e\n\u003cp\u003eDocs, Notebook, and Glass layouts accept an \u003ccode\u003eaiChat\u003c/code\u003e option, pass your chat as \u003ccode\u003eaiChat.panel\u003c/code\u003e and the layout places it beside the page on wide viewports, and floats it over the page on smaller ones.\u003c/p\u003e\n\u003cp\u003eYour chat component no longer needs layout-specific positioning, like targeting \u003ccode\u003e#nd-docs-layout\u003c/code\u003e or overriding \u003ccode\u003e--fd-right-width\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003eai\u003c/code\u003e feature of Fumadocs CLI now renders your docs layout from a client component at \u003ccode\u003eai/layout.tsx\u003c/code\u003e in your components directory, which passes the installed chat to \u003ccode\u003eaiChat\u003c/code\u003e. It supports Docs, Notebook, Glass, and Spacious layouts, and only adds a floating trigger to the layouts without their own.\u003c/p\u003e\n\u003ch3\u003eExport Glass layout as \u003ccode\u003eDocsLayout\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eL...\n\n_Description has been truncated_","html_url":"https://github.com/foisalislambd/old-airoute/pull/31","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/foisalislambd%2Fold-airoute/issues/31","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/31/packages"},{"uuid":"5808854384","node_id":"PR_kwDOQ7Z8oc8AAAABH5yM2g","number":71,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 16 directories with 14 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T05:30:57.000Z","updated_at":"2026-10-12T05:31:28.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":14,"packages":[{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"next","old_version":"15.5.9","new_version":"15.5.27","repository_url":"https://github.com/vercel/next.js"},{"name":"axios","old_version":"1.12.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@redocly/cli","old_version":"1.34.1","new_version":"1.34.17","repository_url":"https://github.com/Redocly/redocly-cli"},{"name":"undici","old_version":"6.21.2","new_version":"6.27.0","repository_url":"https://github.com/nodejs/undici"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [next](https://github.com/vercel/next.js) | `15.5.9` | `15.5.27` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 4 updates in the /apps/cms directory: [js-yaml](https://github.com/nodeca/js-yaml), [axios](https://github.com/axios/axios), [@redocly/cli](https://github.com/Redocly/redocly-cli) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 5 updates in the /examples/auth/expo-social-auth directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.21.3` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/auth/hono-full directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [hono](https://github.com/honojs/hono) | `4.9.7` | `4.13.13` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/caching/with-cloudflare-workers-kv directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `removed` |\n| [undici](https://github.com/nodejs/undici) | `5.20.0` | `6.27.0` |\n\nBumps the npm_and_yarn group with 1 update in the /examples/clerk directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 6 updates in the /examples/realtime/nextjs-authorization-demo directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [next](https://github.com/vercel/next.js) | `14.2.4` | `16.4.0` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/slack-clone/nextjs-slack-clone directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/slack-clone/nextjs-slack-clone-dotenvx directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/user-management/expo-push-notifications directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.1` | `17.13.8` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/user-management/expo-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.22.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.1` | `17.13.8` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/user-management/nextjs-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 8 updates in the /examples/user-management/nuxt3-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [@fastify/busboy](https://github.com/fastify/busboy) | `2.1.1` | `removed` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.0.0` | `5.3.2` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.2` |\n| [undici](https://github.com/nodejs/undici) | `5.28.4` | `6.27.0` |\n\nBumps the npm_and_yarn group with 7 updates in the /examples/user-management/refine-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.8` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [figlet](https://github.com/patorjk/figlet.js) | `1.9.3` | `1.12.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/user-management/sveltekit-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.1.1` | `5.9.4` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/with-cloudflare-workers directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `removed` |\n| [undici](https://github.com/nodejs/undici) | `5.20.0` | `6.27.0` |\n\n\nUpdates `js-yaml` from 3.14.2 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 15.5.9 to 15.5.27\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.27\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.26\u003c/h2\u003e\n\u003cp\u003eThis release contains additional security hardening for \u003ccode\u003enext/og\u003c/code\u003e. For more information, check out \u003ca href=\"https://nextjs.org/blog/nextjs-security-update-september-22-2026\"\u003ehttps://nextjs.org/blog/nextjs-security-update-september-22-2026\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.25\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v15.5.24\"\u003ev15.5.24\u003c/a\u003e re-enabling AVIF Image Optimization when newer versions of \u003ccode\u003esharp\u003c/code\u003e are installed (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97954\"\u003e#97954\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev15.5.24\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eCritical:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36\"\u003eUnauthenticated Remote Code Execution on windows-hosted servers\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-2xp9-vwfh-vxw4\"\u003eUnauthenticated Remote Code Execution in Image Optimization API when AVIF files are used\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/def7eff9063f79cf58610c15fe58dd78b967c885\"\u003e\u003ccode\u003edef7eff\u003c/code\u003e\u003c/a\u003e v15.5.27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8\"\u003e\u003ccode\u003e52c94ab\u003c/code\u003e\u003c/a\u003e [lts-maintenance] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/219\"\u003e#219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/785f4c2397f25690edf02b5a9f1cd7deaa1abb6d\"\u003e\u003ccode\u003e785f4c2\u003c/code\u003e\u003c/a\u003e [lts-maintenance] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/197\"\u003e#197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/7217d63db316f1650cab9c2a15833155b540766c\"\u003e\u003ccode\u003e7217d63\u003c/code\u003e\u003c/a\u003e [lts-maintenance][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d5979baa545099473b9fde8b6e03f06b3167242f\"\u003e\u003ccode\u003ed5979ba\u003c/code\u003e\u003c/a\u003e [lts-maintenance][ci] Remove PR creation from deploy test workflow (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99093\"\u003e#99093\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/812ae7db8453c0aa65859ea7b2810007e033487c\"\u003e\u003ccode\u003e812ae7d\u003c/code\u003e\u003c/a\u003e [lts-maintenance][test] Adjust deploy assertions for platform drift and the e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/6936da55033075528f0dfad8f2ec29550b8c9053\"\u003e\u003ccode\u003e6936da5\u003c/code\u003e\u003c/a\u003e v15.5.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b49b6ca47ed80a1a3601d63f7ed6c00355ca4bc1\"\u003e\u003ccode\u003eb49b6ca\u003c/code\u003e\u003c/a\u003e [maintenance-lts] Harden next/og SVG serialization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f391939d5ec8f1c32b339e902100987be0b6f959\"\u003e\u003ccode\u003ef391939\u003c/code\u003e\u003c/a\u003e [15.5.x][test] Disable deploy tests triggering bot challenge (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98132\"\u003e#98132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/013ee1d2f25326197453d129430a6da83b86426d\"\u003e\u003ccode\u003e013ee1d\u003c/code\u003e\u003c/a\u003e v15.5.25\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v15.5.9...v15.5.27\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.12.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@redocly/cli` from 1.34.1 to 1.34.17\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Redocly/redocly-cli/blob/@redocly/cli@1.34.17/docs/changelog.md\"\u003e@​redocly/cli's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/b0aaa23ff07a4a2fa8627faea2e022e4282cecbc\"\u003e\u003ccode\u003eb0aaa23\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2924\"\u003e#2924\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/504120419a72b5c684471478337ee3b45d8bfad3\"\u003e\u003ccode\u003e5041204\u003c/code\u003e\u003c/a\u003e fix: path traversal in the \u003ccode\u003esplit\u003c/code\u003e command (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2923\"\u003e#2923\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/e6baf41b436380f613a70e18e2fae9e42bb0a276\"\u003e\u003ccode\u003ee6baf41\u003c/code\u003e\u003c/a\u003e fix: fix $faker expression code execution vulnerablility (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/b82bd65335cf479d096191f9a245dcb0667440d5\"\u003e\u003ccode\u003eb82bd65\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/c160a58d16f4ca326ba38b97d20fde970d0a494c\"\u003e\u003ccode\u003ec160a58\u003c/code\u003e\u003c/a\u003e fix: update dependencies (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2920\"\u003e#2920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/ef56ebe2142390faca8780b4dfbcfe66b88ff33e\"\u003e\u003ccode\u003eef56ebe\u003c/code\u003e\u003c/a\u003e chore: update js-yaml to 4.2 (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2917\"\u003e#2917\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/1526df7dfa9d9910462868b4e6c2ff6703f89b27\"\u003e\u003ccode\u003e1526df7\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2837\"\u003e#2837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/de0cde819743ad4cb449449995b21394a8aa23ad\"\u003e\u003ccode\u003ede0cde8\u003c/code\u003e\u003c/a\u003e fix: do not crash on OAS3.2 description; apply npm audit fix (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2834\"\u003e#2834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/372109901eb40349cc2459425024389214b654f3\"\u003e\u003ccode\u003e3721099\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2790\"\u003e#2790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/17e040d035a9fccc7e8c9513a6a5435ac96517d3\"\u003e\u003ccode\u003e17e040d\u003c/code\u003e\u003c/a\u003e chore: update handlebars (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2787\"\u003e#2787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Redocly/redocly-cli/compare/@redocly/cli@1.34.1...@redocly/cli@1.34.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​redocly/cli\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 6.21.2 to 6.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.27.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e4 security advisories\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 6.27.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^6.27.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on patched version:\u003c/strong\u003e the v6 fixes shipped in \u003cstrong\u003ev6.27.0\u003c/strong\u003e, not \u003ccode\u003e6.26.0\u003c/code\u003e\n— \u003ccode\u003ev6.26.0\u003c/code\u003e contains only the chunked-EOF fix (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e) and the version bump, none\nof the security fixes below.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v6 line is \u003cstrong\u003enot\u003c/strong\u003e affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g,\nGHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the\n8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).\u003c/p\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60\"\u003e\u003ccode\u003ef4c31d60\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes\u003c/em\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e, backported to v6 in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5428\"\u003e#5428\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service. All releases from 6.17.0 onward are affected.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eModerate severity\u003c/h2\u003e\n\u003ch3\u003eHTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/551138cbc1742c92242a68216167761075e8a82c\"\u003e\u003ccode\u003e551138c\u003c/code\u003e\u003c/a\u003e Bumped v6.27.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5431\"\u003e#5431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7c0841418fb9d95cd297bdd9fad9d2a53\"\u003e\u003ccode\u003eb7f252e\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5428\"\u003e#5428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447997f74d5881edd144525c3fd7db945a4\"\u003e\u003ccode\u003e25efa44\u003c/code\u003e\u003c/a\u003e fix(cookies): preserve values and parse SameSite strictly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60c42d0385bca6ad602c112706b0695212\"\u003e\u003ccode\u003ef4c31d6\u003c/code\u003e\u003c/a\u003e fix: guard idle socket validation to skip fresh sockets (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5400\"\u003e#5400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/768beacd331786c6a1ca61dd81938fca041a45b5\"\u003e\u003ccode\u003e768beac\u003c/code\u003e\u003c/a\u003e Bumped v6.26.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5323\"\u003e#5323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/7917b254484132f848fb785afbc398b1cfba389f\"\u003e\u003ccode\u003e7917b25\u003c/code\u003e\u003c/a\u003e fix: validate EOF for chunked h1 responses (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3420499cad88e72e04972b7bb28dd9f2ec2638ac\"\u003e\u003ccode\u003e3420499\u003c/code\u003e\u003c/a\u003e Bumped v6.25.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5029\"\u003e#5029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d7a1e55fbe9607e8b56a10b4be129ca63d16014b\"\u003e\u003ccode\u003ed7a1e55\u003c/code\u003e\u003c/a\u003e feat: add configurable maxPayloadSize for WebSocket (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/4955\"\u003e#4955\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a9d1848fa18d351813e9563bb7653acf1e3c60ad\"\u003e\u003ccode\u003ea9d1848\u003c/code\u003e\u003c/a\u003e Do not mark v6.x releases as latest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/01265866974369f75f939109969097e45e72b1e1\"\u003e\u003ccode\u003e0126586\u003c/code\u003e\u003c/a\u003e Ignore local agent configuration files\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.21.2...v6.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for undici since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.2 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca hr...\n\n_Description has been truncated_","html_url":"https://github.com/Sin-Estres-dev/supabase/pull/71","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sin-Estres-dev%2Fsupabase/issues/71","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/71/packages"},{"uuid":"5807518404","node_id":"PR_kwDOQNYD388AAAABH4vsJw","number":50,"state":"closed","title":"Bump axios from 1.15.0 to 1.20.0 in /enygma_dvp","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-13T21:07:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-12T02:31:33.000Z","updated_at":"2026-10-13T21:07:23.000Z","time_to_close":153338,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.15.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/enygma_dvp","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.15.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.15.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/raylsnetwork/Enygma/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/raylsnetwork/Enygma/pull/50","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/raylsnetwork%2FEnygma/issues/50","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/50/packages"},{"uuid":"5807236105","node_id":"PR_kwDOS2_Rzs8AAAABH4hrRQ","number":3,"state":"open","title":"chore(deps): bump axios from 1.17.0 to 1.20.0 in /backend","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T01:52:17.000Z","updated_at":"2026-10-12T01:56:59.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"axios","old_version":"1.17.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/backend","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.17.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.17.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.17.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TPAINN/ringvault/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/TPAINN/ringvault/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TPAINN%2Fringvault/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5799521557","node_id":"PR_kwDORpJxUs8AAAABHyozfg","number":35,"state":"open","title":"chore(deps): bump axios from 1.10.0 to 1.20.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T08:47:07.000Z","updated_at":"2026-10-11T08:48:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"axios","old_version":"1.10.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.10.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.10.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/extension/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/extension/35)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/extension/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Fextension/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"},{"uuid":"5798854923","node_id":"PR_kwDOGVTvs88AAAABHyHxYQ","number":5475,"state":"open","title":"deps(deps): bump the webui-dependencies group across 1 directory with 24 updates","user":"dependabot[bot]","labels":["lang/javascript","dependencies","weekly-release"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T07:07:00.000Z","updated_at":"2026-10-11T07:08:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"webui-dependencies","update_count":24,"packages":[{"name":"@radix-ui/react-alert-dialog","old_version":"1.1.23","new_version":"1.1.24","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-dialog","old_version":"1.1.23","new_version":"1.2.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-dropdown-menu","old_version":"2.1.24","new_version":"2.1.25","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-select","old_version":"2.3.7","new_version":"2.3.8","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-slot","old_version":"1.3.3","new_version":"1.4.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-switch","old_version":"1.3.7","new_version":"1.3.8","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-tabs","old_version":"1.1.21","new_version":"1.1.22","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-toast","old_version":"1.2.23","new_version":"1.2.24","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-tooltip","old_version":"1.2.16","new_version":"1.3.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"lucide-react","old_version":"1.28.0","new_version":"1.53.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"next","old_version":"16.3.3","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"react","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react","old_version":"19.2.18","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"react-dom","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"tailwind-merge","old_version":"3.6.0","new_version":"3.7.0","repository_url":"https://github.com/dcastil/tailwind-merge"},{"name":"@types/node","old_version":"26.2.0","new_version":"26.6.4","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react","old_version":"19.2.18","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.66.0","new_version":"8.71.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.66.0","new_version":"8.71.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"eslint","old_version":"9.39.5","new_version":"10.12.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-config-next","old_version":"16.3.0","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"postcss","old_version":"8.5.26","new_version":"8.5.29","repository_url":"https://github.com/postcss/postcss"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.9","repository_url":"https://github.com/prettier/prettier"}],"path":null,"ecosystem":"npm"},"body":"Bumps the webui-dependencies group with 24 updates in the /webui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.23` | `1.1.24` |\n| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.23` | `1.2.0` |\n| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.24` | `2.1.25` |\n| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.7` | `2.3.8` |\n| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.4.0` |\n| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.7` | `1.3.8` |\n| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.21` | `1.1.22` |\n| [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast) | `1.2.23` | `1.2.24` |\n| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.3.0` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.53.0` |\n| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.4.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |\n| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.4` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.66.0` | `8.71.1` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.66.0` | `8.71.1` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.12.0` |\n| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.0` | `16.4.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.29` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |\n\n\nUpdates `@radix-ui/react-alert-dialog` from 1.1.23 to 1.1.24\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md\"\u003e@​radix-ui/react-alert-dialog's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.1.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-dialog@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-dialog` from 1.1.23 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md\"\u003e@​radix-ui/react-dialog's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eFixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped \u003ccode\u003eFocusScope\u003c/code\u003e reclaimed focus, and its \u003ccode\u003eRemoveScroll\u003c/code\u003e only allowed scrolling within the modal content.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-focus-scope@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-dropdown-menu` from 2.1.24 to 2.1.25\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md\"\u003e@​radix-ui/react-dropdown-menu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.1.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-menu@2.1.25\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-select` from 2.3.7 to 2.3.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md\"\u003e@​radix-ui/react-select's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.3.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where internal event handlers were still called on disabled \u003ccode\u003eSelect.Item\u003c/code\u003e elements. Consumer-provided event handlers still run, but Radix's own selection logic no longer fires for disabled items.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-focus-scope@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-direction@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-popper@1.3.8\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-collection@1.1.16\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-slot` from 1.3.3 to 1.4.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md\"\u003e@​radix-ui/react-slot's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eFixed compatibility issues with React Server Components.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-switch` from 1.3.7 to 1.3.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md\"\u003e@​radix-ui/react-switch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.3.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-use-size@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-tabs` from 1.1.21 to 1.1.22\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md\"\u003e@​radix-ui/react-tabs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.1.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where a focused element inside \u003ccode\u003eTabs.Content\u003c/code\u003e did not fire a blur event before the tab switched. \u003ccode\u003eTabs.Trigger\u003c/code\u003e now moves focus before the tab's state change.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-roving-focus@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-direction@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-toast` from 1.2.23 to 1.2.24\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md\"\u003e@​radix-ui/react-toast's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where a paused \u003ccode\u003eToast\u003c/code\u003e would not auto-close after its \u003ccode\u003eduration\u003c/code\u003e changed while the timer was paused.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-collection@1.1.16\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-tooltip` from 1.2.16 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md\"\u003e@​radix-ui/react-tooltip's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-popper@1.3.8\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lucide-react` from 1.28.0 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lucide-icons/lucide/releases\"\u003elucide-react's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.53.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4961\"\u003elucide-icons/lucide#4961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4958\"\u003elucide-icons/lucide#4958\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(site): Fix reset button and rename absolute stroke width to non-scaling stroke by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4956\"\u003elucide-icons/lucide#4956\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4968\"\u003elucide-icons/lucide#4968\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the angular-deps group across 1 directory with 11 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4960\"\u003elucide-icons/lucide#4960\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(categories): Add description field to categories by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4909\"\u003elucide-icons/lucide#4909\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003egroceries\u003c/code\u003e icon by \u003ca href=\"https://github.com/rrod497\"\u003e\u003ccode\u003e@​rrod497\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4907\"\u003elucide-icons/lucide#4907\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003epen-tool\u003c/code\u003e icon by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4972\"\u003elucide-icons/lucide#4972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added new \u003ccode\u003ehiking-stick\u003c/code\u003e icon by \u003ca href=\"https://github.com/kamilasw\"\u003e\u003ccode\u003e@​kamilasw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4711\"\u003elucide-icons/lucide#4711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added scratch-blocks icon by \u003ca href=\"https://github.com/mc20000-01\"\u003e\u003ccode\u003e@​mc20000-01\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4969\"\u003elucide-icons/lucide#4969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003esoup\u003c/code\u003e and \u003ccode\u003esalad\u003c/code\u003e icons by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4971\"\u003elucide-icons/lucide#4971\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mc20000-01\"\u003e\u003ccode\u003e@​mc20000-01\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4969\"\u003elucide-icons/lucide#4969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.52.0...1.53.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.52.0...1.53.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.52.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003ewifi-cog\u003c/code\u003e icon by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4952\"\u003elucide-icons/lucide#4952\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.51.0...1.52.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.51.0...1.52.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.51.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(site): persist icon customizer by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4944\"\u003elucide-icons/lucide#4944\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Upgrade to vite 8 by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4950\"\u003elucide-icons/lucide#4950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003erugby-ball\u003c/code\u003e icon by \u003ca href=\"https://github.com/dev-mralph\"\u003e\u003ccode\u003e@​dev-mralph\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3496\"\u003elucide-icons/lucide#3496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the react-deps group across 1 directory with 3 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4951\"\u003elucide-icons/lucide#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(react-native): stop forwarding arbitrary rest props to child shape elements by \u003ca href=\"https://github.com/cipherprofessor\"\u003e\u003ccode\u003e@​cipherprofessor\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4903\"\u003elucide-icons/lucide#4903\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(lucide-solid): add Vite and SolidStart integration fixtures by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4884\"\u003elucide-icons/lucide#4884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add door-closed-cog icon by \u003ca href=\"https://github.com/ajaxjiang96\"\u003e\u003ccode\u003e@​ajaxjiang96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4905\"\u003elucide-icons/lucide#4905\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add text-align-justify-* icons by \u003ca href=\"https://github.com/HectorZaGa\"\u003e\u003ccode\u003e@​HectorZaGa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4942\"\u003elucide-icons/lucide#4942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4939\"\u003elucide-icons/lucide#4939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Upgrade to vitest 5 by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4953\"\u003elucide-icons/lucide#4953\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ewind-arrow-up\u003c/code\u003e icon by \u003ca href=\"https://github.com/jamesgpearce\"\u003e\u003ccode\u003e@​jamesgpearce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4501\"\u003elucide-icons/lucide#4501\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(github/actions): move to daily release flow by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4911\"\u003elucide-icons/lucide#4911\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(\u003ccode\u003e@​lucide/solid\u003c/code\u003e): Support for Solid 2.0 RC by \u003ca href=\"https://github.com/davedbase\"\u003e\u003ccode\u003e@​davedbase\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4751\"\u003elucide-icons/lucide#4751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4954\"\u003elucide-icons/lucide#4954\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump nuxt from 4.4.8 to 4.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4949\"\u003elucide-icons/lucide#4949\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003earmenian-dram\u003c/code\u003e icon by \u003ca href=\"https://github.com/Elawphant\"\u003e\u003ccode\u003e@​Elawphant\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4456\"\u003elucide-icons/lucide#4456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add \u003ccode\u003ekazakh-tenge\u003c/code\u003e icon by \u003ca href=\"https://github.com/hkayrad\"\u003e\u003ccode\u003e@​hkayrad\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4925\"\u003elucide-icons/lucide#4925\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-mralph\"\u003e\u003ccode\u003e@​dev-mralph\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3496\"\u003elucide-icons/lucide#3496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cipherprofessor\"\u003e\u003ccode\u003e@​cipherprofessor\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4903\"\u003elucide-icons/lucide#4903\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HectorZaGa\"\u003e\u003ccode\u003e@​HectorZaGa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4942\"\u003elucide-icons/lucide#4942\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/98331e287029edeff0e04f269439884d060af703\"\u003e\u003ccode\u003e98331e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump the react-deps group across 1 directory with 3 updates (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4951\"\u003e#4951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/09aa9c5c62c3b4b519fbb8c9ce1c396cc12f4dae\"\u003e\u003ccode\u003e09aa9c5\u003c/code\u003e\u003c/a\u003e chore(deps): Upgrade to vite 8 (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4950\"\u003e#4950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/e042fec3b59b2bc36a07bcd8b433c1aedde1db29\"\u003e\u003ccode\u003ee042fec\u003c/code\u003e\u003c/a\u003e fix(packages): declare \u003ccode\u003e@types/react\u003c/code\u003e as an optional peer dependency (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4892\"\u003e#4892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/f06ac67e33d645c40b8ce19a0419c85c5d7dd751\"\u003e\u003ccode\u003ef06ac67\u003c/code\u003e\u003c/a\u003e chore(typchecking): More typecheck jobs for all packages (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4885\"\u003e#4885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/94e4cb9d9db5907053ebf3636a97c45529cf776b\"\u003e\u003ccode\u003e94e4cb9\u003c/code\u003e\u003c/a\u003e chore(dependencies): Update dependencies (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4806\"\u003e#4806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/99d25bdee231922e73e19525f57a585d1682fab2\"\u003e\u003ccode\u003e99d25bd\u003c/code\u003e\u003c/a\u003e feat(packages): extract icon build logic into \u003ccode\u003e@lucide/shared\u003c/code\u003e (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/75b55160aa9edd7095dfed1a6e3d88e66fb2b153\"\u003e\u003ccode\u003e75b5516\u003c/code\u003e\u003c/a\u003e chore(dev): upgrade ESLint to latest compatible stack (v10) (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4378\"\u003e#4378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/0f8d48b266e7af1e2bab49ff12ab6ec0795ed204\"\u003e\u003ccode\u003e0f8d48b\u003c/code\u003e\u003c/a\u003e test(packages): updates unit test snapshots with face-slightly-smiling (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4676\"\u003e#4676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lucide-icons/lucide/commits/1.53.0/packages/lucide-react\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ccf8c15a42d1a7140cf569ac15bec3ccb0187e8f\"\u003e\u003ccode\u003eccf8c15\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b8c7c7f2f3222d133f2a64d9bb77cc83d68f8172\"\u003e\u003ccode\u003eb8c7c7f\u003c/code\u003e\u003c/a\u003e Improve static route error guidance (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99724\"\u003e#99724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react` from 19.2.8 to 19.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/releases\"\u003ereact's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e19.3.0 (September 9, 2026)\u003c/h2\u003e\n\u003cp\u003eBelow is a list of all new features, APIs, and bug fixes.\u003c/p\u003e\n\u003cp\u003eRead the \u003ca href=\"https://react.dev/blog/2026/09/09/react-19-3\"\u003eReact 19.3 release post\u003c/a\u003e for more information.\u003c/p\u003e\n\u003ch2\u003eNew React Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e: Adds \u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e and \u003ccode\u003eaddTransitionType\u003c/code\u003e APIs to power View Transition animations in React (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gaearon\"\u003e\u003ccode\u003e@​gaearon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/31975\"\u003e#31975\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31987\"\u003e#31987\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31996\"\u003e#31996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31999\"\u003e#31999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32001\"\u003e#32001\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32002\"\u003e#32002\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32028\"\u003e#32028\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32029\"\u003e#32029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32031\"\u003e#32031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32034\"\u003e#32034\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32038\"\u003e#32038\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32041\"\u003e#32041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32050\"\u003e#32050\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32090\"\u003e#32090\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32105\"\u003e#32105\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32254\"\u003e#32254\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32379\"\u003e#32379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32422\"\u003e#32422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32462\"\u003e#32462\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32540\"\u003e#32540\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32545\"\u003e#32545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32585\"\u003e#32585\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32599\"\u003e#32599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32611\"\u003e#32611\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32612\"\u003e#32612\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32617\"\u003e#32617\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32651\"\u003e#32651\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32653\"\u003e#32653\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32656\"\u003e#32656\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32664\"\u003e#32664\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32699\"\u003e#32699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32723\"\u003e#32723\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32734\"\u003e#32734\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32751\"\u003e#32751\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32752\"\u003e#32752\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32760\"\u003e#32760\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32761\"\u003e#32761\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32764\"\u003e#32764\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32772\"\u003e#32772\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32790\"\u003e#32790\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32819\"\u003e#32819\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32820\"\u003e#32820\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32822\"\u003e#32822\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32833\"\u003e#32833\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32849\"\u003e#32849\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33094\"\u003e#33094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33191\"\u003e#33191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33200\"\u003e#33200\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33206\"\u003e#33206\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33293\"\u003e#33293\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33331\"\u003e#33331\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33332\"\u003e#33332\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33357\"\u003e#33357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33362\"\u003e#33362\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33433\"\u003e#33433\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33576\"\u003e#33576\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34374\"\u003e#34374\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34450\"\u003e#34450\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34481\"\u003e#34481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34500\"\u003e#34500\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34502\"\u003e#34502\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34510\"\u003e#34510\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34511\"\u003e#34511\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34539\"\u003e#34539\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35567\"\u003e#35567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35564\"\u003e#35564\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35485\"\u003e#35485\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35380\"\u003e#35380\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35063\"\u003e#35063\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35060\"\u003e#35060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34676\"\u003e#34676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36917\"\u003e#36917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35337\"\u003e#35337\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35520\"\u003e#35520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFragment Refs: Add Refs to \u003ccode\u003e\u0026lt;Fragment /\u0026gt;\u003c/code\u003e to support composable platform behavior (\u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Dhakshin2007\"\u003e\u003ccode\u003e@​Dhakshin2007\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/chirokas\"\u003e\u003ccode\u003e@​chirokas\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/teamleaderleo\"\u003e\u003ccode\u003e@​teamleaderleo\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fallintoplace\"\u003e\u003ccode\u003e@​fallintoplace\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/32465\"\u003e#32465\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32613\"\u003e#32613\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32619\"\u003e#32619\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32654\"\u003e#32654\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32660\"\u003e#32660\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32682\"\u003e#32682\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32722\"\u003e#32722\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32813\"\u003e#32813\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32814\"\u003e#32814\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33056\"\u003e#33056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33058\"\u003e#33058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33093\"\u003e#33093\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34069\"\u003e#34069\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34103\"\u003e#34103\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34544\"\u003e#34544\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34545\"\u003e#34545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37062\"\u003e#37062\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37061\"\u003e#37061\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37060\"\u003e#37060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36047\"\u003e#36047\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36010\"\u003e#36010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35642\"\u003e#35642\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35641\"\u003e#35641\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35637\"\u003e#35637\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35630\"\u003e#35630\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34935\"\u003e#34935\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37457\"\u003e#37457\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37408\"\u003e#37408\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37326\"\u003e#37326\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37251\"\u003e#37251\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37171\"\u003e#37171\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37169\"\u003e#37169\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37168\"\u003e#37168\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37167\"\u003e#37167\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37166\"\u003e#37166\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37165\"\u003e#37165\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37164\"\u003e#37164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37163\"\u003e#37163\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37162\"\u003e#37162\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37161\"\u003e#37161\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37160\"\u003e#37160\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37125\"\u003e#37125\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37063\"\u003e#37063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew React DOM Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebrowser()\u003c/code\u003e: a new \u003ccode\u003ereact-dom\u003c/code\u003e API that returns a usable which errors during server rendering and resolves in the browser. \u003ccode\u003euse(browser())\u003c/code\u003e inside a \u003ccode\u003e\u0026lt;Suspense\u0026gt;\u003c/code\u003e boundary marks a subtree as browser-only without reporting a recoverable error (\u003ca href=\"https://github.com/gnoff\"\u003e\u003ccode\u003e@​gnoff\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37143\"\u003e#37143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37241\"\u003e#37241\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eAdded an \u003ccode\u003eonBrowserBailout\u003c/code\u003e option to the \u003ccode\u003ereact-dom/server\u003c/code\u003e APIs to observe when a subtree defers to the browser (\u003ca href=\"https://github.com/gnoff\"\u003e\u003ccode\u003e@​gnoff\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37193\"\u003e#37193\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEnable Trusted Types API integration (\u003ca href=\"https://github.com/rickhanlonii\"\u003e\u003ccode\u003e@​rickhanlonii\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35816\"\u003e#35816\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTransitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37290\"\u003e#37290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded a DEV-only warning when a component appears to have been unblocked by calling \u003ccode\u003euse()\u003c/code\u003e conditionally (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37104\"\u003e#37104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37203\"\u003e#37203\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37491\"\u003e#37491\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAll Changes\u003c/h2\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFast Refresh Fixes\n\u003cul\u003e\n\u003cli\u003eFix Fast Refresh to find and remount edits to components wrapped behind \u003ccode\u003elazy()\u003c/code\u003e (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36965\"\u003e#36965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh so edits to a \u003ccode\u003ememo()\u003c/code\u003e comparison function take effect (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36964\"\u003e#36964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh crash when an edit changes the kind of a component's type (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36963\"\u003e#36963\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUnify hot reload type resolution for Fast Refresh (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36962\"\u003e#36962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh to remount correctly when an edit changes the component kind (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36950\"\u003e#36950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDouble invoke effects in StrictMode after Fast Refresh (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35962\"\u003e#35962\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePerformance Track Fixes\n\u003cul\u003e\n\u003cli\u003ePrevent crash when accessing \u003ccode\u003e$$typeof\u003c/code\u003e in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35679\"\u003e#35679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle non-string function names in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse minus (\u003ccode\u003e-\u003c/code\u003e) instead of en dash for removed props in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35649\"\u003e#35649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle arrays with bigints in deep objects in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35648\"\u003e#35648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't enumerate typed array props in Performance Tracks in DEV (\u003ca href=\"https://github.com/UditDewan\"\u003e\u003ccode\u003e@​UditDewan\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36913\"\u003e#36913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBail out of diffing wide objects and arrays in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34742\"\u003e#34742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear potentially large performance measures in DEV (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34803\"\u003e#34803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing else branch for renders with no props change in Performance Tracks (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34837\"\u003e#34837\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eActivity Fixes\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003euseSyncExternalStore\u003c/code\u003e missing store mutations that happened while an Activity tree was hidden (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36947\"\u003e#36947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHide portal contents when an Activity is hidden (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35091\"\u003e#35091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent metadata hoisting in hidden \u003ccode\u003e\u0026lt;Activity\u0026gt;\u003c/code\u003e trees (\u003ca href=\"https://github.com/ronnakamoto\"\u003e\u003ccode\u003e@​ronnakamoto\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34983\"\u003e#34983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent errors thrown inside a hidden Activity from escaping to the visible UI (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35074\"\u003e#35074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't unhide a node if a direct parent Offscreen is still hidden (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34821\"\u003e#34821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't show internal \u003ccode\u003e\u0026lt;Offscreen\u0026gt;\u003c/code\u003e component in error messages (\u003ca href=\"https://github.com/rickhanlonii\"\u003e\u003ccode\u003e@​rickhanlonii\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35763\"\u003e#35763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eWarn in DEV when a component appears to have been unblocked by a conditional \u003ccode\u003euse()\u003c/code\u003e (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37104\"\u003e#37104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37203\"\u003e#37203\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37491\"\u003e#37491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRender transitions independently instead of entangling them into a single render (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37290\"\u003e#37290\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/blob/main/CHANGELOG.md\"\u003ereact's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e19.3.0 (September 9, 2026)\u003c/h2\u003e\n\u003ch3\u003eNew React Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e: Adds \u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e and \u003ccode\u003eaddTransitionType\u003c/code\u003e APIs to power View Transition animations in React (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gaearon\"\u003e\u003ccode\u003e@​gaearon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/31975\"\u003e#31975\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31987\"\u003e#31987\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31996\"\u003e#31996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31999\"\u003e#31999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32001\"\u003e#32001\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32002\"\u003e#32002\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32028\"\u003e#32028\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32029\"\u003e#32029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32031\"\u003e#32031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32034\"\u003e#32034\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32038\"\u003e#32038\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32041\"\u003e#32041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32050\"\u003e#32050\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32090\"\u003e#32090\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32105\"\u003e#32105\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32254\"\u003e#32254\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32379\"\u003e#32379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32422\"\u003e#32422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32462\"\u003e#32462\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32540\"\u003e#32540\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32545\"\u003e#32545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32585\"\u003e#32585\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32599\"\u003e#32599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32611\"\u003e#32611\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32612\"\u003e#32612\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32617\"\u003e#32617\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32651\"\u003e#32651\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32653\"\u003e#32653\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32656\"\u003e#32656\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32664\"\u003e#32664\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32699\"\u003e#32699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32723\"\u003e#32723\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32734\"\u003e#32734\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32751\"\u003e#32751\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32752\"\u003e#32752\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32760\"\u003e#32760\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32761\"\u003e#32761\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32764\"\u003e#32764\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32772\"\u003e#32772\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32790\"\u003e#32790\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32819\"\u003e#32819\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32820\"\u003e#32820\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32822\"\u003e#32822\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32833\"\u003e#32833\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32849\"\u003e#32849\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33094\"\u003e#33094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33191\"\u003e#33191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33200\"\u003e#33200\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33206\"\u003e#33206\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33293\"\u003e#33293\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33331\"\u003e#33331\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33332\"\u003e#33332\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33357\"\u003e#33357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33362\"\u003e#33362\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33433\"\u003e#33433\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33576\"\u003e#33576\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34374\"\u003e#34374\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34450\"\u003e#34450\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34481\"\u003e#34481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34500\"\u003e#34500\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34502\"\u003e#34502\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34510\"\u003e#34510\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34511\"\u003e#34511\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34539\"\u003e#34539\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35567\"\u003e#35567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35564\"\u003e#35564\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35485\"\u003e#35485\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35380\"\u003e#35380\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35063\"\u003e#35063\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35060\"\u003e#35060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34676\"\u003e#34676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36917\"\u003e#36917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35337\"\u003e#35337\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35520\"\u003e#35520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFragment Refs: Add Refs to \u003ccode\u003e\u0026lt;Fragment /\u0026gt;\u003c/code\u003e to support composable platform behavior (\u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Dhakshin2007\"\u003e\u003ccode\u003e@​Dhakshin2007\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/chirokas\"\u003e\u003ccode\u003e@​chirokas\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/teamleaderleo\"\u003e\u003ccode\u003e@​teamleaderleo\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fallintoplace\"\u003e\u003ccode\u003e@​fallintoplace\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fa...\n\n_Description has been truncated_\n\n\u003c!-- codesmith:footer --\u003e\n---\n\u003ca href=\"https://app.blacksmith.sh/bacalhau-project/codesmith/bacalhau/pr/5475?autoLogin=true\u0026ref=codesmith_pr_footer\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-light-v3.svg\"\u003e\u003cimg alt=\"View with [code]smith\" src=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://backend.blacksmith.sh/track/enable-autofix?expires=1794294424\u0026installation_model_id=427922\u0026pr_number=5475\u0026ref=codesmith_pr_footer\u0026repository=bacalhau-project%2Fbacalhau\u0026return_to=https%3A%2F%2Fgithub.com%2Fbacalhau-project%2Fbacalhau%2Fpull%2F5475\u0026signature=c4ed29a583a4f4125bce4f1142573886a62af0ef0c23d1d1ce2275f87556641a\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-light.svg\"\u003e\u003cimg alt=\"Autofix with [code]smith\" src=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\u003csup\u003eNeed help on this PR? Tag \u003ccode\u003e@codesmith-bot\u003c/code\u003e with what you need. Autofix is disabled.\u003c/sup\u003e\n\n\u003c!-- codesmith:autofix:disabled --\u003e\n\u003c!-- /codesmith:footer --\u003e","html_url":"https://github.com/bacalhau-project/bacalhau/pull/5475","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bacalhau-project%2Fbacalhau/issues/5475","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5475/packages"},{"uuid":"5798290954","node_id":"PR_kwDORZHj188AAAABHxsJrQ","number":330,"state":"open","title":"chore(deps): Bump the npm_and_yarn group across 14 directories with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T05:30:47.000Z","updated_at":"2026-10-11T05:33:40.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"next","old_version":"16.3.3","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"sharp","old_version":"0.35.4","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.18.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /.migration-backup/public/data directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/full-repo/pirc-unified-hub directory: [next](https://github.com/vercel/next.js), [brace-expansion](https://github.com/juliangruber/brace-expansion), [sharp](https://github.com/lovell/sharp) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/isolated-envs/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr), [axios](https://github.com/axios/axios) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/isolated-envs/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr), [axios](https://github.com/axios/axios) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data/full-repo directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 1 update in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC directory: [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/downloads/divine_justice_repo directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/downloads/divine_justice_repo/PiRC_divine_justice/server directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 4 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/pirc-unified-hub directory: [next](https://github.com/vercel/next.js), [brace-expansion](https://github.com/juliangruber/brace-expansion), [sharp](https://github.com/lovell/sharp) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/isolated-envs/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/isolated-envs/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sharp` from 0.35.4 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.4...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.c...\n\n_Description has been truncated_","html_url":"https://github.com/Ze0ro99/PiRC/pull/330","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ze0ro99%2FPiRC/issues/330","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/330/packages"},{"uuid":"5793021520","node_id":"PR_kwDORMVWK88AAAABHtsLkg","number":7,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 17 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T16:14:31.000Z","updated_at":"2026-10-10T16:18:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":17,"packages":[{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"mongoose","old_version":"9.1.6","new_version":"9.7.2","repository_url":"https://github.com/Automattic/mongoose"},{"name":"next","old_version":"16.1.7","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.28","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"immutable","old_version":"5.1.5","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss","old_version":"8.4.31","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"protobufjs","old_version":"7.5.4","new_version":"7.6.6","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"sharp","old_version":"0.34.5","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 17 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [mongoose](https://github.com/Automattic/mongoose) | `9.1.6` | `9.7.2` |\n| [next](https://github.com/vercel/next.js) | `16.1.7` | `16.4.0` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.28` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.5` | `5.1.9` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.5.23` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.5.4` | `7.6.6` |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.5` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongoose` from 9.1.6 to 9.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/releases\"\u003emongoose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.7.2 / 2026-06-22\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): avoid accessing special properties in \u003ccode\u003eDocument.prototype.get()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): only return own properties in schematype lookups and disallow setting schema paths under special properties\u003c/li\u003e\n\u003cli\u003edocs: update homepage sponsor layout\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.1 / 2026-06-17\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16331\"\u003e#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): include ObjectId regex pattern in \u003ccode\u003etoJSONSchema()\u003c/code\u003e output \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16335\"\u003e#16335\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16334\"\u003e#16334\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): split populate into separate queries per document if the resulting \u003ccode\u003e$in\u003c/code\u003e filter has more than 50k elements to reduce risk of BSON size errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5890\"\u003e#5890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add assistant sidebar with MongoDB Knowledge integration \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16311\"\u003e#16311\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16283\"\u003e#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update docs copy buttons, edit links, homepage alignment, and \u003ccode\u003ellms.txt\u003c/code\u003e generation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16326\"\u003e#16326\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16327\"\u003e#16327\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16329\"\u003e#16329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.0 / 2026-06-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Node.js TracingChannel support for APM instrumentation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16275\"\u003e#16275\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16105\"\u003e#16105\u003c/a\u003e \u003ca href=\"https://github.com/logaretm\"\u003elogaretm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(model): add standard schema adapter for models \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): avoid waiting on buffering to run aggregation middleware \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16289\"\u003e#16289\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16284\"\u003e#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): throw error if overwriting array selected with \u003ccode\u003e$slice\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16313\"\u003e#16313\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/2432\"\u003e#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): remove \u003ccode\u003evalidateSync()\u003c/code\u003e union fallback \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16310\"\u003e#16310\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: cast primitive types within unions when applying create casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16320\"\u003e#16320\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16316\"\u003e#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add \u003ccode\u003ellms.txt\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16312\"\u003e#16312\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15687\"\u003e#15687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: rewrite documents docs \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16298\"\u003e#16298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): clarify some details on \u003ccode\u003emodel.validate()\u003c/code\u003e casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(findOneAndUpdate): clarify update handling of undefined \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16299\"\u003e#16299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): fix link to be absolute \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16321\"\u003e#16321\u003c/a\u003e \u003ca href=\"https://github.com/hasezoey\"\u003ehasezoey\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.3 / 2026-05-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(clone): isolate cloned arrays from source documents \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16281\"\u003e#16281\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): preserve user-provided \u003ccode\u003e$setOnInsert.createdAt\u003c/code\u003e with \u003ccode\u003eoverwriteImmutable: true\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16278\"\u003e#16278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15781\"\u003e#15781\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16238\"\u003e#16238\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16236\"\u003e#16236\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15550\"\u003e#15550\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15571\"\u003e#15571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: add \u003ccode\u003e$percentile\u003c/code\u003e to TypeScript aggregation expression types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16290\"\u003e#16290\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16288\"\u003e#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update default pool sizes on createConnection() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16295\"\u003e#16295\u003c/a\u003e \u003ca href=\"https://github.com/torbiak-samdesk\"\u003etorbiak-samdesk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve code block copy button behavior and sidebar scrolling \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16294\"\u003e#16294\u003c/a\u003e \u003ca href=\"https://github.com/DraXx-Van\"\u003eDraXx-Van\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove broken link to deleted schema example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16297\"\u003e#16297\u003c/a\u003e \u003ca href=\"https://github.com/kaseken\"\u003ekaseken\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.2 / 2026-05-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): correctly handle modified subpaths when parent path is unset after modifying \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16271\"\u003e#16271\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16252\"\u003e#16252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16277\"\u003e#16277\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: align Node version docs and types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16270\"\u003e#16270\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.1 / 2026-04-29\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003etypes(objectid): fix \u003ccode\u003e_id\u003c/code\u003e getter helper on ObjectId \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16251\"\u003e#16251\u003c/a\u003e \u003ca href=\"https://github.com/noseworthy\"\u003enoseworthy\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e9.6.0 / 2026-04-28\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md\"\u003emongoose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.7.2 / 2026-06-22\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): avoid accessing special properties in \u003ccode\u003eDocument.prototype.get()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): only return own properties in schematype lookups and disallow setting schema paths under special properties\u003c/li\u003e\n\u003cli\u003edocs: update homepage sponsor layout\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.1 / 2026-06-17\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16331\"\u003e#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): include ObjectId regex pattern in \u003ccode\u003etoJSONSchema()\u003c/code\u003e output \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16335\"\u003e#16335\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16334\"\u003e#16334\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): split populate into separate queries per document if the resulting \u003ccode\u003e$in\u003c/code\u003e filter has more than 50k elements to reduce risk of BSON size errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5890\"\u003e#5890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add assistant sidebar with MongoDB Knowledge integration \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16311\"\u003e#16311\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16283\"\u003e#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update docs copy buttons, edit links, homepage alignment, and \u003ccode\u003ellms.txt\u003c/code\u003e generation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16326\"\u003e#16326\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16327\"\u003e#16327\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16329\"\u003e#16329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.0 / 2026-06-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Node.js TracingChannel support for APM instrumentation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16275\"\u003e#16275\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16105\"\u003e#16105\u003c/a\u003e \u003ca href=\"https://github.com/logaretm\"\u003elogaretm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(model): add standard schema adapter for models \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): avoid waiting on buffering to run aggregation middleware \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16289\"\u003e#16289\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16284\"\u003e#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): throw error if overwriting array selected with \u003ccode\u003e$slice\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16313\"\u003e#16313\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/2432\"\u003e#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): remove \u003ccode\u003evalidateSync()\u003c/code\u003e union fallback \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16310\"\u003e#16310\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: cast primitive types within unions when applying create casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16320\"\u003e#16320\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16316\"\u003e#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add \u003ccode\u003ellms.txt\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16312\"\u003e#16312\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15687\"\u003e#15687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: rewrite documents docs \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16298\"\u003e#16298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): clarify some details on \u003ccode\u003emodel.validate()\u003c/code\u003e casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(findOneAndUpdate): clarify update handling of undefined \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16299\"\u003e#16299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): fix link to be absolute \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16321\"\u003e#16321\u003c/a\u003e \u003ca href=\"https://github.com/hasezoey\"\u003ehasezoey\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.3 / 2026-05-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(clone): isolate cloned arrays from source documents \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16281\"\u003e#16281\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): preserve user-provided \u003ccode\u003e$setOnInsert.createdAt\u003c/code\u003e with \u003ccode\u003eoverwriteImmutable: true\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16278\"\u003e#16278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15781\"\u003e#15781\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16238\"\u003e#16238\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16236\"\u003e#16236\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15550\"\u003e#15550\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15571\"\u003e#15571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: add \u003ccode\u003e$percentile\u003c/code\u003e to TypeScript aggregation expression types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16290\"\u003e#16290\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16288\"\u003e#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update default pool sizes on createConnection() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16295\"\u003e#16295\u003c/a\u003e \u003ca href=\"https://github.com/torbiak-samdesk\"\u003etorbiak-samdesk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve code block copy button behavior and sidebar scrolling \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16294\"\u003e#16294\u003c/a\u003e \u003ca href=\"https://github.com/DraXx-Van\"\u003eDraXx-Van\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove broken link to deleted schema example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16297\"\u003e#16297\u003c/a\u003e \u003ca href=\"https://github.com/kaseken\"\u003ekaseken\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e8.24.0 / 2026-05-14\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16247\"\u003e#16247\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16041\"\u003e#16041\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16033\"\u003e#16033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(connection): handle calling watch() on disconnected connection \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16246\"\u003e#16246\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16034\"\u003e#16034\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16286\"\u003e#16286\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.2 / 2026-05-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): correctly handle modified subpaths when parent path is unset after modifying \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16271\"\u003e#16271\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16252\"\u003e#16252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16277\"\u003e#16277\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: align Node version docs and types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16270\"\u003e#16270\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/87ade9bfb84132cddd3e5f257660e1556347e884\"\u003e\u003ccode\u003e87ade9b\u003c/code\u003e\u003c/a\u003e chore: release 9.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/4e127860e6c65aa047dd43fb6ce103605e277361\"\u003e\u003ccode\u003e4e12786\u003c/code\u003e\u003c/a\u003e Merge branch 'vkarpov15/fix-security-20260609-master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/b3dd12a9d1121df7d12af0824df7d81eb3d99ce5\"\u003e\u003ccode\u003eb3dd12a\u003c/code\u003e\u003c/a\u003e docs: flex wrap for major sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/d48fee3d146d6624a79f2a30bd332a484a28c16d\"\u003e\u003ccode\u003ed48fee3\u003c/code\u003e\u003c/a\u003e fix(documentarray): reindex subdocs after reordering (\u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/03bedeaf57b3154cc89178fbb547cd16a951ccc0\"\u003e\u003ccode\u003e03bedea\u003c/code\u003e\u003c/a\u003e docs: add mongodb as sponsor on homepage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/8fa236568ea6536612c86ff73117a9436c9715e3\"\u003e\u003ccode\u003e8fa2365\u003c/code\u003e\u003c/a\u003e fix(document): additional defensive checks in Document.prototype.get()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/35a3f33bc9a0a28671f99e3c5010000425650d0f\"\u003e\u003ccode\u003e35a3f33\u003c/code\u003e\u003c/a\u003e fix(schema): only return own properties in schematype lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/d2a725f00853d2a97de62ae14ac4376cbdcedb00\"\u003e\u003ccode\u003ed2a725f\u003c/code\u003e\u003c/a\u003e chore: fix eslint ignore to exclude old docs files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/7fee4b58ce881716ad91c16a8e82c78341742274\"\u003e\u003ccode\u003e7fee4b5\u003c/code\u003e\u003c/a\u003e chore: release 9.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/1e81fcc6a8757df38329892a753b79fe553d4c4d\"\u003e\u003ccode\u003e1e81fcc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e from Automattic/vkarpov15/gh-5890-2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Automattic/mongoose/compare/9.1.6...9.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.1.7 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ccf8c15a42d1a7140cf569ac15bec3ccb0187e8f\"\u003e\u003ccode\u003eccf8c15\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b8c7c7f2f3222d133f2a64d9bb77cc83d68f8172\"\u003e\u003ccode\u003eb8c7c7f\u003c/code\u003e\u003c/a\u003e Improve static route error guidance (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99724\"\u003e#99724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.1.7...v16.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.28\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/487368484af4ff9aba321be0ac65bf9a8dab3d34\"\u003e\u003ccode\u003e4873684\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/9030798a5922aa76e94db887aeed97daaf2dfb1b\"\u003e\u003ccode\u003e9030798\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/a5df351eb505078f62bf07477d3583fa9df51e5b\"\u003e\u003ccode\u003ea5df351\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.28\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/...\n\n_Description has been truncated_","html_url":"https://github.com/amank736836/Project-Next-ECommerce/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/amank736836%2FProject-Next-ECommerce/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"5790345693","node_id":"PR_kwDOSP8CPM8AAAABHrpinw","number":21,"state":"open","title":"Bump axios from 1.7.9 to 1.20.0 in /web","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T10:23:34.000Z","updated_at":"2026-10-10T10:23:44.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.7.9","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/web","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.7.9 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.9...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.7.9\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TW199501/mind-map/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/TW199501/mind-map/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TW199501%2Fmind-map/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"},{"uuid":"5788504561","node_id":"PR_kwDONXVVVs8AAAABHqQYlw","number":59,"state":"open","title":"Bump axios from 1.7.9 to 1.20.0 in /client","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T05:41:35.000Z","updated_at":"2026-10-10T05:45:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.7.9","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/client","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.7.9 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.9...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.7.9\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Lajwantiharani/DMYF/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Lajwantiharani/DMYF/pull/59","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Lajwantiharani%2FDMYF/issues/59","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/59/packages"},{"uuid":"5786572195","node_id":"PR_kwDOMngwx88AAAABHovyhA","number":2,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T00:51:30.000Z","updated_at":"2026-10-10T00:51:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":13,"packages":[{"name":"axios","old_version":"1.7.7","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@babel/core","old_version":"7.24.9","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.0","repository_url":"https://github.com/ljharb/qs"},{"name":"browserslist","old_version":"4.23.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"cookie","old_version":"0.6.0","new_version":"0.7.2","repository_url":"https://github.com/jshttp/cookie"},{"name":"flatted","old_version":"3.3.1","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"follow-redirects","old_version":"1.15.6","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"form-data","old_version":"4.0.0","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"send","old_version":"0.18.0","new_version":"1.2.1","repository_url":"https://github.com/pillarjs/send"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.20.0` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.9` | `7.29.7` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.0` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.23.2` | `4.29.3` |\n| [cookie](https://github.com/jshttp/cookie) | `0.6.0` | `0.7.2` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.4` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.6` | `1.16.1` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.6` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [send](https://github.com/pillarjs/send) | `0.18.0` | `1.2.1` |\n\n\nUpdates `axios` from 1.7.7 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.7...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.24.9 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined entries in \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e + \u003ccode\u003eencodeValuesOnly\u003c/code\u003e instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: use configured \u003ccode\u003edelimiter\u003c/code\u003e after \u003ccode\u003echarsetSentinel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: apply \u003ccode\u003eformatter\u003c/code\u003e to encoded key under \u003ccode\u003estrictNullHandling\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined filter-array entries instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: handle nested bracket groups and add regression tests (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/530\"\u003e#530\u003c/a\u003e); changes output for some unbalanced bracket keys (see \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] fix grammar (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add regression tests for keys containing percent-encoded bracket text\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eparameterLimit: Infinity\u003c/code\u003e with \u003ccode\u003ethrowOnLimitExceeded: true\u003c/code\u003e silently drops all parameters\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eiconv-lite\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003estrictMerge\u003c/code\u003e option to wrap object/primitive conflicts in an array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/425\"\u003e#425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eduplicates\u003c/code\u003e option should not apply to bracket notation keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/514\"\u003e#514\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: mark overflow objects for indexed notation exceeding \u003ccode\u003earrayLimit\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/546\"\u003e#546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003earrayLimit\u003c/code\u003e means max count, not max index, in \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e/\u003ccode\u003eparseArrayValue\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: throw on \u003ccode\u003earrayLimit\u003c/code\u003e exceeded with indexed notation when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is true (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/529\"\u003e#529\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/bb9379e01fad04c601478acd6152143cb20c984b\"\u003e\u003ccode\u003ebb9379e\u003c/code\u003e\u003c/a\u003e v6.16.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/62fd25480b0b0d9c0a667ee67e13608a363f5d0e\"\u003e\u003ccode\u003e62fd254\u003c/code\u003e\u003c/a\u003e [Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464\"\u003e\u003ccode\u003e8859c37\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when `throwOn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/8079adc7e7cf84b8289898d1b18877160de67d40\"\u003e\u003ccode\u003e8079adc\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping `array...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d56f48ca137b1bf6385da749b1044246ae142f19\"\u003e\u003ccode\u003ed56f48c\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6\"\u003e\u003ccode\u003ee83d321\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/7e87a07c2c62301dd8fc2e099ac38227bc96c74c\"\u003e\u003ccode\u003e7e87a07\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/9a76af21604a4ece315e58ba251b93cf0fd944f2\"\u003e\u003ccode\u003e9a76af2\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/3a890d4ecd3deb72a45d90be36f4f8c5970467c7\"\u003e\u003ccode\u003e3a890d4\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b433a9b1633e1c3348aa53c513589a5bfe47f113\"\u003e\u003ccode\u003eb433a9b\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or dro...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.11.0...v6.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.23.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.23.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cookie` from 0.6.0 to 0.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/cookie/releases\"\u003ecookie's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFixed\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix object assignment of \u003ccode\u003ehasOwnProperty\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/177\"\u003e#177\u003c/a\u003e)  bc38ffd\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2\"\u003ehttps://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e0.7.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFixed\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAllow leading dot for domain (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/174\"\u003e#174\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eAlthough not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdd fast path for \u003ccode\u003eserialize\u003c/code\u003e without options, use \u003ccode\u003eobj.hasOwnProperty\u003c/code\u003e when parsing (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/172\"\u003e#172\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1\"\u003ehttps://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e0.7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: parse cookies ~10% faster (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/144\"\u003e#144\u003c/a\u003e by \u003ca href=\"https://github.com/kurtextrem\"\u003e\u003ccode\u003e@​kurtextrem\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/170\"\u003e#170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: narrow the validation of cookies to match RFC6265 (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/167\"\u003e#167\u003c/a\u003e by \u003ca href=\"https://github.com/bewinsnw\"\u003e\u003ccode\u003e@​bewinsnw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: add \u003ccode\u003emain\u003c/code\u003e to \u003ccode\u003epackage.json\u003c/code\u003e for rspack (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/166\"\u003e#166\u003c/a\u003e by \u003ca href=\"https://github.com/proudparrot2\"\u003e\u003ccode\u003e@​proudparrot2\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0\"\u003ehttps://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/d19eaa1a2bb9ca43ac0951edd852ba4e88e410e0\"\u003e\u003ccode\u003ed19eaa1\u003c/code\u003e\u003c/a\u003e 0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/bc38ffd0eae716b199236dda061d0bdc74192dd3\"\u003e\u003ccode\u003ebc38ffd\u003c/code\u003e\u003c/a\u003e Fix object assignment of \u003ccode\u003ehasOwnProperty\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/177\"\u003e#177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/cf4658f492c5bd96aeaf5693c3500f8495031014\"\u003e\u003ccode\u003ecf4658f\u003c/code\u003e\u003c/a\u003e 0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/6a8b8f5a49af7897b98ebfb29a1c4955afa3d33e\"\u003e\u003ccode\u003e6a8b8f5\u003c/code\u003e\u003c/a\u003e Allow leading dot for domain (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/174\"\u003e#174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/58015c0b93de0b63db245cfdc5a108e511a81ad0\"\u003e\u003ccode\u003e58015c0\u003c/code\u003e\u003c/a\u003e Remove more code and perf wins (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/172\"\u003e#172\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/ab057d6c06b94a7b1e3358e69a685ae49c97b627\"\u003e\u003ccode\u003eab057d6\u003c/code\u003e\u003c/a\u003e 0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/5f02ca87688481dbcf155e49ca8b61732f30e542\"\u003e\u003ccode\u003e5f02ca8\u003c/code\u003e\u003c/a\u003e Migrate history to GitHub releases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/a5d591ce8447dd63821779724f96ad3c774c8579\"\u003e\u003ccode\u003ea5d591c\u003c/code\u003e\u003c/a\u003e Migrate history to GitHub releases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/51968f94b5e820adeceef505539fa193ffe2d105\"\u003e\u003ccode\u003e51968f9\u003c/code\u003e\u003c/a\u003e Skip isNaN\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/9e7ca51ade4b325307eedd6b4dec190983e9e2cc\"\u003e\u003ccode\u003e9e7ca51\u003c/code\u003e\u003c/a\u003e perf(parse): cache length, return early (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/144\"\u003e#144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~blakeembrey\"\u003eblakeembrey\u003c/a\u003e, a new releaser for cookie since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.1 to 3.4.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/e6f5ca700c4ca8104a6a83472c8219e267bd5e84\"\u003e\u003ccode\u003ee6f5ca7\u003c/code\u003e\u003c/a\u003e 3.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/47f14fac0b1a41989f216b0cda4c50596ca339f6\"\u003e\u003ccode\u003e47f14fa\u003c/code\u003e\u003c/a\u003e removed E_STRICT from PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/40505688464c49fe6374e7bc4cdd9bd2e9e6f330\"\u003e\u003ccode\u003e4050568\u003c/code\u003e\u003c/a\u003e fixced go-lang issues in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/4303f4db38ba0ba8d5e2ed6e9689cefc74c46b63\"\u003e\u003ccode\u003e4303f4d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/101\"\u003e#101\u003c/a\u003e from mfinelli/gocriticfixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/106735b609c15df51539a0d7c0a270182efd904c\"\u003e\u003ccode\u003e106735b\u003c/code\u003e\u003c/a\u003e updated package-lock.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/670a1bdf9dcfba02111c3034294366f10696fb53\"\u003e\u003ccode\u003e670a1bd\u003c/code\u003e\u003c/a\u003e 3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/50a61a90ea5ca64c114f0aa040ad127e3a97feff\"\u003e\u003ccode\u003e50a61a9\u003c/code\u003e\u003c/a\u003e Fix \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/104\"\u003e#104\u003c/a\u003e - allow \u003ccode\u003enull\u003c/code\u003e as replacer value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/8aa64f460cf0c4dac9cc214c831aade28f8f2c6e\"\u003e\u003ccode\u003e8aa64f4\u003c/code\u003e\u003c/a\u003e solved crytical errors over dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b85577f39ff85959d02e8862cc0dde8114b43762\"\u003e\u003ccode\u003eb85577f\u003c/code\u003e\u003c/a\u003e Fix go-critic errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/bb8c63cea5befd4315519cb4458c6fc07bb9cf7b\"\u003e\u003ccode\u003ebb8c63c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/100\"\u003e#100\u003c/a\u003e from WebReflection/WebReflection-patch-1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.15.6 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/0c23a223067201c368035e82954c11eb2578a33b\"\u003e\u003ccode\u003e0c23a22\u003c/code\u003e\u003c/a\u003e Release version 1.16.0 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/844c4d302ac963d29bdb5dc1754ec7df3d70d7f9\"\u003e\u003ccode\u003e844c4d3\u003c/code\u003e\u003c/a\u003e Add sensitiveHeaders option.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/5e8b8d024e2c76f804a284258e585ecb49a575be\"\u003e\u003ccode\u003e5e8b8d0\u003c/code\u003e\u003c/a\u003e ci: add Node.js 24.x to the CI matrix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/7953e2255aa0b93602eed3804f3bc5e6923a03af\"\u003e\u003ccode\u003e7953e22\u003c/code\u003e\u003c/a\u003e ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/86dc1f86e4b56bcd642c78384d51f10f123aea75\"\u003e\u003ccode\u003e86dc1f8\u003c/code\u003e\u003c/a\u003e Sanitizing input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/21ef28a544c5e57f4c34b8476d75f2144609a1eb\"\u003e\u003ccode\u003e21ef28a\u003c/code\u003e\u003c/a\u003e Release version 1.15.11 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/7c88135da3bd0681a7e156ee66b16b2f6f98b480\"\u003e\u003ccode\u003e7c88135\u003c/code\u003e\u003c/a\u003e Roll back tree shaking.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.0 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.4...v4.0.5\"\u003ev4.0.5\u003c/a\u003e - 2025-11-17\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Tests] Switch to newer v8 prediction library; enable node 24 testing \u003ca href=\"https://github.com/form-data/form-data/commit/16e00765342106876f98a1c9703314006c9e937a\"\u003e\u003ccode\u003e16e0076\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/5822467f0ec21f6ad613c1c90856375e498793c7\"\u003e\u003ccode\u003e5822467\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] set Symbol.toStringTag in the proper place \u003ca href=\"https://github.com/form-data/form-data/commit/76d0dee43933b5e167f7f09e5d9cbbd1cf911aa7\"\u003e\u003ccode\u003e76d0dee\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4\"\u003ev4.0.4\u003c/a\u003e - 2025-07-16\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[meta] add \u003ccode\u003eauto-changelog\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479\"\u003e\u003ccode\u003e811f682\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] handle predict-v8-randomness failures in node \u0026lt; 17 and node \u0026gt; 23 \u003ca href=\"https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402\"\u003e\u003ccode\u003e1d11a76\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] Switch to using \u003ccode\u003ecrypto\u003c/code\u003e random for boundary values \u003ca href=\"https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0\"\u003e\u003ccode\u003e3d17230\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] fix linting errors \u003ca href=\"https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a\"\u003e\u003ccode\u003e5e34080\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] actually ensure the readme backup isn’t published \u003ca href=\"https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef\"\u003e\u003ccode\u003e316c82b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d\"\u003e\u003ccode\u003e58c25d7\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] fix readme capitalization \u003ca href=\"https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61\"\u003e\u003ccode\u003e2300ca1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3\"\u003ev4.0.3\u003c/a\u003e - 2025-06-05\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eappend\u003c/code\u003e: avoid a crash on nullish values \u003ca href=\"https://redirect.github.com/form-data/form-data/issues/577\"\u003e\u003ccode\u003e[#577](https://github.com/form-data/form-data/issues/577)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[eslint] use a shared config \u003ca href=\"https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f\"\u003e\u003ccode\u003e426ba9a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[eslint] fix some spacing issues \u003ca href=\"https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939\"\u003e\u003ccode\u003e2094191\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003ehasown\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa\"\u003e\u003ccode\u003e81ab41b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] validate boundary type in \u003ccode\u003esetBoundary()\u003c/code\u003e method \u003ca href=\"https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e\"\u003e\u003ccode\u003e8d8e469\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add tests to check the behavior of \u003ccode\u003egetBoundary\u003c/code\u003e with non-strings \u003ca href=\"https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995\"\u003e\u003ccode\u003e837b8a1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] remove unused deps \u003ca href=\"https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e\"\u003e\u003ccode\u003e870e4e6\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] remove local commit hooks \u003ca href=\"https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e\"\u003e\u003ccode\u003ee6e83cc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916\"\u003e\u003ccode\u003e4066fd6\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] fix scripts to use prepublishOnly \u003ca href=\"https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75\"\u003e\u003ccode\u003ec4bbb13\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2\"\u003ev4.0.2\u003c/a\u003e - 2025-02-14\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/68ff7dda8834d6de095a7008cef0e03bc252ca98\"\u003e\u003ccode\u003e68ff7dd\u003c/code\u003e\u003c/a\u003e v4.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/5822467f0ec21f6ad613c1c90856375e498793c7\"\u003e\u003ccode\u003e5822467\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/76d0dee43933b5e167f7f09e5d9cbbd1cf911aa7\"\u003e\u003ccode\u003e76d0dee\u003c/code\u003e\u003c/a\u003e [Fix] set Symbol.toStringTag in the proper place\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/16e00765342106876f98a1c9703314006c9e937a\"\u003e\u003ccode\u003e16e0076\u003c/code\u003e\u003c/a\u003e [Tests] Switch to newer v8 prediction library; enable node 24 testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad\"\u003e\u003ccode\u003e41996f5\u003c/code\u003e\u003c/a\u003e v4.0.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.c...\n\n_Description has been truncated_\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nBumps 13 npm dependencies in the `npm_and_yarn` group, including major-version jumps for `axios` (1.7.7 → 1.20.0) and `send` (0.18.0 → 1.2.1), plus security fixes in `js-yaml`, `brace-expansion`, `minimatch`, `cookie`, `form-data`, `browserslist`, and `follow-redirects`.\n\n**Migration**\n- `axios` 1.20.0 adds `ContentTooLarge` (413) and `UnprocessableContent` (422) status names; `PayloadTooLarge` and `UnprocessableEntity` remain as deprecated aliases.\n- `send` jumps from 0.18.0 to 1.2.1 — verify static file serving still works as expected.\n\n\u003csup\u003eWritten for commit f801b428a4e2546db68fb4058c6249bbe3d1ed3e. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/theplenkov-forks/cds-types/pull/2?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/theplenkov-forks/cds-types/2?returnTo=https%3A%2F%2Fgithub.com%2Ftheplenkov-forks%2Fcds-types%2Fpull%2F2\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/theplenkov-forks/cds-types/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/theplenkov-forks%2Fcds-types/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5786425102","node_id":"PR_kwDOSmIp1c8AAAABHooWGA","number":18,"state":"open","title":"Bump axios from 1.16.0 to 1.20.0 in /build-system/tasks/e2e","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T00:31:24.000Z","updated_at":"2026-10-10T00:32:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.16.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/build-system/tasks/e2e","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.16.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.16.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/amphtml/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/amphtml/18)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/amphtml/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Famphtml/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"}],"issue_packages":[{"old_version":"1.13.5","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T04:13:54.000Z","version_change":"1.13.5 → 1.20.0","issue":{"uuid":"5906038794","node_id":"PR_kwDOLHSps88AAAABJHAMiw","number":256,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T04:13:54.000Z","updated_at":"2026-10-18T04:14:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":22,"packages":[{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@swc/html","old_version":"1.13.19","new_version":"1.16.18","repository_url":"https://github.com/swc-project/swc"},{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.13","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"qs","old_version":"6.13.0","new_version":"6.14.0","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.0.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"image-size","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/image-size/image-size"},{"name":"joi","old_version":"17.13.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"launch-editor","old_version":"2.13.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"sprintf-js","old_version":"1.0.3","new_version":"removed","repository_url":"https://github.com/alexei/sprintf.js"},{"name":"svgo","old_version":"3.3.3","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.13","repository_url":"https://github.com/websockets/ws"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 22 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@swc/html](https://github.com/swc-project/swc/tree/HEAD/packages/html) | `1.13.19` | `1.16.18` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.13` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.3` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [image-size](https://github.com/image-size/image-size) | `2.0.2` | `2.0.4` |\n| [joi](https://github.com/hapijs/joi) | `17.13.3` | `17.13.8` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [sprintf-js](https://github.com/alexei/sprintf.js) | `1.0.3` | `removed` |\n| [svgo](https://github.com/svg/svgo) | `3.3.3` | `3.3.5` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@swc/html` from 1.13.19 to 1.16.18\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swc-project/swc/blob/main/CHANGELOG.md\"\u003e@​swc/html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.18] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a safe cache root on Unix (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12500\"\u003e#12500\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2125403ad6c5cb7b8329852f5f84b797ede99146\"\u003e2125403\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/minifier)\u003c/strong\u003e Check decl for side effect (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12501\"\u003e#12501\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6841927dd3b72b51b7deaa238d88df9ce0f3fb9f\"\u003e6841927\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.17] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a secure Windows profile cache (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12452\"\u003e#12452\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2c0fb896611f5b9d462886db9d8089813a99a4a6\"\u003e2c0fb89\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Allow opting out of Unix cache root security checks (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12469\"\u003e#12469\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/e87fa401933d6c27e5b14f26d9c3381cccc53cdc\"\u003ee87fa40\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Run main CodSpeed benchmarks after policy skips (\u003ca href=\"https://github.com/swc-project/swc/commit/1b6d869ec415609664a06150df8ec4d614fdb3f8\"\u003e1b6d869\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Match Rust's z10 baseline in s390x release builds (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12489\"\u003e#12489\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/b96f92fa6ddafac71133185c7c760855f27b6ed6\"\u003eb96f92f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Raise native addon MSRV to Rust 1.85 (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12491\"\u003e#12491\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/54a232401c81a3c97851128b92904b5b0308c4b4\"\u003e54a2324\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Repair empty crate release changeset (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12499\"\u003e#12499\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6bf5f8cf38e005fd03c2a4bc49d9021432033695\"\u003e6bf5f8c\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(cli)\u003c/strong\u003e Resolve out-dir source map paths relative to output (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12481\"\u003e#12481\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/717914f88f4f19caa1dd93e971628acb4bd608d1\"\u003e717914f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(deps)\u003c/strong\u003e Update cargo (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/10278\"\u003e#10278\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/fc7a9e2c159409d97ae0647534a9b9cdefb6eaed\"\u003efc7a9e2\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/compat)\u003c/strong\u003e Preserve consecutive loop labels (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12472\"\u003e#12472\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/28c33708dc691a64358255b5aec02f1c7eb62cdf\"\u003e28c3370\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/estree)\u003c/strong\u003e Fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/898b5926d17b86e14262437b90ca37b043adecda\"\u003e898b592\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBREAKING\u003c/strong\u003e: fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/fixer)\u003c/strong\u003e Preserve parentheses in JSX sequence expressions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12485\"\u003e#12485\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/7a36735f5636e5880cc4030d3b916dd19cedeb9b\"\u003e7a36735\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/63ced3ba33a9c31737ad056b39c9a8cdb4fcc486\"\u003e\u003ccode\u003e63ced3b\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/ff4257e08f565ef3dea4219a1f9d148c15d7496f\"\u003e\u003ccode\u003eff4257e\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d2bfb947435b19f82532cea721f12fb950ccde7a\"\u003e\u003ccode\u003ed2bfb94\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/52746278c3e2566264370ea072076fad91eadbaf\"\u003e\u003ccode\u003e5274627\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/f8269e6342753d1d859dcf8d932e1bbe2c8592ef\"\u003e\u003ccode\u003ef8269e6\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.16-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/3e034f2b1897174e6d6c53fb9fae6b8cefd717ed\"\u003e\u003ccode\u003e3e034f2\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.15-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d6b897c58d250c4088dbd842d0e8fd318515eb7c\"\u003e\u003ccode\u003ed6b897c\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.14-nightly-20261006.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1391a346e1ba8ef0cbaaa7c1b90c391ad6d150c5\"\u003e\u003ccode\u003e1391a34\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/a006b7fabd19b909c803822360c217706313acbb\"\u003e\u003ccode\u003ea006b7f\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13-nightly-20260930.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1b2c264916cb664d259113717851275fb6b01620\"\u003e\u003ccode\u003e1b2c264\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.12\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swc-project/swc/commits/v1.16.18/packages/html\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.13 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.13.0 to 6.14.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003ethrowOnParameterLimitExceeded\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/517\"\u003e#517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e[patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e[actions] use shared action; re-add finishers\u003c/li\u003e\n\u003cli\u003e[meta] Fix changelog formatting bug\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e, \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cp\u003e[Fix] fix regressions from robustness refactor\n[actions] update reusable workflows\u003c/p\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: avoid a crash when a \u003ccode\u003efilter\u003c/code\u003e key is \u003ccode\u003enull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils.merge\u003c/code\u003e: functions should not be stringified into keys\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ensure a non-string \u003ccode\u003efilter\u003c/code\u003e does not crash\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003e__proto__\u003c/code\u003e syntax instead of \u003ccode\u003eObject.create\u003c/code\u003e for null objects\u003c/li\u003e\n\u003cli\u003e[Refactor] misc cleanup\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils.merge\u003c/code\u003e: add some coverage\u003c/li\u003e\n\u003cli\u003e[Tests] fix a test case\u003c/li\u003e\n\u003cli\u003e[actions] split out node 10-20, and 20+\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003eobject-inspect\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/32dcc637f90be175c0d4617b429263115a87e3a8\"\u003e\u003ccode\u003e32dcc63\u003c/code\u003e\u003c/a\u003e v6.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4ec582b07a411f49b3192ea92562e2ad503a4dc0\"\u003e\u003ccode\u003e4ec582b\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/a240c52c7c48d3ead6bd77c5bc3b1275bab252fc\"\u003e\u003ccode\u003ea240c52\u003c/code\u003e\u003c/a\u003e [Tests] increase coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/25956a73e8cf56d445b0972cc3d9d16eb0958435\"\u003e\u003ccode\u003e25956a7\u003c/code\u003e\u003c/a\u003e [Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b189ed49c8dfe5b41afe6cecabdaa562de56764b\"\u003e\u003ccode\u003eb189ed4\u003c/code\u003e\u003c/a\u003e [patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/1d590de5eb325a6ea332812b260c024e6a58ab8c\"\u003e\u003ccode\u003e1d590de\u003c/code\u003e\u003c/a\u003e [actions] simplify finisher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/6cd60a59aae428123d45810996f4ac6b2c4e5c52\"\u003e\u003ccode\u003e6cd60a5\u003c/code\u003e\u003c/a\u003e [actions] use shared action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/89edfd25f9598b5ccfe7eec9c4c184d5e8854ee2\"\u003e\u003ccode\u003e89edfd2\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e26e7a8946b507c9445e08de04ee1b95c8eb6693\"\u003e\u003ccode\u003ee26e7a8\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51fdc98d72cbfb33f5bab9da1eb8d511b3160249\"\u003e\u003ccode\u003e51fdc98\u003c/code\u003e\u003c/a\u003e [actions] re-add finishers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.13.0...v6.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.0.3 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github...\n\n_Description has been truncated_","html_url":"https://github.com/2000Arion/gsc-docs/pull/256","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/2000Arion%2Fgsc-docs/issues/256","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/256/packages"}},{"old_version":"1.19.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T20:21:36.000Z","version_change":"1.19.0 → 1.20.0","issue":{"uuid":"5902711374","node_id":"PR_kwDOQGACbs8AAAABJEc85A","number":55,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T21:26:04.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T20:21:36.000Z","updated_at":"2026-10-17T21:26:07.000Z","time_to_close":3868,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.35.3","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"js-yaml","old_version":"3.15.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.24.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-copy","old_version":"4.0.2","new_version":"4.2.0","repository_url":"https://github.com/planttheidea/fast-copy"},{"name":"fast-uri","old_version":"3.1.7","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"ip-address","old_version":"10.5.0","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.15.1` | `3.15.2` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `5.0.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.24.2` | `4.29.3` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-copy](https://github.com/planttheidea/fast-copy) | `4.0.2` | `4.2.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.7` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.4` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `sharp` from 0.35.3 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.3...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.15.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/mocker` from 4.1.10 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099\"\u003e\u003ccode\u003ef341015\u003c/code\u003e\u003c/a\u003e 5.0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\"\u003e\u003ccode\u003e33a5ef1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568\"\u003e\u003ccode\u003e8247927\u003c/code\u003e\u003c/a\u003e 5.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c\"\u003e\u003ccode\u003e935d78f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f\"\u003e\u003ccode\u003edf7682f\u003c/code\u003e\u003c/a\u003e 5.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02\"\u003e\u003ccode\u003e1ade9de\u003c/code\u003e\u003c/a\u003e npm run format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3\"\u003e\u003ccode\u003e6735c94\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18\"\u003e\u003ccode\u003e4e70465\u003c/code\u003e\u003c/a\u003e chore: ensure prettier formatting (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/154\"\u003e#154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff\"\u003e\u003ccode\u003efd7a5e3\u003c/code\u003e\u003c/a\u003e Bump ip-address from 10.2.0 to 10.4.0 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4\"\u003e\u003ccode\u003e1790143\u003c/code\u003e\u003c/a\u003e Bump uuid and \u003ccode\u003e@​tapjs/processinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.24.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.24.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-copy` from 4.0.2 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/releases\"\u003efast-copy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd test cases requested from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/152\"\u003e#152\u003c/a\u003e) (721c4a1)\u003c/li\u003e\n\u003cli\u003ePreserve own \u003cstrong\u003eproto\u003c/strong\u003e properties when copying objects (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e) (3606924)\u003c/li\u003e\n\u003cli\u003eupdate CHANGELOG (0315cda)\u003c/li\u003e\n\u003cli\u003e[Documentaion] Loose array copies do not maintain sparseness (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/151\"\u003e#151\u003c/a\u003e) (fca2350)\u003c/li\u003e\n\u003cli\u003e[Cleanup] Test suite cleanup from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e (cac4371)\u003c/li\u003e\n\u003cli\u003efix: preserve Date own properties in strict copies (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e) (ec1ff4f)\u003c/li\u003e\n\u003cli\u003eHandle non-function prototype constructors when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/146\"\u003e#146\u003c/a\u003e) (07333a5)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.7.0 to 10.7.3 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/145\"\u003e#145\u003c/a\u003e) (0851ef5)\u003c/li\u003e\n\u003cli\u003eBump serialize-javascript from 7.1.1 to 7.1.2 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/144\"\u003e#144\u003c/a\u003e) (87936ba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate CHANGELOG (2c19569)\u003c/li\u003e\n\u003cli\u003e[Bugfix] Preserve DataView byte offset and length when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/143\"\u003e#143\u003c/a\u003e) (851526c)\u003c/li\u003e\n\u003cli\u003edocs: correct strict and recursive copier examples (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/142\"\u003e#142\u003c/a\u003e) (3b447e0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Bugfix] Audit for edge-case gaps (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/141\"\u003e#141\u003c/a\u003e) (decb094)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/140\"\u003e#140\u003c/a\u003e) (74edf81)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Security] Unbounded recursion on deep instances (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/137\"\u003e#137\u003c/a\u003e) (caa7caa)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Enhancement] Micro-optimizations (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/136\"\u003e#136\u003c/a\u003e) (ceb5366)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/135\"\u003e#135\u003c/a\u003e) (949215c)\u003c/li\u003e\n\u003cli\u003eBump the npm_and_yarn group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/134\"\u003e#134\u003c/a\u003e) (5acb8f5)\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.2 to 7.3.5 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/133\"\u003e#133\u003c/a\u003e) (572108e)\u003c/li\u003e\n\u003cli\u003eBump postcss from 8.5.9 to 8.5.14 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/132\"\u003e#132\u003c/a\u003e) (e82e93c)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.1.0 to 10.2.0 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/131\"\u003e#131\u003c/a\u003e) (c0a0a45)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Issue 128] Incorrect bigint arrays (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/130\"\u003e#130\u003c/a\u003e) (61cf3b2)\u003c/li\u003e\n\u003cli\u003eremove blurb about copying generators (91f692f)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/blob/main/CHANGELOG.md\"\u003efast-copy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/150\"\u003e#150\u003c/a\u003e - Preserve own \u003ccode\u003eDate\u003c/code\u003e properties in \u003ccode\u003estrict\u003c/code\u003e mode (thanks\n\u003ca href=\"https://github.com/xiehuanyi\"\u003e\u003ccode\u003e@​xiehuanyi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/146\"\u003e#146\u003c/a\u003e - Ensure \u003ccode\u003eConstructor\u003c/code\u003e is a function before performing\nnative code check, preventing edge case throw condition (thanks \u003ca href=\"https://github.com/fhgffy\"\u003e\u003ccode\u003e@​fhgffy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/147\"\u003e#147\u003c/a\u003e - Preserve own \u003ccode\u003e__proto__\u003c/code\u003e properties when copying objects\n(thanks \u003ca href=\"https://github.com/feritcemkahraman\"\u003e\u003ccode\u003e@​feritcemkahraman\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/143\"\u003e#143\u003c/a\u003e - Preserve the \u003ccode\u003ebyteOffset\u003c/code\u003e and \u003ccode\u003ebyteLength\u003c/code\u003e of a copied\n\u003ccode\u003eDataView\u003c/code\u003e. The copy previously covered the entire backing buffer, so a view over part of a buffer read from the wrong\nposition, and reads beyond its original bounds no longer threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/pralav-25\"\u003e\u003ccode\u003e@​pralav-25\u003c/code\u003e\u003c/a\u003e for identifying and fixing this.\u003c/p\u003e\n\u003ch2\u003e4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Copy the contents of a \u003ccode\u003eBuffer\u003c/code\u003e into memory it owns,\ninstead of returning a view over the original's memory. \u003ccode\u003eBuffer\u003c/code\u003e overrides \u003ccode\u003eslice\u003c/code\u003e with one that does not copy, so\nmutating the copy previously mutated the original.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Use a \u003ccode\u003enull\u003c/code\u003e prototype for the internal map of\ntag-specific copiers, so that a value carrying a custom \u003ccode\u003eSymbol.toStringTag\u003c/code\u003e cannot resolve to an inherited\n\u003ccode\u003eObject.prototype\u003c/code\u003e member as its copier. Tags such as \u003ccode\u003etoString\u003c/code\u003e, \u003ccode\u003evalueOf\u003c/code\u003e, or \u003ccode\u003ehasOwnProperty\u003c/code\u003e previously produced a\ngarbage copy or threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Add \u003ccode\u003emaxDepth\u003c/code\u003e option to \u003ccode\u003ecreateCopier\u003c/code\u003e, bounding the\nnumber of nested objects traversed (defaults to \u003ccode\u003e1000\u003c/code\u003e, pass \u003ccode\u003eInfinity\u003c/code\u003e to traverse without a limit)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Throw the new \u003ccode\u003eMaxDepthExceededError\u003c/code\u003e when a value is\nnested more deeply than \u003ccode\u003emaxDepth\u003c/code\u003e, instead of exhausting the call stack with a native \u003ccode\u003eRangeError\u003c/code\u003e; the error extends\n\u003ccode\u003eRangeError\u003c/code\u003e, so existing handling continues to work\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lenny-ts\"\u003e\u003ccode\u003e@​lenny-ts\u003c/code\u003e\u003c/a\u003e for identifying this.\u003c/p\u003e\n\u003ch3\u003eInternal changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eState\u003c/code\u003e object passed to custom \u003ccode\u003emethods\u003c/code\u003e now includes a \u003ccode\u003edepth\u003c/code\u003e property. This is maintained internally and\nshould not be modified, but it is a required property on the exported \u003ccode\u003eState\u003c/code\u003e type, so any code constructing a \u003ccode\u003eState\u003c/code\u003e\ndirectly (such as a test mock) will need to provide it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/commit/5c4e3acd3189d7919bcfd4bcf0041e0174cc31ff\"\u003e\u003ccode\u003e5c4e3ac\u003c/code\u003e\u003c/a\u003e Release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/comm...\n\n_Description has been truncated_","html_url":"https://github.com/xavisavvy/toa-website/pull/55","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xavisavvy%2Ftoa-website/issues/55","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/55/packages"}},{"old_version":"1.19.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T16:44:46.000Z","version_change":"1.19.0 → 1.20.0","issue":{"uuid":"5900723627","node_id":"PR_kwDOQsOEzM8AAAABJC6UUw","number":157,"state":"open","title":"chore(deps): bump the dependencies group across 1 directory with 18 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-17T16:44:46.000Z","updated_at":"2026-10-17T16:45:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"dependencies","update_count":18,"packages":[{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"dotenv","old_version":"17.4.2","new_version":"18.0.8","repository_url":"https://github.com/motdotla/dotenv"},{"name":"express","old_version":"5.2.1","new_version":"5.3.0","repository_url":"https://github.com/expressjs/express"},{"name":"nanoid","old_version":"6.0.1","new_version":"6.0.2","repository_url":"https://github.com/ai/nanoid"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"@apify/actor-memory-expression","old_version":"0.2.11","new_version":"1.0.1","repository_url":"https://github.com/apify/apify-shared-js"},{"name":"@apify/input_secrets","old_version":"1.2.55","new_version":"2.0.6","repository_url":"https://github.com/apify/apify-shared-js"},{"name":"@types/node","old_version":"26.2.0","new_version":"26.6.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"apify-cli","old_version":"1.8.0","new_version":"1.10.0","repository_url":"https://github.com/apify/apify-cli"},{"name":"eslint","old_version":"10.8.1","new_version":"10.12.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-plugin-sonarjs","old_version":"4.2.0","new_version":"4.2.2","repository_url":"https://github.com/SonarSource/SonarJS"},{"name":"eventsource","old_version":"5.1.0","new_version":"5.1.3","repository_url":"https://github.com/EventSource/eventsource"},{"name":"globals","old_version":"17.11.0","new_version":"17.13.0","repository_url":"https://github.com/sindresorhus/globals"},{"name":"jest","old_version":"30.4.2","new_version":"30.5.2","repository_url":"https://github.com/jestjs/jest"},{"name":"lint-staged","old_version":"17.3.0","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.10","repository_url":"https://github.com/prettier/prettier"},{"name":"supertest","old_version":"7.2.2","new_version":"7.3.1","repository_url":"https://github.com/ladjs/supertest"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 18 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.8` |\n| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |\n| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [@apify/actor-memory-expression](https://github.com/apify/apify-shared-js) | `0.2.11` | `1.0.1` |\n| [@apify/input_secrets](https://github.com/apify/apify-shared-js) | `1.2.55` | `2.0.6` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.5` |\n| [apify-cli](https://github.com/apify/apify-cli) | `1.8.0` | `1.10.0` |\n| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.12.0` |\n| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.2` |\n| [eventsource](https://github.com/EventSource/eventsource) | `5.1.0` | `5.1.3` |\n| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` |\n| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.2` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.6.0` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |\n| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |\n\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dotenv` from 17.4.2 to 18.0.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md\"\u003edotenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.7...v18.0.8\"\u003e18.0.8\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFast parser should strip appended extra quotes (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1073\"\u003e#1073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eType detail improvement (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1074\"\u003e#1074\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7\"\u003e18.0.7\u003c/a\u003e (2026-10-09)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat undefined settings like \u003ccode\u003equiet: true\u003c/code\u003e as null rather than falsey (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1070\"\u003e#1070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCLI should honor \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting in \u003ccode\u003e.env\u003c/code\u003e file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.5...v18.0.6\"\u003e18.0.6\u003c/a\u003e (2026-10-06)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse smarter \u003ccode\u003eparseBoolean\u003c/code\u003e not Boolean() to fix override (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1069\"\u003e#1069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.4...v18.0.5\"\u003e18.0.5\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing typescript module declaration (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1068\"\u003e#1068\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance for large .env files (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1066\"\u003e#1066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.3...v18.0.4\"\u003e18.0.4\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport dotenv/config\u003c/code\u003e should default quiet: true (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1063\"\u003e#1063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.2...v18.0.3\"\u003e18.0.3\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting when inside .env file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1059\"\u003e#1059\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.1...v18.0.2\"\u003e18.0.2\u003c/a\u003e (2026-09-21)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch additional edge cases for the fast parser (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1056\"\u003e#1056\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.0...v18.0.1\"\u003e18.0.1\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle file urls in config logging (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/e2fe95e8e952e881787d8207b654c80326f821d8\"\u003e\u003ccode\u003ee2fe95e\u003c/code\u003e\u003c/a\u003e 18.0.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/7aa712ab2914c0cf128ea8ccdaf5e918a867db59\"\u003e\u003ccode\u003e7aa712a\u003c/code\u003e\u003c/a\u003e type detail improvement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/53405b0b140debc002e41c5abb671d5da5f3e8f9\"\u003e\u003ccode\u003e53405b0\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1074\"\u003e#1074\u003c/a\u003e from himanshu748/codex/fix-dotenv-populate-undefined...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/0b4843a90d6d70b110d1f1a309f209c3d8d7cb6e\"\u003e\u003ccode\u003e0b4843a\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/55855ab6bffb017ca94cb273704c055f2d977c57\"\u003e\u003ccode\u003e55855ab\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1073\"\u003e#1073\u003c/a\u003e from xiehuanyi/fix/unicode-unquoting-parity\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/f7578114202cf0b8df31775225a9233ead6b2a80\"\u003e\u003ccode\u003ef757811\u003c/code\u003e\u003c/a\u003e fix(types): allow undefined values in populate output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/fde5db2bca73438a013ee8837b021a436e65dac7\"\u003e\u003ccode\u003efde5db2\u003c/code\u003e\u003c/a\u003e Keep fast-parser unquoting consistent at Unicode line boundaries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/295320751866efa323236c719cdc1b5306fa3de7\"\u003e\u003ccode\u003e2953207\u003c/code\u003e\u003c/a\u003e 18.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9944723d89e6f776897f171bfc6b945dfad23c57\"\u003e\u003ccode\u003e9944723\u003c/code\u003e\u003c/a\u003e make more readable for undefined -\u0026gt; null\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/d455db06a7b37acd8b240793a888efaba75885f4\"\u003e\u003ccode\u003ed455db0\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:motdotla/dotenv\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `express` from 5.2.1 to 5.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/express/releases\"\u003eexpress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003e🐞 Bug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by \u003ca href=\"https://github.com/YuryShkoda\"\u003e\u003ccode\u003e@​YuryShkoda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/4893\"\u003e#4893\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFixed the behavior of \u003ccode\u003eres.send()\u003c/code\u003e to prevent conflicts between \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e HTTP headers in responses. The \u003ccode\u003eContent-Length\u003c/code\u003e header in \u003ccode\u003eres.send()\u003c/code\u003e is now only added when a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header - by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7459\"\u003e#7459\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eqs\u003c/code\u003e to \u003ccode\u003e^6.16.0\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-2391\"\u003eCVE-2026-2391\u003c/a\u003e (\u003ca href=\"https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883\"\u003eGHSA-w7fw-mjwx-w883\u003c/a\u003e), \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82417\"\u003eCVE-2026-82417\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-4mjr-xmp4-gh2g\"\u003eGHSA-4mjr-xmp4-gh2g\u003c/a\u003e) and \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82562\"\u003eCVE-2026-82562\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-x5fp-wj9c-mxmx\"\u003eGHSA-x5fp-wj9c-mxmx\u003c/a\u003e): \u003ccode\u003earrayLimit\u003c/code\u003e bypasses in comma parsing and a denial of service via an attacker-controlled \u003ccode\u003eisBuffer\u003c/code\u003e - by \u003ca href=\"https://github.com/davetashner\"\u003e\u003ccode\u003e@​davetashner\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7057\"\u003e#7057\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7478\"\u003e#7478\u003c/a\u003e, and \u003ca href=\"https://github.com/cyphercodes\"\u003e\u003ccode\u003e@​cyphercodes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7305\"\u003e#7305\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eproxy-addr\u003c/code\u003e to \u003ccode\u003e^2.0.8\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e - by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7474\"\u003e#7474\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🚀 Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow conditional revalidation for QUERY requests. \u003ccode\u003ereq.fresh\u003c/code\u003e previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7366\"\u003e#7366\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// QUERY /reports with If-None-Match: \u0026quot;12345\u0026quot;\r\napp.query('/reports', (req, res) =\u0026gt; {\r\n  res.set('ETag', '\u0026quot;12345\u0026quot;');\r\n  res.send(results); // now responds 304 Not Modified\r\n});\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove HTML structure in \u003ccode\u003eres.redirect()\u003c/code\u003e responses when HTML format is accepted by adding \u003ccode\u003e\u0026lt;!DOCTYPE html\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;title\u0026gt;\u003c/code\u003e, and \u003ccode\u003e\u0026lt;body\u0026gt;\u003c/code\u003e tags for better browser compatibility - by \u003ca href=\"https://github.com/Bernice55231\"\u003e\u003ccode\u003e@​Bernice55231\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/5167\"\u003e#5167\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWhen calling \u003ccode\u003eapp.render\u003c/code\u003e with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by \u003ca href=\"https://github.com/AkaHarshit\"\u003eAkaHarshit\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6903\"\u003e#6903\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eapp.render('index', null, callback); // now works as expected\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-type\u003c/code\u003e to \u003ccode\u003e^2.0.0\u003c/code\u003e, bringing a faster parser (~1.5x quicker \u003ccode\u003eContent-Type\u003c/code\u003e parsing/formatting in \u003ccode\u003eres.send()\u003c/code\u003e) along with a behavior change: \u003ccode\u003eres.send()\u003c/code\u003e now keeps any existing parameters when adding the charset and no longer throws on a \u003ccode\u003eContent-Type\u003c/code\u003e that fails to parse. \u003ccode\u003etype-is\u003c/code\u003e is upgraded to \u003ccode\u003e^2.1.0\u003c/code\u003e as part of the same change - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7234\"\u003e#7234\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.set('Content-Type', 'text/plain; foo=bar').send('hey');\r\n// -\u0026gt; Content-Type: text/plain; foo=bar; charset=utf-8\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default error handler now logs the full error object instead of only its stack trace, so nested details such as \u003ccode\u003eError.cause\u003c/code\u003e and library-specific properties (e.g. Sequelize's \u003ccode\u003eparent\u003c/code\u003e/\u003ccode\u003eoriginal\u003c/code\u003e) are no longer swallowed - by \u003ca href=\"https://github.com/Nitin-Mohapatra\"\u003e\u003ccode\u003e@​Nitin-Mohapatra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6464\"\u003e#6464\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-disposition\u003c/code\u003e to \u003ccode\u003e^2.0.1\u003c/code\u003e, which changes the \u003ccode\u003eContent-Disposition\u003c/code\u003e header emitted by \u003ccode\u003eres.download()\u003c/code\u003e, \u003ccode\u003eres.attachment()\u003c/code\u003e, and \u003ccode\u003eres.sendFile()\u003c/code\u003e: file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7233\"\u003e#7233\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.attachment('user.html');\r\n// before -\u0026gt; Content-Disposition: attachment; filename=\u0026quot;user.html\u0026quot;\r\n// after  -\u0026gt; Content-Disposition: attachment; filename=user.html\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/express/blob/master/History.md\"\u003eexpress's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e5.3.0\u003c/h1\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by \u003ca href=\"https://github.com/YuryShkoda\"\u003e\u003ccode\u003e@​YuryShkoda\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/4893\"\u003e#4893\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFixed the behavior of \u003ccode\u003eres.send()\u003c/code\u003e to prevent conflicts between \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e HTTP headers in responses. The \u003ccode\u003eContent-Length\u003c/code\u003e header in \u003ccode\u003eres.send()\u003c/code\u003e is now only added when a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a \u003ccode\u003eTransfer-Encoding\u003c/code\u003e header - by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7459\"\u003e#7459\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eqs\u003c/code\u003e to \u003ccode\u003e^6.16.0\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-2391\"\u003eCVE-2026-2391\u003c/a\u003e (\u003ca href=\"https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883\"\u003eGHSA-w7fw-mjwx-w883\u003c/a\u003e), \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82417\"\u003eCVE-2026-82417\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-4mjr-xmp4-gh2g\"\u003eGHSA-4mjr-xmp4-gh2g\u003c/a\u003e) and \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82562\"\u003eCVE-2026-82562\u003c/a\u003e (\u003ca href=\"https://github.com/advisories/GHSA-x5fp-wj9c-mxmx\"\u003eGHSA-x5fp-wj9c-mxmx\u003c/a\u003e): \u003ccode\u003earrayLimit\u003c/code\u003e bypasses in comma parsing and a denial of service via an attacker-controlled \u003ccode\u003eisBuffer\u003c/code\u003e - by \u003ca href=\"https://github.com/davetashner\"\u003e\u003ccode\u003e@​davetashner\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7057\"\u003e#7057\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7478\"\u003e#7478\u003c/a\u003e, and \u003ca href=\"https://github.com/cyphercodes\"\u003e\u003ccode\u003e@​cyphercodes\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7305\"\u003e#7305\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003eproxy-addr\u003c/code\u003e to \u003ccode\u003e^2.0.8\u003c/code\u003e, which fixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e - by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7474\"\u003e#7474\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 Improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAllow conditional revalidation for QUERY requests. \u003ccode\u003ereq.fresh\u003c/code\u003e previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by \u003ca href=\"https://github.com/Cherry\"\u003e\u003ccode\u003e@​Cherry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7366\"\u003e#7366\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// QUERY /reports with If-None-Match: \u0026quot;12345\u0026quot;\napp.query('/reports', (req, res) =\u0026gt; {\n  res.set('ETag', '\u0026quot;12345\u0026quot;');\n  res.send(results); // now responds 304 Not Modified\n});\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove HTML structure in \u003ccode\u003eres.redirect()\u003c/code\u003e responses when HTML format is accepted by adding \u003ccode\u003e\u0026lt;!DOCTYPE html\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;title\u0026gt;\u003c/code\u003e, and \u003ccode\u003e\u0026lt;body\u0026gt;\u003c/code\u003e tags for better browser compatibility - by \u003ca href=\"https://github.com/Bernice55231\"\u003e\u003ccode\u003e@​Bernice55231\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/5167\"\u003e#5167\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWhen calling \u003ccode\u003eapp.render\u003c/code\u003e with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by \u003ca href=\"https://github.com/AkaHarshit\"\u003eAkaHarshit\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6903\"\u003e#6903\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eapp.render('index', null, callback); // now works as expected\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-type\u003c/code\u003e to \u003ccode\u003e^2.0.0\u003c/code\u003e, bringing a faster parser (~1.5x quicker \u003ccode\u003eContent-Type\u003c/code\u003e parsing/formatting in \u003ccode\u003eres.send()\u003c/code\u003e) along with a behavior change: \u003ccode\u003eres.send()\u003c/code\u003e now keeps any existing parameters when adding the charset and no longer throws on a \u003ccode\u003eContent-Type\u003c/code\u003e that fails to parse. \u003ccode\u003etype-is\u003c/code\u003e is upgraded to \u003ccode\u003e^2.1.0\u003c/code\u003e as part of the same change - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7234\"\u003e#7234\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.set('Content-Type', 'text/plain; foo=bar').send('hey');\n// -\u0026gt; Content-Type: text/plain; foo=bar; charset=utf-8\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThe default error handler now logs the full error object instead of only its stack trace, so nested details such as \u003ccode\u003eError.cause\u003c/code\u003e and library-specific properties (e.g. Sequelize's \u003ccode\u003eparent\u003c/code\u003e/\u003ccode\u003eoriginal\u003c/code\u003e) are no longer swallowed - by \u003ca href=\"https://github.com/Nitin-Mohapatra\"\u003e\u003ccode\u003e@​Nitin-Mohapatra\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/6464\"\u003e#6464\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpgrade \u003ccode\u003econtent-disposition\u003c/code\u003e to \u003ccode\u003e^2.0.1\u003c/code\u003e, which changes the \u003ccode\u003eContent-Disposition\u003c/code\u003e header emitted by \u003ccode\u003eres.download()\u003c/code\u003e, \u003ccode\u003eres.attachment()\u003c/code\u003e, and \u003ccode\u003eres.sendFile()\u003c/code\u003e: file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/express/pull/7233\"\u003e#7233\u003c/a\u003e\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eres.attachment('user.html');\n// before -\u0026gt; Content-Disposition: attachment; filename=\u0026quot;user.html\u0026quot;\n// after  -\u0026gt; Content-Disposition: attachment; filename=user.html\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/cf6722bf89a86905281d9160b6482e08166b5ef0\"\u003e\u003ccode\u003ecf6722b\u003c/code\u003e\u003c/a\u003e 5.3.0 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7468\"\u003e#7468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/8c2fcfcb7d37c9c2e89363b7b86a092768c3a8a3\"\u003e\u003ccode\u003e8c2fcfc\u003c/code\u003e\u003c/a\u003e docs: fix typos and a stale API reference in lib comments (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7512\"\u003e#7512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9efc29e280018dafc1f0617f3a3d28f4e463b7be\"\u003e\u003ccode\u003e9efc29e\u003c/code\u003e\u003c/a\u003e docs: fix pass-through typos (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7509\"\u003e#7509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/2717ae3cbf2bdc3f946d22ea6a4e0b5bd438b87b\"\u003e\u003ccode\u003e2717ae3\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 3 updates (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7499\"\u003e#7499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/de777714df3fb1e81ac2d95f509c421478ab1e56\"\u003e\u003ccode\u003ede77771\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump hbs from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7500\"\u003e#7500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9169cbe1127ed1f9bc4f80a70b82c412467dd156\"\u003e\u003ccode\u003e9169cbe\u003c/code\u003e\u003c/a\u003e docs: add missing apostrophe in example (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7483\"\u003e#7483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/7ef98448f8b38099ab1ded55e458538ad47a51e7\"\u003e\u003ccode\u003e7ef9844\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump morgan from 1.12.0 to 1.12.1 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7493\"\u003e#7493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/3b7e39fe74371ddabc77fed736dd22aa71c14f5c\"\u003e\u003ccode\u003e3b7e39f\u003c/code\u003e\u003c/a\u003e deps: bump qs minimum to 6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7478\"\u003e#7478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/98bd4cd96b250d25e1672c36f49cfc743bc801e7\"\u003e\u003ccode\u003e98bd4cd\u003c/code\u003e\u003c/a\u003e deps: proxy-addr@^2.0.8 (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7474\"\u003e#7474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/express/commit/9a34acf03cb818ff3f8bc40e44176e277a25cbb9\"\u003e\u003ccode\u003e9a34acf\u003c/code\u003e\u003c/a\u003e fix(res.send): preserve ETag generation with Transfer-Encoding (\u003ca href=\"https://redirect.github.com/expressjs/express/issues/7459\"\u003e#7459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/express/compare/v5.2.1...v5.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for express since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 6.0.1 to 6.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced JS bundle size (by \u003ca href=\"https://github.com/bayandin\"\u003e\u003ccode\u003e@​bayandin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed floats in size of \u003ccode\u003ecustomRandom\u003c/code\u003e (by \u003ca href=\"https://github.com/lost-signals\"\u003e\u003ccode\u003e@​lost-signals\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed performance of \u003ccode\u003ecustomRandom\u003c/code\u003e on changes size (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/Likio3000\"\u003e\u003ccode\u003e@​Likio3000\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced JS bundle size (by \u003ca href=\"https://github.com/bayandin\"\u003e\u003ccode\u003e@​bayandin\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed floats in size of \u003ccode\u003ecustomRandom\u003c/code\u003e (by \u003ca href=\"https://github.com/lost-signals\"\u003e\u003ccode\u003e@​lost-signals\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed performance of \u003ccode\u003ecustomRandom\u003c/code\u003e on changes size (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/Likio3000\"\u003e\u003ccode\u003e@​Likio3000\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/3167e108865702c0539d8e552365ed840ac9d8d9\"\u003e\u003ccode\u003e3167e10\u003c/code\u003e\u003c/a\u003e Release 6.0.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/05057d860107d47c09f356da8347179e2ce9c23c\"\u003e\u003ccode\u003e05057d8\u003c/code\u003e\u003c/a\u003e Reduce Nano ID size to 117 bytes (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/613\"\u003e#613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/85f50f164b2bae635edaad8f63df833e7330af6a\"\u003e\u003ccode\u003e85f50f1\u003c/code\u003e\u003c/a\u003e Update size limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/0b2cec58ffd5ddc45978bf75a3bab46f53c76128\"\u003e\u003ccode\u003e0b2cec5\u003c/code\u003e\u003c/a\u003e Fix non-integer size in customRandom() (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ccb0e6ee5582eeb241ed3ea361eb98d5c5c7aea4\"\u003e\u003ccode\u003eccb0e6e\u003c/code\u003e\u003c/a\u003e fix: size customRandom's byte request from the ID length (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/612\"\u003e#612\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac313f907589482217a2f3be702b5c6a3ccc8b29\"\u003e\u003ccode\u003eac313f9\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/5a33c04974880a21d615efd2aa05b122f5fff96f\"\u003e\u003ccode\u003e5a33c04\u003c/code\u003e\u003c/a\u003e Backport changelog changes from v3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/bb68abcd59ebb86a849d634320726add6be54d47\"\u003e\u003ccode\u003ebb68abc\u003c/code\u003e\u003c/a\u003e docs: fix custom generator JSDoc examples (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/610\"\u003e#610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/57009b5eb8d757ae39bf5f4361dd30c9f23391b7\"\u003e\u003ccode\u003e57009b5\u003c/code\u003e\u003c/a\u003e Update Size Limit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/8041d7d183e41cdc06273dee8105ece52175a959\"\u003e\u003ccode\u003e8041d7d\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/6.0.1...6.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pino` from 10.3.1 to 10.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pinojs/pino/releases\"\u003epino's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd warning on incompatible formatters.level with multi-target transports by \u003ca href=\"https://github.com/lraveri\"\u003e\u003ccode\u003e@​lraveri\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2381\"\u003epinojs/pino#2381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: use TSTyche for type testing by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2376\"\u003epinojs/pino#2376\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd Sentry Native Integration Docs by \u003ca href=\"https://github.com/KyleTryon\"\u003e\u003ccode\u003e@​KyleTryon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2394\"\u003epinojs/pino#2394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add flush limitation warning for pino-pretty, fix \u003ca href=\"https://redirect.github.com/pinojs/pino/issues/1015\"\u003e#1015\u003c/a\u003e by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2402\"\u003epinojs/pino#2402\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(browser): add redaction support by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2396\"\u003epinojs/pino#2396\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: lint the type declaration file by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2408\"\u003epinojs/pino#2408\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove TSTyche config file by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2409\"\u003epinojs/pino#2409\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify multi-target formatter limitation by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2410\"\u003epinojs/pino#2410\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNo bots allowed by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2412\"\u003epinojs/pino#2412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump real-require from 0.2.0 to 1.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2414\"\u003epinojs/pino#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2418\"\u003epinojs/pino#2418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: use util.getCallSites when able to allow frozen intrinsics by \u003ca href=\"https://github.com/CarlOlson\"\u003e\u003ccode\u003e@​CarlOlson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2294\"\u003epinojs/pino#2294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate AWS Lambda reference in asynchronous docs by \u003ca href=\"https://github.com/urbanautomaton\"\u003e\u003ccode\u003e@​urbanautomaton\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2413\"\u003epinojs/pino#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: update license by \u003ca href=\"https://github.com/Tony133\"\u003e\u003ccode\u003e@​Tony133\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2375\"\u003epinojs/pino#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add named \u003ccode\u003edefault\u003c/code\u003e export by \u003ca href=\"https://github.com/mrazauskas\"\u003e\u003ccode\u003e@​mrazauskas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2421\"\u003epinojs/pino#2421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate contrib doc by \u003ca href=\"https://github.com/jsumners\"\u003e\u003ccode\u003e@​jsumners\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2424\"\u003epinojs/pino#2424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use \u003ccode\u003e@​hono/structured-logger\u003c/code\u003e for Pino with Hono by \u003ca href=\"https://github.com/brunorodmoreira\"\u003e\u003ccode\u003e@​brunorodmoreira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2425\"\u003epinojs/pino#2425\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): remove \u003ccode\u003epre-commit\u003c/code\u003e by \u003ca href=\"https://github.com/kshitijanurag\"\u003e\u003ccode\u003e@​kshitijanurag\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2423\"\u003epinojs/pino#2423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/github-script from 8 to 9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2427\"\u003epinojs/pino#2427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2428\"\u003epinojs/pino#2428\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2429\"\u003epinojs/pino#2429\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix flaky transport config test by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2434\"\u003epinojs/pino#2434\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: upgrade typescript to v6.0.2 by \u003ca href=\"https://github.com/Tony133\"\u003e\u003ccode\u003e@​Tony133\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2419\"\u003epinojs/pino#2419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix typo \u0026quot;compatability\u0026quot; → \u0026quot;compatibility\u0026quot; in README by \u003ca href=\"https://github.com/premsreelathasugeendran\"\u003e\u003ccode\u003e@​premsreelathasugeendran\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2435\"\u003epinojs/pino#2435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: warn against untrusted top-level log keys by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2450\"\u003epinojs/pino#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(transport): keep event loop alive while awaiting async flush by \u003ca href=\"https://github.com/YBJ0000\"\u003e\u003ccode\u003e@​YBJ0000\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2470\"\u003epinojs/pino#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify Node.js version support policy in LTS doc by \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2472\"\u003epinojs/pino#2472\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor per-target level filter on single-element \u003ccode\u003etargets\u003c/code\u003e array by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2432\"\u003epinojs/pino#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(multistream): resolve string level labels in write() by \u003ca href=\"https://github.com/xianjianlf2\"\u003e\u003ccode\u003e@​xianjianlf2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2474\"\u003epinojs/pino#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: escape child binding keys by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2452\"\u003epinojs/pino#2452\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: clarify stringification limits by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2475\"\u003epinojs/pino#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add setBindings to the browser logger by \u003ca href=\"https://github.com/ankit1324\"\u003e\u003ccode\u003e@​ankit1324\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2471\"\u003epinojs/pino#2471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2486\"\u003epinojs/pino#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump through2 from 4.0.2 to 5.0.10 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2488\"\u003epinojs/pino#2488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump bole from 5.0.29 to 6.0.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2489\"\u003epinojs/pino#2489\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2492\"\u003epinojs/pino#2492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.2 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2485\"\u003epinojs/pino#2485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: log objects with an own \u003cstrong\u003eproto\u003c/strong\u003e key instead of crashing by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2457\"\u003epinojs/pino#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: build the redaction shape without Object.prototype by \u003ca href=\"https://github.com/luantaraschi\"\u003e\u003ccode\u003e@​luantaraschi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2495\"\u003epinojs/pino#2495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Node.js 26 to test matrix by \u003ca href=\"https://github.com/aquie00t\"\u003e\u003ccode\u003e@​aquie00t\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2480\"\u003epinojs/pino#2480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(multistream): fix clone add crash and missing end/remove methods by \u003ca href=\"https://github.com/spellsaif\"\u003e\u003ccode\u003e@​spellsaif\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2493\"\u003epinojs/pino#2493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: check pull requests target main by \u003ca href=\"https://github.com/marktran0710\"\u003e\u003ccode\u003e@​marktran0710\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2500\"\u003epinojs/pino#2500\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2513\"\u003epinojs/pino#2513\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2515\"\u003epinojs/pino#2515\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDelete .github/dependabot.yml by \u003ca href=\"https://github.com/jsumners\"\u003e\u003ccode\u003e@​jsumners\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2517\"\u003epinojs/pino#2517\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: document the APIs that are unavailable in the browser by \u003ca href=\"https://github.com/kavish-19\"\u003e\u003ccode\u003e@​kavish-19\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2521\"\u003epinojs/pino#2521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: pin lock-threads to upstream v6.0.2 to fix token validation failure by \u003ca href=\"https://github.com/simpleqt\"\u003e\u003ccode\u003e@​simpleqt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2525\"\u003epinojs/pino#2525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd bindings() method to browser logger by \u003ca href=\"https://github.com/RT1811\"\u003e\u003ccode\u003e@​RT1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pinojs/pino/pull/2504\"\u003epinojs/pino#2504\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/b29dbe97820630e7128e464c50263b427965ec99\"\u003e\u003ccode\u003eb29dbe9\u003c/code\u003e\u003c/a\u003e Bumped v10.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6ba157b1a6727399f9dc01a584d2e08d5094ea57\"\u003e\u003ccode\u003e6ba157b\u003c/code\u003e\u003c/a\u003e docs: fix the pino-pretty flush explanation after thread-stream#198 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2524\"\u003e#2524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6429c14b02ca0253a3a961cfc34ab96790d504f7\"\u003e\u003ccode\u003e6429c14\u003c/code\u003e\u003c/a\u003e docs: Note that serializers run on child bindings at creation time (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6c71bc98ff17dfb7b12de18c6b48cd465acfa6fc\"\u003e\u003ccode\u003e6c71bc9\u003c/code\u003e\u003c/a\u003e Add bindings method to browser logger (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2504\"\u003e#2504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/b557f727237ddc4c246b1798c543c35f7bf21ac1\"\u003e\u003ccode\u003eb557f72\u003c/code\u003e\u003c/a\u003e ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2525\"\u003e#2525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/1de1212b31f569c50bb14ca11e13a8f8bb2b2407\"\u003e\u003ccode\u003e1de1212\u003c/code\u003e\u003c/a\u003e docs: document the APIs that are unavailable in the browser (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/af2fe10c73182d63310c61393ecd7ed4031ad1d7\"\u003e\u003ccode\u003eaf2fe10\u003c/code\u003e\u003c/a\u003e Delete .github/dependabot.yml (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/5aa62305c57709ebd6f6b7c328e8830eeb29b297\"\u003e\u003ccode\u003e5aa6230\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2515\"\u003e#2515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/6f5af07f122a74044afb50b208491b79255a0ef2\"\u003e\u003ccode\u003e6f5af07\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2513\"\u003e#2513\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pinojs/pino/commit/2ffe576ab7f3a48d80bd59b6177b790c53840606\"\u003e\u003ccode\u003e2ffe576\u003c/code\u003e\u003c/a\u003e ci: check pull requests target main (\u003ca href=\"https://redirect.github.com/pinojs/pino/issues/2500\"\u003e#2500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pinojs/pino/compare/v10.3.1...v10.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@apify/actor-memory-expression` from 0.2.11 to 1.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apify/apify-shared-js/releases\"\u003e@​apify/actor-memory-expression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​apify/actor-memory-expression\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/compare/@apify/actor-memory-expression@0.3.0...@apify/actor-memory-expression@1.0.1\"\u003e1.0.1\u003c/a\u003e (2026-09-03)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egraduate remaining 0.x packages to v1 (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/700\"\u003e#700\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/1d754faa579c748be9f1a0da7bf0c325e42858d8\"\u003e1d754fa\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apify/actor-memory-expression\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.3.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/compare/@apify/actor-memory-expression@0.2.16...@apify/actor-memory-expression@0.3.0\"\u003e0.3.0\u003c/a\u003e (2026-09-03)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003einput_secrets:\u003c/strong\u003e replace ow with zod validation (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/685\"\u003e#685\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/38a6890fd724743b7c07c752766c69f47a1f7694\"\u003e38a6890\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003epublish ESM-only packages and require Node.js 22+ (\u003ca href=\"https://redirect.github.com/apify/apify-shared-js/issues/684\"\u003e#684\u003c/a\u003e) (\u003ca href=\"https://github.com/apify/apify-shared-js/commit/338dbac5df0cd7a991e06c747bb82af9aec562a6\"\u003e338dbac\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003einput_secrets:\u003c/strong\u003e Invalid arguments throw ArgumentValidationError instead of ow's ArgumentError, with differently formatted messages.\u003c/li\u003e\n\u003cli\u003eAll packages are ESM-only and require Node.js 22 or higher. CommonJS consumers on Node.js 22+ can still require() them thanks to native require(esm) support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/CHANGELOG.md\"\u003e@​apify/actor-memory-expression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ccode\u003eapify-shared\u003c/code\u003e monorepo\u003c/h1\u003e\n\u003cp\u003e\u003ccode\u003eapify-shared\u003c/code\u003e is now an independently versioned monorepo.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eThis file is generated.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eSee the changelogs of each package:\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003epackage\u003c/th\u003e\n\u003cth\u003eversion\u003c/th\u003e\n\u003cth\u003echangelog\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/actor-categories\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.3.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/actor-categories/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/actor-memory-expression\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/actor-memory-expression/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/consts\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/consts/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/datastructures\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/datastructures/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/git\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/git/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/image_proxy_client\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/image_proxy_client/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/input_schema\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e4.0.6\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/input_schema/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/input_secrets\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e2.0.6\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/input_secrets/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/json_schemas\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/json_schemas/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/log\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/log/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/markdown\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e4.1.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/markdown/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/payment_qr_codes\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/payment_qr_codes/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/pseudo_url\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e3.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/pseudo_url/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apify/timeout\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003e1.0.1\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/apify/apify-shared-js/blob/master/packages/timeout/CHANGELOG.md\"\u003eCHANGELOG\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e@apif...\n\n_Description has been truncated_","html_url":"https://github.com/ar27111994/webhook-debugger-logger/pull/157","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ar27111994%2Fwebhook-debugger-logger/issues/157","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/157/packages"}},{"old_version":"1.13.2","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T15:41:53.000Z","version_change":"1.13.2 → 1.20.0","issue":{"uuid":"5900085089","node_id":"PR_kwDOOzFZtM8AAAABJCag2Q","number":176,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-17T15:42:13.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T15:41:53.000Z","updated_at":"2026-10-17T15:42:32.000Z","time_to_close":20,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"@tiptap/core","old_version":"3.20.1","new_version":"3.30.5","repository_url":"https://github.com/ueberdosis/tiptap"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"next","old_version":"16.1.6","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"baseline-browser-mapping","old_version":"2.9.15","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"linkify-it","old_version":"5.0.0","new_version":"5.0.2","repository_url":"https://github.com/markdown-it/linkify-it"},{"name":"markdown-it","old_version":"14.1.0","new_version":"14.3.3","repository_url":"https://github.com/markdown-it/markdown-it"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss","old_version":"8.4.31","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"prosemirror-view","old_version":"1.41.4","new_version":"1.42.6","repository_url":"https://github.com/prosemirror/prosemirror-view"},{"name":"sharp","old_version":"0.34.5","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"3.3.2","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.20.1` | `3.30.5` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [next](https://github.com/vercel/next.js) | `16.1.6` | `16.3.8` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.15` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [linkify-it](https://github.com/markdown-it/linkify-it) | `5.0.0` | `5.0.2` |\n| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.0` | `14.3.3` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.5.23` |\n| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.41.4` | `1.42.6` |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.5` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `3.3.2` | `3.3.5` |\n\n\nUpdates `@tiptap/core` from 3.20.1 to 3.30.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ueberdosis/tiptap/releases\"\u003e@​tiptap/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.30.5\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.4\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent untrusted HTML attributes from changing an object's prototype when merged with \u003ccode\u003emergeAttributes\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.3\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/extension-text-style\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eUnsetting one text style inside a blockquote no longer removes the other text styles in it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/extension-youtube\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eYouTube live URLs (\u003ccode\u003e/live/\u0026lt;id\u0026gt;\u003c/code\u003e) now embed the video.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/react\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix ReactNodeViewRenderer crash when contentComponent is not available\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/ai-toolkit\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003eMinor Changes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAdd the \u003ccode\u003eAiInsertReveal\u003c/code\u003e extension (\u003ccode\u003e@tiptap/ai-toolkit/streaming-reveal\u003c/code\u003e) to fade in text as the AI streams it into a collaborative document.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.30.2\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003e@​tiptap/core\u003c/code\u003e\u003c/h3\u003e\n\u003ch4\u003ePatch Changes\u003c/h4\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/core/CHANGELOG.md\"\u003e@​tiptap/core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.30.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ed0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.5\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with \u003ccode\u003emergeAttributes\u003c/code\u003e.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.4\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e965a880: Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.2\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e3dffed5: Keep mixed JSX children as separate siblings in DOM output.\u003c/li\u003e\n\u003cli\u003e214a140: Fixed a bug where \u003ccode\u003eeditor.chain\u003c/code\u003e and \u003ccode\u003eeditor.can\u003c/code\u003e can not be accessed on editor initialization\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eabc8828: Added new ProseMirror helpers that check whether a value is a specific ProseMirror type.\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tiptap/pm\u003c/code\u003e\u003ca href=\"https://github.com/3\"\u003e\u003ccode\u003e@​3\u003c/code\u003e\u003c/a\u003e.30.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e0247d39: \u003ccode\u003eListKeymap\u003c/code\u003e now registers a \u003ccode\u003eTab\u003c/code\u003e shortcut that sinks a top-level textblock into the previous list's last item. Pressing Tab at the start of a paragraph right after a bullet/ordered/task list moves the paragraph inside the last list item. The handler does nothing when the cursor is already inside a list item (\u003ccode\u003esinkListItem\u003c/code\u003e keeps working), when there is no list before the paragraph, when the caret is mid-textblock, or when the selection is not a text selection (for example a gap cursor).\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003e@tiptap/core\u003c/code\u003e also exposes a new \u003ccode\u003egetPreviousBlockSibling($pos)\u003c/code\u003e helper that returns the block-level sibling before the cursor's textblock, or null at the first child of the block parent.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e3099eef: \u003cstrong\u003eNew Decorations API\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eFinally the decorations API is here! Even though Decorations itself are nothing new in ProseMirror, the new API makes it much easier to use them in Tiptap without leaving your extensions.\u003c/p\u003e\n\u003cp\u003eDecorations change how the document looks without changing the document itself. Highlighting search results, marking spelling mistakes, showing collaborator cursors, putting a drag handle next to every block.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/b0c188b1bc919b204beace074de36f5cb2a2d961\"\u003e\u003ccode\u003eb0c188b\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8261\"\u003e#8261\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/d0d499be3cce633cf54ca9aa9f3d8a5a1f98bd74\"\u003e\u003ccode\u003ed0d499b\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/55f59e4907b37e0aa4404c52e965014f66158393\"\u003e\u003ccode\u003e55f59e4\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8260\"\u003e#8260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/01d7af8c983ee5954c63734f4fa46cb23ae3246d\"\u003e\u003ccode\u003e01d7af8\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/98b469dbb7fb51e4c306dc2860355307801e8897\"\u003e\u003ccode\u003e98b469d\u003c/code\u003e\u003c/a\u003e chore: complete Vite+ migration (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8258\"\u003e#8258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/db790a7c5a6009b0a94382e12e1a5e9c642e1660\"\u003e\u003ccode\u003edb790a7\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8216\"\u003e#8216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/f434577e6bb2010b321653cb132a57bda18764fa\"\u003e\u003ccode\u003ef434577\u003c/code\u003e\u003c/a\u003e chore: migrate over to vite+ for tooling (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8151\"\u003e#8151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/965a880c1f0af94b992722d1fdfbc53029d20e90\"\u003e\u003ccode\u003e965a880\u003c/code\u003e\u003c/a\u003e fix(core): preserve JSX child boundaries (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/7491\"\u003e#7491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/cef2c9aa1534b31662014bd1a3b4d9022da1b403\"\u003e\u003ccode\u003ecef2c9a\u003c/code\u003e\u003c/a\u003e chore(release): release new stable release (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8190\"\u003e#8190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ueberdosis/tiptap/commit/214a140450a06cb787543bac55757b9dcde1dd9e\"\u003e\u003ccode\u003e214a140\u003c/code\u003e\u003c/a\u003e fixed \u003ccode\u003eeditor.can\u003c/code\u003e and \u003ccode\u003eeditor.chain\u003c/code\u003e to not be accessible on editor … (\u003ca href=\"https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core/issues/8210\"\u003e#8210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.1.6 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.1.6...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.15 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.15...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fflate` from 0.8.2 to 0.8.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/101arrowz/fflate/releases\"\u003efflate's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.8.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix buffer over-read for Zip64 extra fields\u003c/li\u003e\n\u003cli\u003eSupport sync flushes (\u003ccode\u003eZ_SYNC_FLUSH\u003c/code\u003e in zlib)\n\u003cul\u003e\n\u003cli\u003eAllows for immediate decompression of all pushed bytes\u003c/li\u003e\n\u003cli\u003eEnables DEFLATE stream concatenation\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ezip\u003c/code\u003e/\u003ccode\u003ezipSync\u003c/code\u003e when using cross-realm \u003ccode\u003eUint8Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImprove Zip64 support for streamed or undersized archives\u003c/li\u003e\n\u003cli\u003eUpdate performance estimates in README\u003c/li\u003e\n\u003cli\u003eFix typings for TypeScript v5.7+\u003c/li\u003e\n\u003cli\u003eReduce memory consumption after compression stream completion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/101arrowz/fflate/blob/master/CHANGELOG.md\"\u003efflate's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.8.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix buffer over-read for Zip64 extra fields\u003c/li\u003e\n\u003cli\u003eSupport sync flushes (\u003ccode\u003eZ_SYNC_FLUSH\u003c/code\u003e in zlib)\n\u003cul\u003e\n\u003cli\u003eAllows for immediate decompression of all pushed bytes\u003c/li\u003e\n\u003cli\u003eEnables DEFLATE stream concatenation\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003ezip\u003c/code\u003e/\u003ccode\u003ezipSync\u003c/code\u003e when using cross-realm \u003ccode\u003eUint8Array\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eImprove Zip64 support for streamed or undersized archives\u003c/li\u003e\n\u003cli\u003eUpdate performance estimates in README\u003c/li\u003e\n\u003cli\u003eFix typings for TypeScript v5.7+\u003c/li\u003e\n\u003cli\u003eReduce memory consumption after compression stream completion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/dcb3714a6c25db3a2748641019c5277413d09714\"\u003e\u003ccode\u003edcb3714\u003c/code\u003e\u003c/a\u003e 0.8.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/31acfb8d282ae3a8bf5b81841aaf5f547c2c455c\"\u003e\u003ccode\u003e31acfb8\u003c/code\u003e\u003c/a\u003e prepare for v0.8.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/7b71e3ce08f856dc3ce2b40884ffc4c0bb210f8a\"\u003e\u003ccode\u003e7b71e3c\u003c/code\u003e\u003c/a\u003e update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/44ff62dd96f7dca9afa8a0b02ef4868d5ac3eae4\"\u003e\u003ccode\u003e44ff62d\u003c/code\u003e\u003c/a\u003e fix zip64 header parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/7235df5d89a02ae0a6d32c86785427ff41108b34\"\u003e\u003ccode\u003e7235df5\u003c/code\u003e\u003c/a\u003e Fix TypeScript issues (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/242\"\u003e#242\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/a44eda041adf490cd060129f96bc9a7bcbfcc602\"\u003e\u003ccode\u003ea44eda0\u003c/code\u003e\u003c/a\u003e release compression buffers after stream end (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/d94deb6b8a8718b3a337f8eee9f95d575822b014\"\u003e\u003ccode\u003ed94deb6\u003c/code\u003e\u003c/a\u003e allow cross-realm Uint8Array for zip/zipSync (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/234\"\u003e#234\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/2e1fb75b19f8555a33c8f1ab636a2de42e22a0ff\"\u003e\u003ccode\u003e2e1fb75\u003c/code\u003e\u003c/a\u003e export package.json (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/244\"\u003e#244\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/0f430b492b57703128d50353e798f5033014cc80\"\u003e\u003ccode\u003e0f430b4\u003c/code\u003e\u003c/a\u003e support sync flushes for compression streams (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/222\"\u003e#222\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/101arrowz/fflate/commit/4b7a6cbf7658271f0554521f53c0aad771cc7d14\"\u003e\u003ccode\u003e4b7a6cb\u003c/code\u003e\u003c/a\u003e skip transferring pooled Node buffers (\u003ca href=\"https://redirect.github.com/101arrowz/fflate/issues/227\"\u003e#227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/101arrowz/fflate/compare/v0.8.2...v0.8.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `linkify-it` from 5.0.0 to 5.0.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md\"\u003elinkify-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.0.2 / 2026-07-02\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DoS in \u003ccode\u003emailto:\u003c/code\u003e links (restrict user name to 64 chars).\u003c/li\u003e\n\u003cli\u003eRestricted user/pass part length in links.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.0.1 / 2026-05-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed DoS in fuzzy links/emails search.\u003c/li\u003e\n\u003cli\u003eReworked search logic - check each pattern separate, use \u003ccode\u003eg\u003c/code\u003e regexes instead\nof slice.\u003c/li\u003e\n\u003cli\u003eRemoved internal cache - useless overcomplication.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/50a0c914f834b201cab25ff4faefd1f832b37332\"\u003e\u003ccode\u003e50a0c91\u003c/code\u003e\u003c/a\u003e 5.0.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/de3b88554b5e465d5fa19914e2a1801ebb3069ef\"\u003e\u003ccode\u003ede3b885\u003c/code\u003e\u003c/a\u003e Update package hooks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/13effaaa4600d1fcff9f63c38fecdd601bfd83e7\"\u003e\u003ccode\u003e13effaa\u003c/code\u003e\u003c/a\u003e Add package lock\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/39d748dbfc77534e9be04d87cd9f57a13b9b4216\"\u003e\u003ccode\u003e39d748d\u003c/code\u003e\u003c/a\u003e Bump c8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/00ce8771ac0c3e6784dcacaa1625ca0fc1b62a12\"\u003e\u003ccode\u003e00ce877\u003c/code\u003e\u003c/a\u003e Drop tlds deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/ecde82341a1b2e349b03eb01f3e1d2cc105bcd7f\"\u003e\u003ccode\u003eecde823\u003c/code\u003e\u003c/a\u003e Update benchmark to mitata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/23c62cdd14ef36e89c175c6726e2229e5b76e75f\"\u003e\u003ccode\u003e23c62cd\u003c/code\u003e\u003c/a\u003e Refactor demo / doc build and publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/fd63f3b4ab433ca3561304409b572eed465706cd\"\u003e\u003ccode\u003efd63f3b\u003c/code\u003e\u003c/a\u003e CI config update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/f4ea5afaa6a8e1109c44898158d4910b3fb128fb\"\u003e\u003ccode\u003ef4ea5af\u003c/code\u003e\u003c/a\u003e demo: update bootstrap \u0026amp; layout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/linkify-it/commit/1454fb645f00c33a05edbded18640d5078ba7710\"\u003e\u003ccode\u003e1454fb6\u003c/code\u003e\u003c/a\u003e lint: dim warnings\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/linkify-it/compare/5.0.0...5.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown-it` from 14.1.0 to 14.3.3\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md\"\u003emarkdown-it's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[14.3.3] - 2026-10-16\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.3 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.2] - 2026-09-12\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.2 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.1] - 2026-08-27\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBackported 15.0.1 fixes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.3.0] - 2026-07-02\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReworked build pipeline \u0026amp; tools.\u003c/li\u003e\n\u003cli\u003eAdded source maps.\u003c/li\u003e\n\u003cli\u003eBumped \u003ccode\u003elinkify-it\u003c/code\u003e to 5.0.2.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve backslash-space hard line breaks, matching CommonMark 6.7, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1185\"\u003e#1185\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.2.0] - 2026-05-24\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eisPunctCharCode\u003c/code\u003e to utilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDon't end HTML comment blocks on a blank line, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1155\"\u003e#1155\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eProperly recognize astral chars (surrogates) in delimiter scans for\nemphasis-like markers, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1072\"\u003e#1072\u003c/a\u003e. Big thanks to \u003ca href=\"https://github.com/tats-u\"\u003e\u003ccode\u003e@​tats-u\u003c/code\u003e\u003c/a\u003e for his global efforts\nwith improving CJK support.\u003c/li\u003e\n\u003cli\u003ePreserve unicode whitespaces when trimm headings/paragraphs, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1074\"\u003e#1074\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eMore strict entities decode to avoid false positives \u003ccode\u003e;\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1096\"\u003e#1096\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRestore block parser state on fail in \u003ccode\u003elheading\u003c/code\u003e rule, \u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1131\"\u003e#1131\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed poor smartquotes perfomance on \u0026gt; 70k quotes in single block\u003c/li\u003e\n\u003cli\u003eBumped linkify-it to 5.0.1 with fixed potential perfomance issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[14.1.1] - 2026-01-11\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed regression from v13 in linkify inline rule. Specific patterns could\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d372f0d8a68bef0b0acaa68868ce8ae8ba85b384\"\u003e\u003ccode\u003ed372f0d\u003c/code\u003e\u003c/a\u003e 14.3.3 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503\"\u003e\u003ccode\u003ed99f488\u003c/code\u003e\u003c/a\u003e Backported 15.0.3 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/efb9993124c3eb229eea24dd659c91dcee7f6d60\"\u003e\u003ccode\u003eefb9993\u003c/code\u003e\u003c/a\u003e 14.3.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162\"\u003e\u003ccode\u003edaf5a3c\u003c/code\u003e\u003c/a\u003e Backported 15.0.2 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a855f10b1b796ca42178952b4b83b9c8b677ddb8\"\u003e\u003ccode\u003ea855f10\u003c/code\u003e\u003c/a\u003e 14.3.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/ad70f6b7cff64bee10e42a774147112480ca0d49\"\u003e\u003ccode\u003ead70f6b\u003c/code\u003e\u003c/a\u003e Backported 15.0.1 fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/b407f3b0667c9491cc52c6550736ee5a31721baa\"\u003e\u003ccode\u003eb407f3b\u003c/code\u003e\u003c/a\u003e Ignore generated API docs in lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/bf025adb983e90af426761a08cc76e4e41ab0239\"\u003e\u003ccode\u003ebf025ad\u003c/code\u003e\u003c/a\u003e Prepare package.json for v14 backports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/2d9bbea7df2ab1a48caecfafc39cb8599f193d3c\"\u003e\u003ccode\u003e2d9bbea\u003c/code\u003e\u003c/a\u003e fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (\u003ca href=\"https://redirect.github.com/markdown-it/markdown-it/issues/1189\"\u003e#1189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markdown-it/markdown-it/commit/a311cfbeb7dcdb86d001a21facaf60190414ca4d\"\u003e\u003ccode\u003ea311cfb\u003c/code\u003e\u003c/a\u003e fix: keep literal backslash before space in link destination (CommonMark 6.3)...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markdown-it/markdown-it/compare/14.1.0...14.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.11 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.11...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.4.31 to 8.5.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/...\n\n_Description has been truncated_","html_url":"https://github.com/cjc-it-ltd/CIPP/pull/176","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cjc-it-ltd%2FCIPP/issues/176","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/176/packages"}},{"old_version":"1.15.1","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-16T18:35:54.000Z","version_change":"1.15.1 → 1.20.0","issue":{"uuid":"5889337729","node_id":"PR_kwDOQoQiFc8AAAABI6D6Tg","number":1983,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 9 directories with 6 updates","user":"dependabot[bot]","labels":["size/XL","type: dependencies","dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T18:35:54.000Z","updated_at":"2026-10-16T18:38:21.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":6,"packages":[{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.0.2","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.15.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.0.2","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.15.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 3 updates in the /apps/services/crop-growth-model directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 4 updates in the /apps/services/disaster-assessment directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [handlebars](https://github.com/handlebars-lang/handlebars.js), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/lai-estimation directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/marketplace-service directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [handlebars](https://github.com/handlebars-lang/handlebars.js) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 1 update in the /apps/services/user-service directory: [nodemailer](https://github.com/nodemailer/nodemailer).\nBumps the npm_and_yarn group with 3 updates in the /apps/services/yield-prediction directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [axios](https://github.com/axios/axios).\nBumps the npm_and_yarn group with 3 updates in the /archive/deprecated-services/community-chat directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [engine.io](https://github.com/socketio/socket.io) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 2 updates in the /archive/kernel-legacy/kernel/services/field_core directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 1 update in the /packages/shared-crypto directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.0.2 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.15.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.0.2 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.8 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.7.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2\u003c/li\u003e\n\u003cli\u003efix type \u0026quot;RuntimeOptions\u0026quot; also accepting string partials - eab1d14\u003c/li\u003e\n\u003cli\u003efeat(types): set \u003ccode\u003ehash\u003c/code\u003e to be a \u003ccode\u003eRecord\u0026lt;string, any\u0026gt;\u003c/code\u003e - de4414d\u003c/li\u003e\n\u003cli\u003efix non-contiguous program indices - 4512766\u003c/li\u003e\n\u003cli\u003erefactor: rename i to startPartIndex - e497a35\u003c/li\u003e\n\u003cli\u003esecurity: fix security issues - 68d8df5\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2\"\u003ehttps://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.7.9 - March 26th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2\u003c/li\u003e\n\u003cli\u003efix type \u0026quot;RuntimeOptions\u0026quot; also accepting string partials - eab1d14\u003c/li\u003e\n\u003cli\u003efeat(types): set \u003ccode\u003ehash\u003c/code\u003e to be a \u003ccode\u003eRecord\u0026lt;string, any\u0026gt;\u003c/code\u003e - de4414d\u003c/li\u003e\n\u003cli\u003efix non-contiguous program indices - 4512766\u003c/li\u003e\n\u003cli\u003erefactor: rename i to startPartIndex - e497a35\u003c/li\u003e\n\u003cli\u003esecurity: fix security issues - 68d8df5\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.15.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navi...\n\n_Description has been truncated_","html_url":"https://github.com/kafaat/sahool-unified-v15-idp/pull/1983","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kafaat%2Fsahool-unified-v15-idp/issues/1983","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1983/packages"}},{"old_version":"1.18.1","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-13T10:14:53.000Z","version_change":"1.18.1 → 1.20.0","issue":{"uuid":"5828516724","node_id":"PR_kwDOLIswH88AAAABIJaT2w","number":1737,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates","user":"dependabot[bot]","labels":["dependencies","javascript","js-sdk"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-13T14:22:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T10:14:53.000Z","updated_at":"2026-10-13T14:23:00.000Z","time_to_close":14873,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":4,"packages":[{"name":"@modelcontextprotocol/sdk","old_version":"1.29.0","new_version":"1.32.1","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.18.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /examples/openai-agents-js-app directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 2 updates in the /sdk/typescript directory: [axios](https://github.com/axios/axios) and [handlebars](https://github.com/handlebars-lang/handlebars.js).\n\nUpdates `@modelcontextprotocol/sdk` from 1.29.0 to 1.32.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.32.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] docs: state the principles in CLAUDE.md by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2939\"\u003emodelcontextprotocol/typescript-sdk#2939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] docs: point the README at v2 and say what v1.x supports by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2942\"\u003emodelcontextprotocol/typescript-sdk#2942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2954\"\u003emodelcontextprotocol/typescript-sdk#2954\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.32.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRedirects:\u003c/strong\u003e the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets \u003ccode\u003eredirectPolicy: 'follow'\u003c/code\u003e on \u003ccode\u003eStreamableHTTPClientTransport\u003c/code\u003e or \u003ccode\u003eSSEClientTransport\u003c/code\u003e. In browsers, a redirected request fails unless that option is set.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew options, both off unless you set them:\u003c/strong\u003e \u003ccode\u003emaxToolInputElements\u003c/code\u003e on \u003ccode\u003eMcpServer\u003c/code\u003e limits the number of array elements and object members in a tool call's arguments. \u003ccode\u003eexpectedResource\u003c/code\u003e on \u003ccode\u003erequireBearerAuth\u003c/code\u003e accepts only tokens issued for this server (the token's audience).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(client): follow redirects only within the endpoint's origin by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2902\"\u003emodelcontextprotocol/typescript-sdk#2902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: point SECURITY.md at GitHub Security Advisories (v1.x) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2910\"\u003emodelcontextprotocol/typescript-sdk#2910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] examples: close idle sessions and cap the session map by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2914\"\u003emodelcontextprotocol/typescript-sdk#2914\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2925\"\u003emodelcontextprotocol/typescript-sdk#2925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2927\"\u003emodelcontextprotocol/typescript-sdk#2927\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by \u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(auth): add expectedResource to requireBearerAuth by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2930\"\u003emodelcontextprotocol/typescript-sdk#2930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] test(e2e): cover tools/call and prompts/get without arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2931\"\u003emodelcontextprotocol/typescript-sdk#2931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2935\"\u003emodelcontextprotocol/typescript-sdk#2935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/ff07b001194fe60ee9deb2121cf119057565796d\"\u003e\u003ccode\u003eff07b00\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2954\"\u003e#2954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/8a74d504a9ac1250f209325536f2f6c443e04ae6\"\u003e\u003ccode\u003e8a74d50\u003c/code\u003e\u003c/a\u003e [v1.x] docs: point the README at v2 and say what v1.x supports (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a8cf50360f1366ffee174ac337146657bad9be2c\"\u003e\u003ccode\u003ea8cf503\u003c/code\u003e\u003c/a\u003e [v1.x] docs: state the principles in CLAUDE.md (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/32549b00a9a808265f35a29f92fdf27fa4aac2ef\"\u003e\u003ccode\u003e32549b0\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2935\"\u003e#2935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/588d51dbe337000705890fad81e874eb080174c2\"\u003e\u003ccode\u003e588d51d\u003c/code\u003e\u003c/a\u003e [v1.x] test(e2e): cover tools/call and prompts/get without arguments (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2931\"\u003e#2931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/5a0724d14cf34a27a3b070224d2996cdd611df9f\"\u003e\u003ccode\u003e5a0724d\u003c/code\u003e\u003c/a\u003e [v1.x] feat(auth): add expectedResource to requireBearerAuth (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2930\"\u003e#2930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ca0b62d93c6cb403b3b96122eff3a3140b84cc0\"\u003e\u003ccode\u003e0ca0b62\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f\"\u003e\u003ccode\u003efd26801\u003c/code\u003e\u003c/a\u003e [v1.x] feat(server): add maxToolInputElements option to limit the number of e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa\"\u003e\u003ccode\u003e727075b\u003c/code\u003e\u003c/a\u003e [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ff63772dae796f41578ace47f7c814f4d86fa24\"\u003e\u003ccode\u003e0ff6377\u003c/code\u003e\u003c/a\u003e [v1.x] examples: close idle sessions and cap the session map (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2914\"\u003e#2914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.32.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​modelcontextprotocol/sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.18.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/openlit/openlit/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Generated by sourcery-ai[bot]: start fixed-security --\u003e\n- Resolves [CVE-2026-104850 — @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials](https://app.sourcery.ai/dashboard/security/issues?groupId=133308485\u0026issueIds=137600912)\n- Resolves [CVE-2026-90711 — proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet](https://app.sourcery.ai/dashboard/security/issues?groupId=133308499\u0026issueIds=137600926)\n\u003c!-- Generated by sourcery-ai[bot]: end fixed-security --\u003e","html_url":"https://github.com/openlit/openlit/pull/1737","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openlit%2Fopenlit/issues/1737","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1737/packages"}},{"old_version":"1.13.2","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-13T05:13:52.000Z","version_change":"1.13.2 → 1.20.0","issue":{"uuid":"5824923227","node_id":"PR_kwDOPCDvZs8AAAABIGihcw","number":10,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":true,"comments_count":1,"pull_request":true,"closed_at":"2026-10-13T05:35:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T05:13:52.000Z","updated_at":"2026-10-13T05:35:33.000Z","time_to_close":1290,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"@modelcontextprotocol/sdk","old_version":"1.26.0","new_version":"1.31.0","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"axios","old_version":"1.13.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@hono/node-server","old_version":"1.19.9","new_version":"2.1.4","repository_url":"https://github.com/honojs/node-server"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"hono","old_version":"4.11.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"ip-address","old_version":"10.0.1","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.31.0` |\n| [axios](https://github.com/axios/axios) | `1.13.2` | `1.20.0` |\n| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.9` | `2.1.4` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [hono](https://github.com/honojs/hono) | `4.11.7` | `4.13.13` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.0.1` | `10.7.4` |\n\n\nUpdates `@modelcontextprotocol/sdk` from 1.26.0 to 1.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.30.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.30.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(server): prioritize zod issues and format them by \u003ca href=\"https://github.com/mozmo15\"\u003e\u003ccode\u003e@​mozmo15\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503\"\u003emodelcontextprotocol/typescript-sdk#1503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): switch publish to OIDC trusted publishing by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1839\"\u003emodelcontextprotocol/typescript-sdk#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd end-to-end test suite by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2167\"\u003emodelcontextprotocol/typescript-sdk#2167\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ev1 stdio buffer limit by \u003ca href=\"https://github.com/KKonstantinov\"\u003e\u003ccode\u003e@​KKonstantinov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2239\"\u003emodelcontextprotocol/typescript-sdk#2239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: support Zod 3.25 method literals by \u003ca href=\"https://github.com/mattzcarey\"\u003e\u003ccode\u003e@​mattzcarey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2368\"\u003emodelcontextprotocol/typescript-sdk#2368\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate Content-Type by parsed media type instead of substring match (v1.x) by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2444\"\u003emodelcontextprotocol/typescript-sdk#2444\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send SSE keep-alive comment frames from Streamable HTTP server transport (v1.x) by \u003ca href=\"https://github.com/mattzcarey\"\u003e\u003ccode\u003e@​mattzcarey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2538\"\u003emodelcontextprotocol/typescript-sdk#2538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(deps): widen \u003ccode\u003e@​hono/node-server\u003c/code\u003e past GHSA-frvp-7c67-39w9 by \u003ca href=\"https://github.com/arimu1\"\u003e\u003ccode\u003e@​arimu1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549\"\u003emodelcontextprotocol/typescript-sdk#2549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x) by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2547\"\u003emodelcontextprotocol/typescript-sdk#2547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.0 by \u003ca href=\"https://github.com/felixweinberger\"\u003e\u003ccode\u003e@​felixweinberger\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2563\"\u003emodelcontextprotocol/typescript-sdk#2563\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mozmo15\"\u003e\u003ccode\u003e@​mozmo15\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503\"\u003emodelcontextprotocol/typescript-sdk#1503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/arimu1\"\u003e\u003ccode\u003e@​arimu1\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549\"\u003emodelcontextprotocol/typescript-sdk#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/4b0051f400219f8d8855f9a5433c6df35f15a639\"\u003e\u003ccode\u003e4b0051f\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.31.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2890\"\u003e#2890\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/51ad4f03190dc5c84ab8b1a25f9b78b277be0dc7\"\u003e\u003ccode\u003e51ad4f0\u003c/code\u003e\u003c/a\u003e [v1.x] Bind stored OAuth credentials to the authorization server that issued ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/289ac2c3af7e1536160e80414296b175171a1a87\"\u003e\u003ccode\u003e289ac2c\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.30.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2848\"\u003e#2848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/12b425678a76cd54b0452a2ccf1e5dc7740f73ef\"\u003e\u003ccode\u003e12b4256\u003c/code\u003e\u003c/a\u003e fix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1972\"\u003e#1972\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a9f6eb709b85459d01e8f2a9e881fef2621756c1\"\u003e\u003ccode\u003ea9f6eb7\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/2d889f2b329e46680ec9bdd565de4616c497825a\"\u003e\u003ccode\u003e2d889f2\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.30.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2563\"\u003e#2563\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/e3f3daa12cc2603919939b72136ce9d9e800b868\"\u003e\u003ccode\u003ee3f3daa\u003c/code\u003e\u003c/a\u003e Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/bb5a718cbf90796bacbf62218b359196d210426b\"\u003e\u003ccode\u003ebb5a718\u003c/code\u003e\u003c/a\u003e fix(deps): widen \u003ccode\u003e@​hono/node-server\u003c/code\u003e past GHSA-frvp-7c67-39w9 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2549\"\u003e#2549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/1dad2634ce5799fb386283d14291d1b4935a9a52\"\u003e\u003ccode\u003e1dad263\u003c/code\u003e\u003c/a\u003e fix: send SSE keep-alive comment frames from Streamable HTTP server transport...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/69749aa5081ddfe675d36da8d96c7e27d83742b8\"\u003e\u003ccode\u003e69749aa\u003c/code\u003e\u003c/a\u003e Validate Content-Type by parsed media type instead of substring match (v1.x) ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.26.0...1.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​modelcontextprotocol/sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@hono/node-server` from 1.19.9 to 2.1.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/node-server/releases\"\u003e@​hono/node-server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.1.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: allow hono v5 as a peer dependency by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/406\"\u003ehonojs/node-server#406\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.3...v2.1.4\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.3...v2.1.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003e@hono/node-server/serve-static\u003c/code\u003e. Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eserveStatic\u003c/code\u003e now rejects request paths that still contain \u003ccode\u003e%\u003c/code\u003e after decoding. To serve files whose names contain a literal \u003ccode\u003e%\u003c/code\u003e, set \u003ccode\u003eallowPercentInPath: true\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe same fix ships in \u003ccode\u003ehono\u003c/code\u003e v4.13.11.\u003c/p\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: add autofix.ci by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/392\"\u003ehonojs/node-server#392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: type error in early hints and add typecheck to CI by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/390\"\u003ehonojs/node-server#390\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add better benchmarks by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/391\"\u003ehonojs/node-server#391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(readme): update the benchmark by \u003ca href=\"https://github.com/yusukebe\"\u003e\u003ccode\u003e@​yusukebe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/394\"\u003ehonojs/node-server#394\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(request): accept asynchronous body read errors by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/403\"\u003ehonojs/node-server#403\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(listener): avoid mutating response headers when setting Content-Length by \u003ca href=\"https://github.com/usualoma\"\u003e\u003ccode\u003e@​usualoma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/402\"\u003ehonojs/node-server#402\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.1...v2.1.2\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.1...v2.1.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: lazily materialize request headers by \u003ca href=\"https://github.com/BlankParticle\"\u003e\u003ccode\u003e@​BlankParticle\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/389\"\u003ehonojs/node-server#389\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.1.0...v2.1.1\"\u003ehttps://github.com/honojs/node-server/compare/v2.1.0...v2.1.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Early Hints (HTTP 103) middleware by \u003ca href=\"https://github.com/bilal-azam\"\u003e\u003ccode\u003e@​bilal-azam\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/378\"\u003ehonojs/node-server#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(listener): avoid uncaught error when force-closing a non-standard socket by \u003ca href=\"https://github.com/mohamedramadan14\"\u003e\u003ccode\u003e@​mohamedramadan14\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/383\"\u003ehonojs/node-server#383\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bilal-azam\"\u003e\u003ccode\u003e@​bilal-azam\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/378\"\u003ehonojs/node-server#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mohamedramadan14\"\u003e\u003ccode\u003e@​mohamedramadan14\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/honojs/node-server/pull/383\"\u003ehonojs/node-server#383\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0\"\u003ehttps://github.com/honojs/node-server/compare/v2.0.12...v2.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.0.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/d57ed9b9dad4d44b20caa0cdb1b10d8360d8b734\"\u003e\u003ccode\u003ed57ed9b\u003c/code\u003e\u003c/a\u003e 2.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/92b014c1b6a3634a5cb2fcc9ddcc10e9bc68e48d\"\u003e\u003ccode\u003e92b014c\u003c/code\u003e\u003c/a\u003e chore: allow hono v5 as a peer dependency (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/720ac7843fbc7c1bdae1beaa47e2ab5db7f99a9b\"\u003e\u003ccode\u003e720ac78\u003c/code\u003e\u003c/a\u003e 2.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/982179278529d5673812116b042829f27794966f\"\u003e\u003ccode\u003e9821792\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/35bca95b8e5ef5facc799c57a7e69aa3ec5111b1\"\u003e\u003ccode\u003e35bca95\u003c/code\u003e\u003c/a\u003e 2.1.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/90a2600d9bfe76ab4774c028704c2a09c5930bb1\"\u003e\u003ccode\u003e90a2600\u003c/code\u003e\u003c/a\u003e fix(listener): avoid mutating response headers when setting Content-Length (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/fe7467ca2f0027b8189ae3c0a5d35d1144f909bc\"\u003e\u003ccode\u003efe7467c\u003c/code\u003e\u003c/a\u003e test(request): accept asynchronous body read errors (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/403\"\u003e#403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/64dc09e0c37eab30b51d33d61a3a2bae3fdee263\"\u003e\u003ccode\u003e64dc09e\u003c/code\u003e\u003c/a\u003e docs(readm): update the benchmark (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/394\"\u003e#394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/8f505aed205297c033afab80597e5ab990f2082f\"\u003e\u003ccode\u003e8f505ae\u003c/code\u003e\u003c/a\u003e chore: add better benchmarks (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/391\"\u003e#391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/node-server/commit/2469b1a3bb3c70cda6ab795202f0e42d6324447c\"\u003e\u003ccode\u003e2469b1a\u003c/code\u003e\u003c/a\u003e fix: type error in early hints and add typecheck to CI (\u003ca href=\"https://redirect.github.com/honojs/node-server/issues/390\"\u003e#390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/node-server/compare/v1.19.9...v2.1.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​hono/node-server\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.1.0 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.5\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eFix for \u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7\"\u003ehttps://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.4\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Release\u003c/h2\u003e\n\u003cp\u003eFix for \u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx\"\u003ehttps://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/ead3ab7bb134c989e972c8174632d0670023f269\"\u003e\u003ccode\u003eead3ab7\u003c/code\u003e\u003c/a\u003e Bumped v3.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c88b59e3e3a20af1d5d6e499f48908d0fb12a66d\"\u003e\u003ccode\u003ec88b59e\u003c/code\u003e\u003c/a\u003e fix: normalize decoded reg-name case\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/412e40abd4eb8beabfb952d80abf949a2baf27a3\"\u003e\u003ccode\u003e412e40a\u003c/code\u003e\u003c/a\u003e Bumped v3.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/9f4c943e4d2133e8d78e0941203879216255bb01\"\u003e\u003ccode\u003e9f4c943\u003c/code\u003e\u003c/a\u003e fix: backport port and IP-literal validation to v3.x (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/216\"\u003e#216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/1eb3ce436fe050807caba79f886ab894f485a588\"\u003e\u003ccode\u003e1eb3ce4\u003c/code\u003e\u003c/a\u003e fix: treat unterminated bracket hosts as reg-names again (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/6f970b2951fd896aa0f3a7ff28eeb6640c137d33\"\u003e\u003ccode\u003e6f970b2\u003c/code\u003e\u003c/a\u003e Bumped v3.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/d941579a84273ec7e96bde596b1f7a8be447df2a\"\u003e\u003ccode\u003ed941579\u003c/code\u003e\u003c/a\u003e fix: never run IDN canonicalization on bracketed IP literals\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c0f0279cf370cb89ee56b04bbcde2a7afbe81aba\"\u003e\u003ccode\u003ec0f0279\u003c/code\u003e\u003c/a\u003e test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/37f3417c82994279656854f83ce938acd81c3862\"\u003e\u003ccode\u003e37f3417\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/607bfbe953f28a14c2e06ae64aff38c81ca2937f\"\u003e\u003ccode\u003e607bfbe\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.5 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.11.7 to 4.13.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.13.13\u003c/h2\u003e\n\u003ch2\u003eMount Middleware\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e is now available as the Mount Middleware, \u003ccode\u003ehono/mount\u003c/code\u003e. It is just a handler, so you register it with \u003ccode\u003eapp.all()\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eimport { Router as IttyRouter } from 'itty-router'\r\nimport { Hono } from 'hono'\r\nimport { mount } from 'hono/mount'\r\n\u003cp\u003econst ittyRouter = IttyRouter()\u003cbr /\u003e\nittyRouter.get('/hello', () =\u0026gt; new Response('Hello from itty-router'))\u003c/p\u003e\n\u003cp\u003econst app = new Hono()\u003cbr /\u003e\napp.all('/itty-router/*', mount(ittyRouter.handle))\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e- app.mount('/itty-router', ittyRouter.handle)\r\n+ app.all('/itty-router/*', mount(ittyRouter.handle))\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest(client): simulate network error for undefined route in parseResponse test in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5439\"\u003ehonojs/hono#5439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(request): fix jsdoc comments for some getters in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5445\"\u003ehonojs/hono#5445\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): allow JSXNode function component results in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5476\"\u003ehonojs/hono#5476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5221\"\u003ehonojs/hono#5221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.12...v4.13.13\"\u003ehttps://github.com/honojs/hono/compare/v4.13.12...v4.13.13\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(build): keep internal types private in bundled d.ts and avoid a self-referencing JSX.IntrinsicElements in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5485\"\u003ehonojs/hono#5485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(build): type-check the bundled declarations from a consumer project in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5486\"\u003ehonojs/hono#5486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): correctly match mixed-case header name in retainedHeader option in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5475\"\u003ehonojs/hono#5475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5487\"\u003ehonojs/hono#5487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(combine): return a Response from a short-circuiting middleware in some() in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5391\"\u003ehonojs/hono#5391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): upgrade vite-plus to 1.0.0 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5464\"\u003ehonojs/hono#5464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.11...v4.13.12\"\u003ehttps://github.com/honojs/hono/compare/v4.13.11...v4.13.12\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.11\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/serve-static\u003c/code\u003e and the adapters built on it (\u003ccode\u003ehono/bun\u003c/code\u003e, \u003ccode\u003ehono/deno\u003c/code\u003e, \u003ccode\u003ehono/cloudflare-workers\u003c/code\u003e, \u003ccode\u003e@hono/bun\u003c/code\u003e, \u003ccode\u003e@hono/deno\u003c/code\u003e, \u003ccode\u003e@hono/cloudflare-workers\u003c/code\u003e). Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-5r4p-p66f-jhc7\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/08a023cbfde55b434fb0fb30fae35d42e4bf20aa\"\u003e\u003ccode\u003e08a023c\u003c/code\u003e\u003c/a\u003e 4.13.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ae595de8ae05ea548560da93140ee1d53e5a8202\"\u003e\u003ccode\u003eae595de\u003c/code\u003e\u003c/a\u003e feat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5221\"\u003e#5221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/f23b146afcec63606144cde50b5fbd360dd60238\"\u003e\u003ccode\u003ef23b146\u003c/code\u003e\u003c/a\u003e fix(jsx): allow JSXNode function component results (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5476\"\u003e#5476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6d73a74f9757ed65d6103c0e8375097fa20873c4\"\u003e\u003ccode\u003e6d73a74\u003c/code\u003e\u003c/a\u003e docs(request): fix jsdoc comments for some getters (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5445\"\u003e#5445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/deff529656cff775b35956f7f9071388d4eb55ae\"\u003e\u003ccode\u003edeff529\u003c/code\u003e\u003c/a\u003e test(client): simulate network error for undefined route in parseResponse tes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6abd35b0a5f35f67b6417627d5b0a6c2d266ac04\"\u003e\u003ccode\u003e6abd35b\u003c/code\u003e\u003c/a\u003e 4.13.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/95eb860473d26bd303a2a29716e61a77c8c5e5f5\"\u003e\u003ccode\u003e95eb860\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade vite-plus to 1.0.0 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5464\"\u003e#5464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/afb2068c1c53a530528ac5f237e245793dd03c07\"\u003e\u003ccode\u003eafb2068\u003c/code\u003e\u003c/a\u003e fix(combine): return a Response from a short-circuiting middleware in some() ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e5bb2062a3ddd645e3a16d1300bd76d6c9af33a5\"\u003e\u003ccode\u003ee5bb206\u003c/code\u003e\u003c/a\u003e fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5487\"\u003e#5487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/c3053ccf14f1c4c70a0c2888eed6121b9f6c8f95\"\u003e\u003ccode\u003ec3053cc\u003c/code\u003e\u003c/a\u003e fix(etag): correctly match mixed-case header name in retainedHeader option (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.11.7...v4.13.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for hono since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ip-address` from 10.0.1 to 10.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beaugunderson/ip-address/releases\"\u003eip-address's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.7.4\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.3...v10.7.4\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.3...v10.7.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReject an in-addr.arpa name longer than 32 characters before splitting it by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/228\"\u003ebeaugunderson/ip-address#228\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.2...v10.7.3\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.2...v10.7.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAccept an arpa suffix in any case and without the root dot in fromArpa by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/227\"\u003ebeaugunderson/ip-address#227\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump js-yaml and brace-expansion in the lockfile by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/226\"\u003ebeaugunderson/ip-address#226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.7.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct the IPv6 end-address docs by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/225\"\u003ebeaugunderson/ip-address#225\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.6.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd isGlobal() and pin the classifiers to the IANA special-purpose registries by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/224\"\u003ebeaugunderson/ip-address#224\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.5.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.5.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHonor the fromURL graceful-failure contract for non-IPv6 hosts by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/218\"\u003ebeaugunderson/ip-address#218\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCorrect the documentation where it disagreed with the library by \u003ca href=\"https://github.com/beaugunderson\"\u003e\u003ccode\u003e@​beaugunderson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/pull/219\"\u003ebeaugunderson/ip-address#219\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0\"\u003ehttps://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev10.4.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/651c1dd35e55593b337d21c8e2a990b3743d1b3a\"\u003e\u003ccode\u003e651c1dd\u003c/code\u003e\u003c/a\u003e 10.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/ec80fcd5d7b97defecfd39717d782a9f9f8b89dd\"\u003e\u003ccode\u003eec80fcd\u003c/code\u003e\u003c/a\u003e Find an IPv6 zone by index so a rejected zone costs one pass\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/e22eb4a14575fae3d773c5c3a24962cbfc4f3a31\"\u003e\u003ccode\u003ee22eb4a\u003c/code\u003e\u003c/a\u003e Check generated docs without writing or hiding partial staging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/c7f838eeca573fa14838f3f18c0cfadcc719dcb9\"\u003e\u003ccode\u003ec7f838e\u003c/code\u003e\u003c/a\u003e 10.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/09b8072f5e45e13fd2c4772aeb5d4a7d8a1174d4\"\u003e\u003ccode\u003e09b8072\u003c/code\u003e\u003c/a\u003e Reject an in-addr.arpa name longer than 32 characters before splitting it (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/228\"\u003e#228\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/974b48d9ade9348accdb377ba0a15feba4a11361\"\u003e\u003ccode\u003e974b48d\u003c/code\u003e\u003c/a\u003e 10.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/4dfe8e5eb34fdb47698834b213526814234c0cb1\"\u003e\u003ccode\u003e4dfe8e5\u003c/code\u003e\u003c/a\u003e Accept an arpa suffix in any case and without the root dot in fromArpa (\u003ca href=\"https://redirect.github.com/beaugunderson/ip-address/issues/227\"\u003e#227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/f0c25dfd4fbf7886e45116ba0940207f81401e28\"\u003e\u003ccode\u003ef0c25df\u003c/code\u003e\u003c/a\u003e 10.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/8b34a21e0839b37c094066816fb2c2c48a2adcf5\"\u003e\u003ccode\u003e8b34a21\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beaugunderson/ip-address/commit/13b615554f129bdcdbd10f39b5918fef4bcf96c5\"\u003e\u003ccode\u003e13b6155\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beaugunderson/ip-address/compare/v10.0.1...v10.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for ip-address since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/warengonzaga/relay-protocol-mcp-server/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/warengonzaga/relay-protocol-mcp-server/pull/10","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/warengonzaga%2Frelay-protocol-mcp-server/issues/10","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/10/packages"}},{"old_version":"1.18.1","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-13T02:37:43.000Z","version_change":"1.18.1 → 1.20.0","issue":{"uuid":"5823543649","node_id":"PR_kwDOQ8uS9M8AAAABIFdB2A","number":52,"state":"open","title":"deps(deps): bump the security-updates group across 1 directory with 94 updates","user":"dependabot[bot]","labels":["documentation","GSSoC'25","level2"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-13T02:37:43.000Z","updated_at":"2026-10-13T02:37:58.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"security-updates","update_count":94,"packages":[{"name":"@google-cloud/translate","old_version":"9.3.0","new_version":"10.2.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@playwright/test","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"axios","old_version":"1.18.1","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"dotenv","old_version":"17.2.3","new_version":"18.0.7","repository_url":"https://github.com/motdotla/dotenv"},{"name":"google-translate-api-x","old_version":"10.7.2","new_version":"10.7.3","repository_url":"https://github.com/AidanWelch/google-translate-api"},{"name":"helmet","old_version":"8.1.0","new_version":"8.3.0","repository_url":"https://github.com/helmetjs/helmet"},{"name":"i18n","old_version":"0.15.3","new_version":"0.15.4","repository_url":"https://github.com/mashpie/i18n-node"},{"name":"joi","old_version":"18.2.3","new_version":"18.2.9","repository_url":"https://github.com/hapijs/joi"},{"name":"mongodb","old_version":"7.0.0","new_version":"7.7.0","repository_url":"https://github.com/mongodb/node-mongodb-native"},{"name":"node-cron","old_version":"4.2.1","new_version":"4.6.0","repository_url":"https://github.com/node-cron/node-cron"},{"name":"openai","old_version":"6.16.0","new_version":"7.32.0","repository_url":"https://github.com/openai/openai-node"},{"name":"playwright","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"socket.io","old_version":"4.8.3","new_version":"4.8.4","repository_url":"https://github.com/socketio/socket.io"},{"name":"babel-plugin-istanbul","old_version":"7.0.1","new_version":"8.0.0","repository_url":"https://github.com/istanbuljs/babel-plugin-istanbul"},{"name":"js-yaml","old_version":"4.3.0","new_version":"5.4.3","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"supertest","old_version":"7.2.2","new_version":"7.3.1","repository_url":"https://github.com/ladjs/supertest"},{"name":"@babel/generator","old_version":"7.29.7","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helper-plugin-utils","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/helpers","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/parser","old_version":"7.29.7","new_version":"7.29.9","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-import-attributes","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-jsx","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-syntax-typescript","old_version":"7.27.1","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/runtime","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/traverse","old_version":"7.29.7","new_version":"7.29.10","repository_url":"https://github.com/babel/babel"},{"name":"@babel/types","old_version":"7.29.7","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@emnapi/core","old_version":"1.8.1","new_version":"1.11.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@emnapi/runtime","old_version":"1.8.1","new_version":"1.11.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@emnapi/wasi-threads","old_version":"1.1.0","new_version":"1.2.3","repository_url":"https://github.com/toyobayashi/emnapi"},{"name":"@google-cloud/common","old_version":"6.0.0","new_version":"8.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@google-cloud/promisify","old_version":"4.1.0","new_version":"6.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@google-cloud/projectify","old_version":"4.0.0","new_version":"6.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"@grpc/grpc-js","old_version":"1.14.4","new_version":"1.14.6","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@grpc/proto-loader","old_version":"0.8.0","new_version":"0.8.1","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@hapi/tlds","old_version":"1.1.4","new_version":"1.1.7","repository_url":"https://github.com/hapijs/tlds"},{"name":"@istanbuljs/schema","old_version":"0.1.3","new_version":"0.1.6","repository_url":"https://github.com/istanbuljs/schema"},{"name":"@jridgewell/sourcemap-codec","old_version":"1.5.5","new_version":"1.6.0","repository_url":"https://github.com/jridgewell/sourcemaps"},{"name":"@mongodb-js/saslprep","old_version":"1.4.4","new_version":"1.6.0","repository_url":"https://github.com/mongodb-js/devtools-shared"},{"name":"@pkgr/core","old_version":"0.2.9","new_version":"0.2.10","repository_url":"https://github.com/un-ts/pkgr"},{"name":"@sinclair/typebox","old_version":"0.34.47","new_version":"0.34.52","repository_url":"https://github.com/sinclairzx81/sinclair-typebox"},{"name":"@tybys/wasm-util","old_version":"0.10.1","new_version":"0.10.4","repository_url":"https://github.com/toyobayashi/wasm-util"},{"name":"@types/http-cache-semantics","old_version":"4.0.4","new_version":"4.2.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/node","old_version":"25.0.6","new_version":"26.6.5","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/ws","old_version":"8.18.1","new_version":"8.18.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@ungap/structured-clone","old_version":"1.3.0","new_version":"1.4.0","repository_url":"https://github.com/ungap/structured-clone"},{"name":"form-data","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/form-data/form-data"},{"name":"baseline-browser-mapping","old_version":"2.11.3","new_version":"2.11.28","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.6","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.16","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.7","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"caniuse-lite","old_version":"1.0.30001806","new_version":"1.0.30001815","repository_url":"https://github.com/browserslist/caniuse-lite"},{"name":"ci-info","old_version":"4.3.1","new_version":"4.4.0","repository_url":"https://github.com/watson/ci-info"},{"name":"cjs-module-lexer","old_version":"2.2.0","new_version":"2.3.0","repository_url":"https://github.com/nodejs/cjs-module-lexer"},{"name":"core-js","old_version":"3.47.0","new_version":"3.50.0","repository_url":"https://github.com/zloirock/core-js"},{"name":"cors","old_version":"2.8.5","new_version":"2.8.6","repository_url":"https://github.com/expressjs/cors"},{"name":"dedent","old_version":"1.7.1","new_version":"1.7.2","repository_url":"https://github.com/dmnd/dedent"},{"name":"dompurify","old_version":"3.4.12","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"electron-to-chromium","old_version":"1.5.396","new_version":"1.5.452","repository_url":"https://github.com/Kilian/electron-to-chromium"},{"name":"engine.io","old_version":"6.6.9","new_version":"6.6.11","repository_url":"https://github.com/socketio/socket.io"},{"name":"es-object-atoms","old_version":"1.1.1","new_version":"1.1.2","repository_url":"https://github.com/ljharb/es-object-atoms"},{"name":"fb-watchman","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/facebook/watchman"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"filelist","old_version":"1.0.4","new_version":"1.0.6","repository_url":"https://github.com/mde/filelist"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"fsevents","old_version":"2.3.2","new_version":"2.3.3","repository_url":"https://github.com/fsevents/fsevents"},{"name":"gaxios","old_version":"7.1.3","new_version":"7.3.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-auth-library","old_version":"10.5.0","new_version":"11.2.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"gcp-metadata","old_version":"8.1.2","new_version":"9.1.0","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-gax","old_version":"5.0.6","new_version":"6.12.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"google-logging-utils","old_version":"1.1.3","new_version":"2.0.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"http-proxy-agent","old_version":"5.0.0","new_version":"7.0.2","repository_url":"https://github.com/TooTallNate/proxy-agents"},{"name":"is-core-module","old_version":"2.16.1","new_version":"2.17.0","repository_url":"https://github.com/inspect-js/is-core-module"},{"name":"minipass","old_version":"7.1.2","new_version":"7.1.3","repository_url":"https://github.com/isaacs/minipass"},{"name":"moo","old_version":"0.5.2","new_version":"0.5.3","repository_url":"https://github.com/tjvr/moo"},{"name":"node-releases","old_version":"2.0.51","new_version":"2.0.58","repository_url":"https://github.com/chicoxyzzy/node-releases"},{"name":"pako","old_version":"2.1.0","new_version":"2.2.0","repository_url":"https://github.com/nodeca/pako"},{"name":"playwright-core","old_version":"1.57.0","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"proto3-json-serializer","old_version":"3.0.4","new_version":"4.0.2","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"protobufjs","old_version":"7.6.5","new_version":"7.6.6","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"pump","old_version":"3.0.3","new_version":"3.0.4","repository_url":"https://github.com/mafintosh/pump"},{"name":"resolve","old_version":"1.22.11","new_version":"1.22.13","repository_url":"https://github.com/browserify/resolve"},{"name":"retry-request","old_version":"8.0.2","new_version":"9.0.2","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"spdx-license-ids","old_version":"3.0.22","new_version":"3.0.24","repository_url":"https://github.com/jslicense/spdx-license-ids"},{"name":"superagent","old_version":"10.3.0","new_version":"10.4.1","repository_url":"https://github.com/ladjs/superagent"},{"name":"synckit","old_version":"0.11.11","new_version":"0.11.13","repository_url":"https://github.com/un-ts/synckit"},{"name":"teeny-request","old_version":"10.1.0","new_version":"11.0.1","repository_url":"https://github.com/googleapis/google-cloud-node"},{"name":"undici-types","old_version":"7.16.0","new_version":"8.9.0","repository_url":"https://github.com/nodejs/undici"},{"name":"unrs-resolver","old_version":"1.11.1","new_version":"1.12.2","repository_url":"https://github.com/unrs/unrs-resolver"},{"name":"update-browserslist-db","old_version":"1.2.3","new_version":"1.3.4","repository_url":"https://github.com/browserslist/update-db"},{"name":"validator","old_version":"13.15.26","new_version":"13.15.35","repository_url":"https://github.com/validatorjs/validator.js"},{"name":"ws","old_version":"8.21.1","new_version":"8.21.3","repository_url":"https://github.com/websockets/ws"},{"name":"yargs","old_version":"17.7.2","new_version":"17.7.3","repository_url":"https://github.com/yargs/yargs"}],"path":null,"ecosystem":"npm"},"body":"Bumps the security-updates group with 94 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@google-cloud/translate](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-translate) | `9.3.0` | `10.2.0` |\n| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [axios](https://github.com/axios/axios) | `1.18.1` | `1.20.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `18.0.7` |\n| [google-translate-api-x](https://github.com/AidanWelch/google-translate-api) | `10.7.2` | `10.7.3` |\n| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` |\n| [i18n](https://github.com/mashpie/i18n-node) | `0.15.3` | `0.15.4` |\n| [joi](https://github.com/hapijs/joi) | `18.2.3` | `18.2.9` |\n| [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.0.0` | `7.7.0` |\n| [node-cron](https://github.com/node-cron/node-cron) | `4.2.1` | `4.6.0` |\n| [openai](https://github.com/openai/openai-node) | `6.16.0` | `7.32.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [socket.io](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` |\n| [babel-plugin-istanbul](https://github.com/istanbuljs/babel-plugin-istanbul) | `7.0.1` | `8.0.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.0` | `5.4.3` |\n| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |\n| [@babel/generator](https://github.com/babel/babel/tree/HEAD/packages/babel-generator) | `7.29.7` | `7.29.8` |\n| [@babel/helper-plugin-utils](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-plugin-utils) | `7.27.1` | `7.29.7` |\n| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.7` | `7.29.10` |\n| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.7` | `7.29.9` |\n| [@babel/plugin-syntax-import-attributes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-attributes) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-syntax-jsx](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-jsx) | `7.27.1` | `7.29.7` |\n| [@babel/plugin-syntax-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-typescript) | `7.27.1` | `7.29.7` |\n| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.29.7` | `7.29.10` |\n| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.7` | `7.29.10` |\n| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.7` | `7.29.8` |\n| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.8.1` | `1.11.3` |\n| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.8.1` | `1.11.3` |\n| [@emnapi/wasi-threads](https://github.com/toyobayashi/emnapi) | `1.1.0` | `1.2.3` |\n| [@google-cloud/common](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/common) | `6.0.0` | `8.1.0` |\n| [@google-cloud/promisify](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/promisify) | `4.1.0` | `6.1.0` |\n| [@google-cloud/projectify](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/projectify) | `4.0.0` | `6.1.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.4` | `1.14.6` |\n| [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.8.0` | `0.8.1` |\n| [@hapi/tlds](https://github.com/hapijs/tlds) | `1.1.4` | `1.1.7` |\n| [@istanbuljs/schema](https://github.com/istanbuljs/schema) | `0.1.3` | `0.1.6` |\n| [@jridgewell/sourcemap-codec](https://github.com/jridgewell/sourcemaps/tree/HEAD/packages/sourcemap-codec) | `1.5.5` | `1.6.0` |\n| [@mongodb-js/saslprep](https://github.com/mongodb-js/devtools-shared) | `1.4.4` | `1.6.0` |\n| [@pkgr/core](https://github.com/un-ts/pkgr) | `0.2.9` | `0.2.10` |\n| [@sinclair/typebox](https://github.com/sinclairzx81/sinclair-typebox) | `0.34.47` | `0.34.52` |\n| [@tybys/wasm-util](https://github.com/toyobayashi/wasm-util) | `0.10.1` | `0.10.4` |\n| [@types/http-cache-semantics](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/http-cache-semantics) | `4.0.4` | `4.2.0` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.6` | `26.6.5` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |\n| [@ungap/structured-clone](https://github.com/ungap/structured-clone) | `1.3.0` | `1.4.0` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.4` | `3.0.5` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.3` | `2.11.28` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.6` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.16` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.7` | `4.29.3` |\n| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001806` | `1.0.30001815` |\n| [ci-info](https://github.com/watson/ci-info) | `4.3.1` | `4.4.0` |\n| [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.0` | `2.3.0` |\n| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.47.0` | `3.50.0` |\n| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |\n| [dedent](https://github.com/dmnd/dedent) | `1.7.1` | `1.7.2` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.396` | `1.5.452` |\n| [engine.io](https://github.com/socketio/socket.io) | `6.6.9` | `6.6.11` |\n| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |\n| [fb-watchman](https://github.com/facebook/watchman) | `2.0.2` | `2.0.4` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [filelist](https://github.com/mde/filelist) | `1.0.4` | `1.0.6` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [fsevents](https://github.com/fsevents/fsevents) | `2.3.2` | `2.3.3` |\n| [gaxios](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gaxios) | `7.1.3` | `7.3.1` |\n| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.5.0` | `11.2.0` |\n| [gcp-metadata](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gcp-metadata) | `8.1.2` | `9.1.0` |\n| [google-gax](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gax) | `5.0.6` | `6.12.1` |\n| [google-logging-utils](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/logging-utils) | `1.1.3` | `2.0.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [http-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/http-proxy-agent) | `5.0.0` | `7.0.2` |\n| [is-core-module](https://github.com/inspect-js/is-core-module) | `2.16.1` | `2.17.0` |\n| [minipass](https://github.com/isaacs/minipass) | `7.1.2` | `7.1.3` |\n| [moo](https://github.com/tjvr/moo) | `0.5.2` | `0.5.3` |\n| [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.51` | `2.0.58` |\n| [pako](https://github.com/nodeca/pako) | `2.1.0` | `2.2.0` |\n| [playwright-core](https://github.com/microsoft/playwright) | `1.57.0` | `1.64.0` |\n| [proto3-json-serializer](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/proto3-json-serializer-nodejs) | `3.0.4` | `4.0.2` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.6.5` | `7.6.6` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [pump](https://github.com/mafintosh/pump) | `3.0.3` | `3.0.4` |\n| [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.13` |\n| [retry-request](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/retry-request) | `8.0.2` | `9.0.2` |\n| [spdx-license-ids](https://github.com/jslicense/spdx-license-ids) | `3.0.22` | `3.0.24` |\n| [superagent](https://github.com/ladjs/superagent) | `10.3.0` | `10.4.1` |\n| [synckit](https://github.com/un-ts/synckit) | `0.11.11` | `0.11.13` |\n| [teeny-request](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/teeny-request) | `10.1.0` | `11.0.1` |\n| [undici-types](https://github.com/nodejs/undici) | `7.16.0` | `8.9.0` |\n| [unrs-resolver](https://github.com/unrs/unrs-resolver) | `1.11.1` | `1.12.2` |\n| [update-browserslist-db](https://github.com/browserslist/update-db) | `1.2.3` | `1.3.4` |\n| [validator](https://github.com/validatorjs/validator.js) | `13.15.26` | `13.15.35` |\n| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` |\n| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `17.7.3` |\n\n\nUpdates `@google-cloud/translate` from 9.3.0 to 10.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-node/releases\"\u003e@​google-cloud/translate's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esecurity-center: v10.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/security-center-v10.1.1...security-center-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-10-08)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate API sources and regenerate (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9554\"\u003e#9554\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/8b6837a9757cc8bb281e0611b173cb19b58d4ac5\"\u003e8b6837a\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-translate/CHANGELOG.md\"\u003e@​google-cloud/translate's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.1.1...translate-v10.2.0\"\u003e10.2.0\u003c/a\u003e (2026-10-07)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etools:\u003c/strong\u003e Add individual CLI flags for Bun monkey patches (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9533\"\u003e#9533\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/a5eec894b054e0605fd8e79591a88393bb2697c6\"\u003ea5eec89\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.1.0...translate-v10.1.1\"\u003e10.1.1\u003c/a\u003e (2026-09-28)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate package.json and .gitignore across packages (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9378\"\u003e#9378\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/9c54cece565b5cbcae63a9856c1ef3448307d46e\"\u003e9c54cec\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.0.1...translate-v10.1.0\"\u003e10.1.0\u003c/a\u003e (2026-09-08)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade librarian gapic-generator-typescript to v5.2.0 (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/c249594c6ef41e4b36f1ef8869341a4c98c092b0\"\u003ec249594\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v10.0.0...translate-v10.0.1\"\u003e10.0.1\u003c/a\u003e (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade generated package dependencies to Node 22 version for all core, handwritten and generated dependencies (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9129\"\u003e#9129\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/5f0191225b96dabe41daa9f9d57a8c72749bf62d\"\u003e5f01912\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.2...translate-v10.0.0\"\u003e10.0.0\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade minimum Node.js version to 22 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9026\"\u003e#9026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade minimum Node.js version to 22 (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/9026\"\u003e#9026\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/1ed703f36743d61fb302b42a6cee53c07034b2fe\"\u003e1ed703f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.1...translate-v9.4.2\"\u003e9.4.2\u003c/a\u003e (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e Remove vulnerable dependency \u003ccode\u003euuid\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/googleapis/google-cloud-node/issues/8120\"\u003e#8120\u003c/a\u003e) (\u003ca href=\"https://github.com/googleapis/google-cloud-node/commit/3ec901e2cb45859adfbe914bc0385e6cdf2f2e9a\"\u003e3ec901e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/googleapis/google-cloud-node/compare/translate-v9.4.0...translate-v9.4.1\"\u003e9.4.1\u003c/a\u003e (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/googleapis/google-cloud-node/commits/admin-v10.2.0/packages/google-cloud-translate\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@playwright/test` from 1.57.0 to 1.64.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/playwright/releases\"\u003e@​playwright/test's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.64.0\u003c/h2\u003e\n\u003ch2\u003e🧰 WebMCP\u003c/h2\u003e\n\u003cp\u003eNew \u003ca href=\"https://playwright.dev/docs/api/class-page#page-webmcp\"\u003epage.webmcp\u003c/a\u003e and \u003ca href=\"https://playwright.dev/docs/api/class-frame#frame-webmcp\"\u003eframe.webmcp\u003c/a\u003e give access to the tools that a page registers through the experimental \u003ca href=\"https://playwright.dev/docs/api/class-webmcp\"\u003eWebMCP\u003c/a\u003e browser API, so you can test them like any other part of your app:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });\r\nconst page = await browser.newPage();\r\nawait page.goto('https://example.com');\r\n\u003cp\u003efor (const tool of await page.webmcp.tools())\nconsole.log(tool.name, tool.description);\u003c/p\u003e\n\u003cp\u003econst result = await page.webmcp.callTool('add', { a: 2, b: 40 });\nconsole.log(result.content[0].text); // \u0026quot;42\u0026quot;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://playwright.dev/docs/getting-started-mcp\"\u003ePlaywright MCP\u003c/a\u003e also supports WebMCP by default, with page-defined tools offered to the agent as \u003ccode\u003ewebmcp_\u0026lt;tool\u0026gt;\u003c/code\u003e. Pass \u003ccode\u003e--no-webmcp\u003c/code\u003e to opt out.\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://playwright.dev/docs/getting-started-cli\"\u003e\u003ccode\u003eplaywright-cli\u003c/code\u003e\u003c/a\u003e exposes them as well:\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003eplaywright-cli webmcp-list\r\nplaywright-cli webmcp-call search_catalog --params '{\u0026quot;query\u0026quot;:\u0026quot;cats\u0026quot;}'\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003e🎬 Better videos\u003c/h2\u003e\n\u003cp\u003eVideos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003e// playwright.config.ts\r\nimport { defineConfig } from '@playwright/test';\r\n\u003cp\u003eexport default defineConfig({\nuse: {\nvideo: {\nmode: 'on',\nsize: { width: 1920, height: 1080 },\nfps: 60,\nshow: {\nactions: {\nstyle: {\npoint: 'width: 20px; height: 20px; border-radius: 50%; background: red',\nhighlight: 'outline: 2px solid \u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/333\"\u003e#333\u003c/a\u003e; background: rgba(0, 128, 255, .15)',\ntitle: 'font-size: 16px',\n},\n},\n},\n},\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/606ecd8b34bac100db32561b6278ffd76e5eb3cd\"\u003e\u003ccode\u003e606ecd8\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43192\"\u003e#43192\u003c/a\u003e): fix(locators): parse locators the way the client API bui...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/e4f872c79530583300185d3e4aa9689e2f85d0b0\"\u003e\u003ccode\u003ee4f872c\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43188\"\u003e#43188\u003c/a\u003e): feat(api): expose asLocatorDescription via LocalUtils fo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/f6a439e6f496f75d8e8b687116eef8c21316aa1f\"\u003e\u003ccode\u003ef6a439e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43189\"\u003e#43189\u003c/a\u003e): docs(webmcp): expose WebMCP to all languages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/e2335c30f16196a96f81c099598803ca74f9120c\"\u003e\u003ccode\u003ee2335c3\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43174\"\u003e#43174\u003c/a\u003e): fix(mcp): do not close the browser twice when the client...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/d2a436e0111091ba99836fa6711de28201606cfc\"\u003e\u003ccode\u003ed2a436e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43163\"\u003e#43163\u003c/a\u003e): Revert \u0026quot;fix(blob): do not remove existing reports from o...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/a0c4b5efc965577e19f5ebfdcc27f384d3058783\"\u003e\u003ccode\u003ea0c4b5e\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43175\"\u003e#43175\u003c/a\u003e): feat(api): return language-specific locator code from re...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/3f7d535c7b69ff1997307dc304c3c8c76b51179d\"\u003e\u003ccode\u003e3f7d535\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43131\"\u003e#43131\u003c/a\u003e): docs: fix broken C# samples in API docs and handles guide\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/1cde64f74a0f85304f2f4091a46670bf9a3e0dc3\"\u003e\u003ccode\u003e1cde64f\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43170\"\u003e#43170\u003c/a\u003e): fix(locators): parse mixed role options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/8851e7296508ae50cd1f822e50d1e4fa92eab218\"\u003e\u003ccode\u003e8851e72\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43171\"\u003e#43171\u003c/a\u003e): fix(locators): parse JavaScript escapes and regex classes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/playwright/commit/dcc50654872510b630c73ec6eba1fb3d625c735e\"\u003e\u003ccode\u003edcc5065\u003c/code\u003e\u003c/a\u003e cherry-pick(\u003ca href=\"https://redirect.github.com/microsoft/playwright/issues/43172\"\u003e#43172\u003c/a\u003e): fix(locator): parse within and getByRef locators\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/playwright/compare/v1.57.0...v1.64.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.1 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.18.1...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dotenv` from 17.2.3 to 18.0.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md\"\u003edotenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7\"\u003e18.0.7\u003c/a\u003e (2026-10-09)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat undefined settings like \u003ccode\u003equiet: true\u003c/code\u003e as null rather than falsey (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1070\"\u003e#1070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCLI should honor \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting in \u003ccode\u003e.env\u003c/code\u003e file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1071\"\u003e#1071\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.5...v18.0.6\"\u003e18.0.6\u003c/a\u003e (2026-10-06)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse smarter \u003ccode\u003eparseBoolean\u003c/code\u003e not Boolean() to fix override (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1069\"\u003e#1069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.4...v18.0.5\"\u003e18.0.5\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix missing typescript module declaration (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1068\"\u003e#1068\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove performance for large .env files (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1066\"\u003e#1066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.3...v18.0.4\"\u003e18.0.4\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eimport dotenv/config\u003c/code\u003e should default quiet: true (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1063\"\u003e#1063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.2...v18.0.3\"\u003e18.0.3\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch \u003ccode\u003eDOTENV_QUIET\u003c/code\u003e setting when inside .env file (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1059\"\u003e#1059\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.1...v18.0.2\"\u003e18.0.2\u003c/a\u003e (2026-09-21)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePatch additional edge cases for the fast parser (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1056\"\u003e#1056\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v18.0.0...v18.0.1\"\u003e18.0.1\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle file urls in config logging (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1054\"\u003e#1054\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.0\"\u003e18.0.0\u003c/a\u003e (2026-09-17)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eNEW: Dotenv now has a CLI. (\u003ca href=\"https://redirect.github.com/motdotla/dotenv/pull/1022\"\u003e#1022\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/295320751866efa323236c719cdc1b5306fa3de7\"\u003e\u003ccode\u003e2953207\u003c/code\u003e\u003c/a\u003e 18.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9944723d89e6f776897f171bfc6b945dfad23c57\"\u003e\u003ccode\u003e9944723\u003c/code\u003e\u003c/a\u003e make more readable for undefined -\u0026gt; null\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/d455db06a7b37acd8b240793a888efaba75885f4\"\u003e\u003ccode\u003ed455db0\u003c/code\u003e\u003c/a\u003e Merge branch 'master' of github.com:motdotla/dotenv\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/e411e021fc649cc449200f593b41e0a7fb07d93b\"\u003e\u003ccode\u003ee411e02\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/6237c356bf7b3e47d79b0c625e79c38c42b86773\"\u003e\u003ccode\u003e6237c35\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1070\"\u003e#1070\u003c/a\u003e from Utkarsh-Singhal-26/fix/ignore-undefined-config-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/9af8c280d9e5f80d330d3427dfa8261c5d99b489\"\u003e\u003ccode\u003e9af8c28\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/motdotla/dotenv/issues/1071\"\u003e#1071\u003c/a\u003e from himanshu748/fix-cli-env-quiet\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/c7161c6e18a59ed93b0e6548bc45ce9bd3af9e43\"\u003e\u003ccode\u003ec7161c6\u003c/code\u003e\u003c/a\u003e fix(cli): honor quiet settings loaded from .env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/39904662e1205caf24f257a3c840ecbdfdf99c10\"\u003e\u003ccode\u003e3990466\u003c/code\u003e\u003c/a\u003e fix: ignore undefined options so they don't mask DOTENV_* env settings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/5d7cc39e468b96cd7c82c02aaf74b3fdcacf1a4b\"\u003e\u003ccode\u003e5d7cc39\u003c/code\u003e\u003c/a\u003e 18.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/motdotla/dotenv/commit/750ba030e7840edee4b65dbf10a0d6e468a230e4\"\u003e\u003ccode\u003e750ba03\u003c/code\u003e\u003c/a\u003e changelog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/motdotla/dotenv/compare/v17.2.3...v18.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google-translate-api-x` from 10.7.2 to 10.7.3\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/1917916bfdaea75bf8202b8661e7c25f415b9efc\"\u003e\u003ccode\u003e1917916\u003c/code\u003e\u003c/a\u003e 10.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/363bea91ae7cdd56cb92a48475b850dddf2e1369\"\u003e\u003ccode\u003e363bea9\u003c/code\u003e\u003c/a\u003e clean up eslint config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/5f69e3c157aefb4f4e693afff0203ff12b397a57\"\u003e\u003ccode\u003e5f69e3c\u003c/code\u003e\u003c/a\u003e npm prune\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/7b95325afc1d93420ef970775708a5c431217b8d\"\u003e\u003ccode\u003e7b95325\u003c/code\u003e\u003c/a\u003e Update to latest eslint, fix required node version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/5f97c17a987a43cd539b43570851c19be09e0a4c\"\u003e\u003ccode\u003e5f97c17\u003c/code\u003e\u003c/a\u003e Update dev dependencies and fix test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/11dab7c7d494085ccab97830931f9e8114b31f4d\"\u003e\u003ccode\u003e11dab7c\u003c/code\u003e\u003c/a\u003e update singleTranslate japanese test with new expected translation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AidanWelch/google-translate-api/commit/f9d0e6a83a3563bf8ac77ff9163a8c6173462136\"\u003e\u003ccode\u003ef9d0e6a\u003c/code\u003e\u003c/a\u003e Don't enforce capitalization for batch translate test of several sentences wi...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/AidanWelch/google-translate-api/compare/v10.7.2...v10.7.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `helmet` from 8.1.0 to 8.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md\"\u003ehelmet's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.3.0 - 2026-07-11\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: improved performance by ~7% when there are no dynamic directives\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: improved error handling for invalid directive names\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: \u003ccode\u003euseDefaults: false\u003c/code\u003e with no directives is no longer valid, both at runtime and the type level\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: dynamically-computed directive values would \u003ccode\u003ethrow\u003c/code\u003e, not call \u003ccode\u003enext\u003c/code\u003e, when invalid\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eContent-Security-Policy\u003c/code\u003e: dynamically-computed directive value entries would \u003ccode\u003ethrow\u003c/code\u003e, not call \u003ccode\u003enext\u003c/code\u003e, when function threw\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.2.0 - 2026-05-21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eCross-Origin-Opener-Policy\u003c/code\u003e: support \u003ccode\u003enoopener-allow-popups\u003c/code\u003e. See \u003ca href=\"https://redirect.github.com/helmetjs/helmet/pull/522\"\u003e#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove error message when passing duplicate options\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/75f1a98ec3cf092cc985985efcc0479265c9fe32\"\u003e\u003ccode\u003e75f1a98\u003c/code\u003e\u003c/a\u003e 8.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/f03f70da21409f525f90418a049ae7222261e9a2\"\u003e\u003ccode\u003ef03f70d\u003c/code\u003e\u003c/a\u003e Update changelog for 8.3.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/a307fce3b8714e7dfddba6a6979317dc8bc2e373\"\u003e\u003ccode\u003ea307fce\u003c/code\u003e\u003c/a\u003e Fix capitalization in CSP package changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/5347b43be7e340f3cd3407ba2d156a771cf9c371\"\u003e\u003ccode\u003e5347b43\u003c/code\u003e\u003c/a\u003e Format default CSP in README for readability\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/9afc570f67615f48bf8634ea75ad5e0b204f856b\"\u003e\u003ccode\u003e9afc570\u003c/code\u003e\u003c/a\u003e CSP: fix middleware-specific README missing link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/266c95ca6541f0627e4622d0b6844c9e24108b85\"\u003e\u003ccode\u003e266c95c\u003c/code\u003e\u003c/a\u003e Minor speedups to project setups test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/7a4196c3d9f2efdaeada5e18243bd974262505ee\"\u003e\u003ccode\u003e7a4196c\u003c/code\u003e\u003c/a\u003e CSP: update package-specific changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/02716b4b7dc5099fe3c21bb1a89f954404632180\"\u003e\u003ccode\u003e02716b4\u003c/code\u003e\u003c/a\u003e CSP: improve performance when there are no dynamic directives\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/3f511ed75fa12dd456e5338dc7a9b578b5aafac1\"\u003e\u003ccode\u003e3f511ed\u003c/code\u003e\u003c/a\u003e CSP: move utility functions to separate file\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/helmetjs/helmet/commit/80338af26325af6d47b0cfd5a4a43a5be52c3973\"\u003e\u003ccode\u003e80338af\u003c/code\u003e\u003c/a\u003e CSP: disabling defaults with no directives is now an error\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/helmetjs/helmet/compare/v8.1.0...v8.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `i18n` from 0.15.3 to 0.15.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mashpie/i18n-node/releases\"\u003ei18n's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.15.4 - Maintenance\u003c/h2\u003e\n\u003ch1\u003eChanged\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003evalidate and normalize locale names in \u003ccode\u003egetStorageFilePath\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eCI runs on node 22 and 24, drops node 18/20 (EOL)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/e522e85624fd974d256581f151decb03bd704aed\"\u003e\u003ccode\u003ee522e85\u003c/code\u003e\u003c/a\u003e version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/83dc25b85ace0bf73e9109d02d96e61642ae9d79\"\u003e\u003ccode\u003e83dc25b\u003c/code\u003e\u003c/a\u003e ci: drop EOL Node 18/20 from matrix, pin pnpm 10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/a3e06a2227d55f21671d940933375671644cd8f2\"\u003e\u003ccode\u003ea3e06a2\u003c/code\u003e\u003c/a\u003e update supported versions in SECURITY.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mashpie/i18n-node/commit/91c86d8b50e42e3124d1430f30f1bec79234c645\"\u003e\u003ccode\u003e91c86d8\u003c/code\u003e\u003c/a\u003e validate and normalize locale in getStorageFilePath\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mashpie/i18n-node/compare/v.0.15.3...v0.15.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 18.2.3 to 18.2.9\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/fc3f3bcb58ce7c3d2e7645bc7b17f012a2e7649b\"\u003e\u003ccode\u003efc3f3bc\u003c/code\u003e\u003c/a\u003e 18.2.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/e7791cbaef3dcec74473e1320e44082d1037254b\"\u003e\u003ccode\u003ee7791cb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3152\"\u003e#3152\u003c/a\u003e from hapijs/chore/3151-cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/7363128f9b9a0b70e049cbed286bcc25c3be0ca9\"\u003e\u003ccode\u003e7363128\u003c/code\u003e\u003c/a\u003e chore: cleanup for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/03a95430c3ae1f89bcdf7e0e176f32fd0e833ae1\"\u003e\u003ccode\u003e03a9543\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e from carfeii/fix/messages-flat-code-proto-pollution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/5b8333c9177e08b4ef4ed02903c2d657084e7afb\"\u003e\u003ccode\u003e5b8333c\u003c/code\u003e\u003c/a\u003e Reject \u003cstrong\u003eproto\u003c/strong\u003e as a flat messages() code, closing a sibling of GHSA-gg4h-3h...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/e30b50e242c91ae9f54bf3c3be0e48a03a13cca0\"\u003e\u003ccode\u003ee30b50e\u003c/code\u003e\u003c/a\u003e 18.2.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1c9dede7376d84eeb89e0e4472e519f2dd323a4d\"\u003e\u003ccode\u003e1c9dede\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3149\"\u003e#3149\u003c/a\u003e from hapijs/chore/optimize-schema-creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/cdad986c2a0e5a180cced83eb06f984f6fd52691\"\u003e\u003ccode\u003ecdad986\u003c/code\u003e\u003c/a\u003e chore: optimize schema creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/057dff24f9d0e9bf405501ac33618c5425d27484\"\u003e\u003ccode\u003e057dff2\u003c/code\u003e\u003c/a\u003e 18.2.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/a14051a8e67982901d7d24f376931aef38f2972b\"\u003e\u003ccode\u003ea14051a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3148\"\u003e#3148\u003c/a\u003e from hapijs/chore/optimize-large-arrays\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v18.2.3...v18.2.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongodb` from 7.0.0 to 7.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/node-mongodb-native/releases\"\u003emongodb's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.7.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.6.0...v7.7.0\"\u003e7.7.0\u003c/a\u003e (2026-09-28)\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Node.js team is pleased to announce version 7.7.0 of the \u003ccode\u003emongodb\u003c/code\u003e package!\u003c/p\u003e\n\u003ch2\u003eRelease Notes\u003c/h2\u003e\n\u003ch3\u003eOIDC authentication recovers from a failed token fetch\u003c/h3\u003e\n\u003cp\u003eA single failed OIDC token fetch, such as a cloud metadata endpoint timing out, used to leave the driver's token-fetch mutex holding that failure. Every later operation on the affected \u003ccode\u003eMongoClient\u003c/code\u003e then failed with the original error without attempting a new token fetch, and only restarting the process restored authentication. A failed token fetch now affects only the operation that triggered it.\u003c/p\u003e\n\u003ch3\u003eDriver dependencies updates\u003c/h3\u003e\n\u003cp\u003eDependency version changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebson\u003c/code\u003e: 7.2.0 -\u0026gt; 7.3.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emongodb-connection-string-url\u003c/code\u003e: 7.0.1 -\u0026gt; 7.0.2\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emongodb-js/saslprep\u003c/code\u003e: 1.4.11 -\u0026gt; 1.5.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7670:\u003c/strong\u003e update dependencies, including next BSON minor (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5034\"\u003e#5034\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/995edbf636bb449c3041a15edda9f9fbd88fb939\"\u003e995edbf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7858:\u003c/strong\u003e re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e7e953ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://docs.mongodb.com/drivers/node/current/\"\u003eReference\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://mongodb.github.io/node-mongodb-native/7.7/\"\u003eAPI\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/blob/v7.7.0/HISTORY.md\"\u003eChangelog\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eWe invite you to try the \u003ccode\u003emongodb\u003c/code\u003e library immediately, and report any issues to the \u003ca href=\"https://jira.mongodb.org/projects/NODE\"\u003eNODE project\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003ev7.6.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.5.0...v7.6.0\"\u003e7.6.0\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003cp\u003eThe MongoDB Node.js team is pleased to announce version 7.6.0 of the \u003ccode\u003emongodb\u003c/code\u003e package!\u003c/p\u003e\n\u003ch2\u003eRelease Notes\u003c/h2\u003e\n\u003ch3\u003eSupport for MongoDB 4.2 is removed\u003c/h3\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!WARNING]\nWhen the driver connects to a MongoDB server of version 4.2 or less, it will now throw an error.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eHTTP proxy support for KMS requests in CSFLE and Queryable Encryption\u003c/h3\u003e\n\u003cp\u003eIn-use encryption can now route KMS requests through an HTTP proxy. Set \u003ccode\u003ekmsConnectCallback\u003c/code\u003e on your \u003ccode\u003eClientEncryption\u003c/code\u003e or auto-encryption options to control how the driver connects to a KMS host. The callback receives the target \u003ccode\u003ehost\u003c/code\u003e and \u003ccode\u003eport\u003c/code\u003e and returns a connected socket (for example, a tunnel\nopened with HTTP CONNECT); the driver then performs the KMS TLS handshake over that socket using the provider's configured TLS options. This unblocks CSFLE and Queryable Encryption in environments that require an HTTP forward proxy for outbound KMS traffic, which the existing SOCKS5 \u003ccode\u003eproxyOptions\u003c/code\u003e does not cover.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md\"\u003emongodb's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.6.0...v7.7.0\"\u003e7.7.0\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7670:\u003c/strong\u003e update dependencies, including next BSON minor (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5034\"\u003e#5034\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/995edbf636bb449c3041a15edda9f9fbd88fb939\"\u003e995edbf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7858:\u003c/strong\u003e re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e7e953ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.5.0...v7.6.0\"\u003e7.6.0\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7546:\u003c/strong\u003e add HTTP Proxy support for QE \u0026amp; CSFLE (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5007\"\u003e#5007\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3366c21a6311e02f1be91da982f9b93d3cce99a0\"\u003e3366c21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7547:\u003c/strong\u003e bump minimum support server/wire versions to '4.4' \u0026amp; '9' respectively (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4994\"\u003e#4994\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3d97028b63c51345aaa2852ed4c467dc21b972bd\"\u003e3d97028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7624:\u003c/strong\u003e support baseBackoffMS and update client backpressure backoff (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5020\"\u003e#5020\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/560837b9a7e76d21cf1baaef894e9301bab0b264\"\u003e560837b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7603:\u003c/strong\u003e emit dynamic \u003ccode\u003eimport('os')\u003c/code\u003e via \u003ccode\u003etsconfig\u003c/code\u003e  (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4992\"\u003e#4992\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/52f5e61c8a439f9284c82f72357c376783f055b4\"\u003e52f5e61\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7660:\u003c/strong\u003e serialize bulk write documents a single time (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4999\"\u003e#4999\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/1217aa1c28a5071f765b69e98a0d6cc5fbc02c87\"\u003e1217aa1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.4.0...v7.5.0\"\u003e7.5.0\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7537:\u003c/strong\u003e promote QE string queries (prefix/suffix/substring) (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4996\"\u003e#4996\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/dc4900c36207d70b718c6fc013c5233ceb9f343c\"\u003edc4900c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7411:\u003c/strong\u003e iterate all servers on close (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4967\"\u003e#4967\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/72c02969f49ebc239dd15ef3deaf9be15fbbb94f\"\u003e72c0296\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.3.0...v7.4.0\"\u003e7.4.0\u003c/a\u003e (2026-06-25)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7634:\u003c/strong\u003e remove experimental tag from async dispose methods (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4976\"\u003e#4976\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/43ce3ebb701bf24af797d24e81788b576dccf1a9\"\u003e43ce3eb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNODE-7549:\u003c/strong\u003e send afterClusterTime on writes in causally-consistent sessions (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/4963\"\u003e#4963\u003c/a\u003e) (\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/3abfd263c5da2eaa5c223a0d5b9b440a1e1d4cf6\"\u003e3abfd26\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/20b001b661ae2cb407a13be0336e73580de4d26c\"\u003e\u003ccode\u003e20b001b\u003c/code\u003e\u003c/a\u003e chore(main): release 7.7.0 (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5039\"\u003e#5039\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/7e953ed5c5d02af5d732e0be6980ad6c5692a08c\"\u003e\u003ccode\u003e7e953ed\u003c/code\u003e\u003c/a\u003e fix(NODE-7858): re-arm OIDC callback lock after a rejection (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5056\"\u003e#5056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/73f49829eb26d79fcc6d67692571d28dee4d2116\"\u003e\u003ccode\u003e73f4982\u003c/code\u003e\u003c/a\u003e test(NODE-7831): widen duration bounds in flaky timing assertions (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5050\"\u003e#5050\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/cca92501ec1cb2930e9246a4d387e09f36b604eb\"\u003e\u003ccode\u003ecca9250\u003c/code\u003e\u003c/a\u003e chore(NODE-7856): bump drivers-evergreen-tools submodule to unblock CI (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5055\"\u003e#5055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/783d4892539b9f8bcb0216a04347e18f85d08471\"\u003e\u003ccode\u003e783d489\u003c/code\u003e\u003c/a\u003e chore(NODE-7771): align tags to match their versions on evergreen tasks (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5048\"\u003e#5048\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/af0bcb2fa4dc97f3a0ad6d03bc88c2e1ac077ad4\"\u003e\u003ccode\u003eaf0bcb2\u003c/code\u003e\u003c/a\u003e chore(NODE-7691): add optional section into PR template for bug fixes (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5042\"\u003e#5042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/83668e620841398713a0fa64b2ed3205fb965152\"\u003e\u003ccode\u003e83668e6\u003c/code\u003e\u003c/a\u003e chore(NODE-7694): Successful lint tasks can precede integration tests as a de...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/28e455de474d0d61404c648a5253031de3935c9b\"\u003e\u003ccode\u003e28e455d\u003c/code\u003e\u003c/a\u003e chore(NODE-7788): remove csot perf tests (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5044\"\u003e#5044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/dba1544add5b757532d853bad9389369563359c8\"\u003e\u003ccode\u003edba1544\u003c/code\u003e\u003c/a\u003e chore(NODE-7805): restrict release_notes to PRs from this repository (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5043\"\u003e#5043\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mongodb/node-mongodb-native/commit/de31f12d03f7d7263c59935941a81c7afa52df3f\"\u003e\u003ccode\u003ede31f12\u003c/code\u003e\u003c/a\u003e chore: bump drivers-evergreen-tools (\u003ca href=\"https://redirect.github.com/mongodb/node-mongodb-native/issues/5047\"\u003e#5047\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mongodb/node-mongodb-native/compare/v7.0.0...v7.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mongodb since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `node-cron` from 4.2.1 to 4.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/node-cron/node-cron/releases\"\u003enode-cron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/node-cron/node-cron/compare/v4.5.0...v4.6.0\"\u003e4.6.0\u003c/a\u003e (2026-07-04)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd cron.shutdown(timeout?) for graceful process teardown (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/589\"\u003e#589\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/35f1a61ba7cef987f7ed342489d8d0f0220553b8\"\u003e35f1a61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd unref option for heartbeat timers (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/588\"\u003e#588\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/35cb140d9c2d790ff295d54fbe82f6eec9b27e33\"\u003e35cb140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eday-of-month:\u003c/strong\u003e Quartz-style W, L-n and ? modifiers (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/570\"\u003e#570\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/cbe379bce9d770c84328399dca514bd92a467c18\"\u003ecbe379b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eemit task:failed when a background daemon exits unexpectedly (\u003ca href=\"https://github.com/node-cron/node-cron/commit/7bd91d62d1472d52f9adbddfddc0c47458623080\"\u003e7bd91d6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport cron expression nicknames (\u003ca href=\"https://github.com/yearly\"\u003e\u003ccode\u003e@​yearly\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/daily\"\u003e\u003ccode\u003e@​daily\u003c/code\u003e\u003c/a\u003e, etc.) (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/579\"\u003e#579\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/6a6e14e43ab4ce5c21b52414a17e3e20311bd7bf\"\u003e6a6e14e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackground task state transition on stop/destroy without fork (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/584\"\u003e#584\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/9dbc6de269cf5855b0afc037fb4446ef9791d761\"\u003e9dbc6de\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclear jitter timeout on runner stop (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/583\"\u003e#583\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/28b8146dd164ea992e1d5a649756b2bba4e062c4\"\u003e28b8146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCommonJS type resolution (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/608\"\u003e#608\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/ee9d294e71e526edffa2a2f902cad71e1f570d44\"\u003eee9d294\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrect falied-\u0026gt;failed typo in daemon task error log (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/594\"\u003e#594\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/66c6961f2140d84cb71b101013abc170977297eb\"\u003e66c6961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrect shutdown listener typing that broke the build (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/595\"\u003e#595\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/7aac3adc22516faad054f2b3ef7362edf62e20f3\"\u003e7aac3ad\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ecorrelate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/607\"\u003e#607\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/0f039a94dcaf6221ea406221b1e7c5eb34a47c4b\"\u003e0f039a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edaemon serialized task state with wrong field name (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/587\"\u003e#587\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/688d465b82889f07f39dfef9170d808c1f40330e\"\u003e688d465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eexpand inverted ranges with wrap-around instead of silently swapping (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/602\"\u003e#602\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/a10ae53626f1cc6e426e23266423f5e334a6871e\"\u003ea10ae53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eharden cron.shutdown() teardown (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/598\"\u003e#598\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/a0b0d1ff9313d0f8532130e5fcb873f29f48fd1f\"\u003ea0b0d1f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ekill orphan child process on background task stop/destroy timeout (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/582\"\u003e#582\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/8179e105a02b91035bce441309c1cda12aaf4c4a\"\u003e8179e10\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emake concurrent background start() await the daemon and time out coordinator lookups (\u003ca href=\"https://redirect.github.com/node-cron/node-cron/issues/605\"\u003e#605\u003c/a\u003e) (\u003ca href=\"https://github.com/node-cron/node-cron/commit/446f03ae8f366683c43b186b93bcba5091a0...\n\n_Description has been truncated_","html_url":"https://github.com/sumitpraja27/TravelStay_Tours/pull/52","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sumitpraja27%2FTravelStay_Tours/issues/52","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/52/packages"}},{"old_version":"1.19.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-12T08:10:13.000Z","version_change":"1.19.0 → 1.20.0","issue":{"uuid":"5810466475","node_id":"PR_kwDOTmUOqM8AAAABH7D6HA","number":31,"state":"open","title":"chore(deps): bump the production-minor-patch group across 1 directory with 37 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T08:10:13.000Z","updated_at":"2026-10-12T08:10:16.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-minor-patch","update_count":37,"packages":[{"name":"@aws-sdk/client-bedrock-runtime","old_version":"3.1099.0","new_version":"3.1148.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@lobehub/icons","old_version":"5.15.0","new_version":"5.23.0","repository_url":"https://github.com/lobehub/lobe-icons"},{"name":"@modelcontextprotocol/sdk","old_version":"1.30.0","new_version":"1.32.1","repository_url":"https://github.com/modelcontextprotocol/typescript-sdk"},{"name":"@toon-format/toon","old_version":"4.1.0","new_version":"4.4.0","repository_url":"https://github.com/toon-format/toon"},{"name":"@xyflow/react","old_version":"12.11.2","new_version":"12.12.0","repository_url":"https://github.com/xyflow/xyflow"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"csv-stringify","old_version":"6.8.1","new_version":"6.9.0","repository_url":"https://github.com/adaltas/node-csv"},{"name":"fumadocs-core","old_version":"16.14.0","new_version":"16.16.2","repository_url":"https://github.com/fuma-nama/fumadocs"},{"name":"fumadocs-ui","old_version":"16.14.0","new_version":"16.16.2","repository_url":"https://github.com/fuma-nama/fumadocs"},{"name":"jose","old_version":"6.2.5","new_version":"6.2.12","repository_url":"https://github.com/panva/jose"},{"name":"js-yaml","old_version":"5.2.2","new_version":"5.4.3","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"jsdom","old_version":"30.0.1","new_version":"30.1.2","repository_url":"https://github.com/jsdom/jsdom"},{"name":"lucide-react","old_version":"1.28.0","new_version":"1.54.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"marked","old_version":"18.0.7","new_version":"18.1.0","repository_url":"https://github.com/markedjs/marked"},{"name":"material-symbols","old_version":"0.45.9","new_version":"0.48.0","repository_url":"https://github.com/marella/material-symbols"},{"name":"monaco-editor","old_version":"0.56.0","new_version":"0.57.0","repository_url":"https://github.com/microsoft/monaco-editor"},{"name":"next","old_version":"16.2.12","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"next-intl","old_version":"4.13.4","new_version":"4.14.9","repository_url":"https://github.com/amannn/next-intl"},{"name":"omniglyph","old_version":"1.3.1","new_version":"1.4.0","repository_url":"https://github.com/diegosouzapw/OmniGlyph"},{"name":"open","old_version":"11.0.0","new_version":"11.0.4","repository_url":"https://github.com/sindresorhus/open"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"pino-pretty","old_version":"13.1.3","new_version":"13.2.0","repository_url":"https://github.com/pinojs/pino-pretty"},{"name":"playwright","old_version":"1.62.1","new_version":"1.64.0","repository_url":"https://github.com/microsoft/playwright"},{"name":"react","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-is","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-reconciler","old_version":"0.33.0","new_version":"0.34.0","repository_url":"https://github.com/react/react"},{"name":"smol-toml","old_version":"1.7.1","new_version":"1.9.0","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"socks","old_version":"2.8.9","new_version":"2.8.10","repository_url":"https://github.com/JoshGlazebrook/socks"},{"name":"sql.js","old_version":"1.14.1","new_version":"1.14.2","repository_url":"https://github.com/sql-js/sql.js"},{"name":"tailwind-merge","old_version":"3.6.0","new_version":"3.7.0","repository_url":"https://github.com/dcastil/tailwind-merge"},{"name":"tsx","old_version":"4.23.1","new_version":"4.23.15","repository_url":"https://github.com/privatenumber/tsx"},{"name":"undici","old_version":"8.9.0","new_version":"8.11.2","repository_url":"https://github.com/nodejs/undici"},{"name":"ws","old_version":"8.21.1","new_version":"8.22.0","repository_url":"https://github.com/websockets/ws"},{"name":"zod","old_version":"4.4.3","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"zustand","old_version":"5.0.14","new_version":"5.0.15","repository_url":"https://github.com/pmndrs/zustand"},{"name":"@huggingface/transformers","old_version":"4.2.0","new_version":"4.3.1","repository_url":"https://github.com/huggingface/transformers.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-minor-patch group with 37 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1099.0` | `3.1148.0` |\n| [@lobehub/icons](https://github.com/lobehub/lobe-icons) | `5.15.0` | `5.23.0` |\n| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` |\n| [@toon-format/toon](https://github.com/toon-format/toon) | `4.1.0` | `4.4.0` |\n| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [csv-stringify](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify) | `6.8.1` | `6.9.0` |\n| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.16.2` |\n| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.14.0` | `16.16.2` |\n| [jose](https://github.com/panva/jose) | `6.2.5` | `6.2.12` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.2` | `5.4.3` |\n| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.2` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.54.0` |\n| [marked](https://github.com/markedjs/marked) | `18.0.7` | `18.1.0` |\n| [material-symbols](https://github.com/marella/material-symbols/tree/HEAD/material-symbols) | `0.45.9` | `0.48.0` |\n| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.56.0` | `0.57.0` |\n| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.4.0` |\n| [next-intl](https://github.com/amannn/next-intl) | `4.13.4` | `4.14.9` |\n| [omniglyph](https://github.com/diegosouzapw/OmniGlyph) | `1.3.1` | `1.4.0` |\n| [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.4` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` |\n| [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.64.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |\n| [react-is](https://github.com/react/react/tree/HEAD/packages/react-is) | `19.2.8` | `19.3.0` |\n| [react-reconciler](https://github.com/react/react/tree/HEAD/packages/react-reconciler) | `0.33.0` | `0.34.0` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.9.0` |\n| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.9` | `2.8.10` |\n| [sql.js](https://github.com/sql-js/sql.js) | `1.14.1` | `1.14.2` |\n| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |\n| [undici](https://github.com/nodejs/undici) | `8.9.0` | `8.11.2` |\n| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.22.0` |\n| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |\n| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |\n| [@huggingface/transformers](https://github.com/huggingface/transformers.js) | `4.2.0` | `4.3.1` |\n\n\nUpdates `@aws-sdk/client-bedrock-runtime` from 3.1099.0 to 3.1148.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-bedrock-runtime's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1148.0\u003c/h2\u003e\n\u003ch4\u003e3.1148.0(2026-10-08)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-sesv2:\u003c/strong\u003e  SESV2 DEED - Documentation Update (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d227df4561aa503abf0b9c20c5840fd9923bd15\"\u003e3d227df4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pi:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1d99c7c808f4092b0eaef26b1edde32d1dd9bbb0\"\u003e1d99c7c8\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-marketplace-agreement:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/404943ce029cf80ea99a9d8e1cbca176ebabaff8\"\u003e404943ce\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-emr-serverless:\u003c/strong\u003e  This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f9ed2f834c52b341e1423789206b61e4446ba83a\"\u003ef9ed2f83\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cost-explorer:\u003c/strong\u003e  Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/7e0afd115d8e342e51c0f26eeda045642deb0d64\"\u003e7e0afd11\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-guardduty:\u003c/strong\u003e  Added support for GuardDuty RDS Data Activity Monitoring (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/aa2000207f021c9a315ed8634a066f8738991d9b\"\u003eaa200020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-gamelift:\u003c/strong\u003e  Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/181218406de73dbd7a528b282d8cd1fc0d560d5a\"\u003e18121840\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-datazone:\u003c/strong\u003e  Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/37214f3f63a6d39a58b7cd4a34d7be3384fac8c7\"\u003e37214f3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-devops-agent:\u003c/strong\u003e  Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/55b389d1260095535d24440901bb37a7ebc4582b\"\u003e55b389d1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-security-ir:\u003c/strong\u003e  Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f4f6dfe5a3b215b726b5cc14784cba1d80afd725\"\u003ef4f6dfe5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cloudformation:\u003c/strong\u003e  CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/07e146a50091110686ca16c8867c117e914a468b\"\u003e07e146a5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-opensearch:\u003c/strong\u003e  This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/393fb01137d0cc7d99f5590356f867ae8c237560\"\u003e393fb011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda:\u003c/strong\u003e  AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c7696bfa5e04778bf7e253d70eff6ee6e07b5d5d\"\u003ec7696bfa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityhub:\u003c/strong\u003e  Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/f53e8a2ac0eb9d38456651ac504ff3ef963930c8\"\u003ef53e8a2a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-medialive:\u003c/strong\u003e  AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/e335e5dc0cadc7e5e180c19ab1acdd9ce90cc2d6\"\u003ee335e5dc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-eks:\u003c/strong\u003e  Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82f87e7c6bd3d55b8ee73f06b592d424d21cf4c8\"\u003e82f87e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-health:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/e2ffc014df0c87a3041f96f9a4215506a0571f74\"\u003ee2ffc014\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-budgets:\u003c/strong\u003e  Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/722512d1f8c05c76e0b1f8913cccfabbfb7891c9\"\u003e722512d1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-translate:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/41abffc025d334e51fa8a1ffbdfa217eced258f9\"\u003e41abffc0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/9dc9c38c16a2d9f0ed986541e9c0403817df6630\"\u003e9dc9c38c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-fms:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/bb5e227d58c184ca9518e3359a22faeafed7589e\"\u003ebb5e227d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-codeconnections:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5a0dceeb42b718df91fd5eca63393d5de689e379\"\u003e5a0dceeb\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-keyspaces:\u003c/strong\u003e  This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0f8c9874ab7aaef16cf1e2bd55a01110eee75502\"\u003e0f8c9874\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Include model field for suggested remediation steps as part of findings (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/50a65bf4623e8ff6cb1b90a942e45047b5f93c05\"\u003e50a65bf4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  use the declared checksum algorithm in workers (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8331\"\u003e#8331\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0317bb822abed1302aaae350a8bbfa40f60ef32d\"\u003e0317bb82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1148.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md\"\u003e@​aws-sdk/client-bedrock-runtime's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1147.0...v3.1148.0\"\u003e3.1148.0\u003c/a\u003e (2026-10-08)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-bedrock-runtime\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1bc04256c276089739faa71754dba4fde75e05aa\"\u003e\u003ccode\u003e1bc0425\u003c/code\u003e\u003c/a\u003e Publish v3.1148.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/clients/client-bedrock-runtime\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@lobehub/icons` from 5.15.0 to 5.23.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lobehub/lobe-icons/blob/master/CHANGELOG.md\"\u003e@​lobehub/icons's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.22.0...v5.23.0\"\u003eVersion 5.23.0\u003c/a\u003e\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eReleased on \u003cstrong\u003e2026-10-03\u003c/strong\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch4\u003e✨ Features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emisc\u003c/strong\u003e: Migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch4\u003eWhat's improved\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003emisc\u003c/strong\u003e: Migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components, closes \u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/427\"\u003e#427\u003c/a\u003e (\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/39250a2\"\u003e39250a2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"#readme-top\"\u003e\u003cimg src=\"https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square\" alt=\"\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.21.0...v5.22.0\"\u003eVersion 5.22.0\u003c/a\u003e\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003eReleased on \u003cstrong\u003e2026-10-01\u003c/strong\u003e\u003c!-- raw HTML omitted --\u003e\u003c/p\u003e\n\u003ch4\u003e✨ Features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eauto\u003c/strong\u003e: Auto build static icons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch4\u003eWhat's improved\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eauto\u003c/strong\u003e: Auto build static icons (\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/329f378\"\u003e329f378\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cp\u003e\u003ca href=\"#readme-top\"\u003e\u003cimg src=\"https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square\" alt=\"\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/82e641b4fece9d1028a127149af9ded00df5ac0c\"\u003e\u003ccode\u003e82e641b\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.23.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/39250a2cd02b4d1ee17537bc1b2568e69ffa8f79\"\u003e\u003ccode\u003e39250a2\u003c/code\u003e\u003c/a\u003e ✨ feat: migrate to \u003ccode\u003e@​lobehub/ui/\u003c/code\u003ebase-ui components (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/427\"\u003e#427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/79b551cf26aab9ea4ac701fb807160950a5b860f\"\u003e\u003ccode\u003e79b551c\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.22.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/0ced1eca2c275ed0c11890bddc5731ceac6688df\"\u003e\u003ccode\u003e0ced1ec\u003c/code\u003e\u003c/a\u003e chore: retire issue automation workflows (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/426\"\u003e#426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/329f378cbd1a88f45b60cd096b9111ce16f3ea39\"\u003e\u003ccode\u003e329f378\u003c/code\u003e\u003c/a\u003e ✨ feat(auto): Auto build static icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/22429012231bc321e10d28c61324cf8e638aca11\"\u003e\u003ccode\u003e2242901\u003c/code\u003e\u003c/a\u003e fix: isolate SVG definition IDs per icon instance (\u003ca href=\"https://redirect.github.com/lobehub/lobe-icons/issues/423\"\u003e#423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/5c1ecb4fb06b92519a39102482d4e8273f000422\"\u003e\u003ccode\u003e5c1ecb4\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.21.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/f0183a25c68fbe94a58ef9bd3bbc5956c82aa042\"\u003e\u003ccode\u003ef0183a2\u003c/code\u003e\u003c/a\u003e ✨ feat: map Composer models to the Cursor icon\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/951385e6e07a3e99ed8191be14207b9f144d9b3a\"\u003e\u003ccode\u003e951385e\u003c/code\u003e\u003c/a\u003e :bookmark: chore(release): v5.20.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lobehub/lobe-icons/commit/8196babdd3a5eacc8f00fb8823f991f9bb2bd85a\"\u003e\u003ccode\u003e8196bab\u003c/code\u003e\u003c/a\u003e ✨ feat: redesign the docs home and show guide pages in the sidebar\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lobehub/lobe-icons/compare/v5.15.0...v5.23.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/releases\"\u003e@​modelcontextprotocol/sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.32.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] docs: state the principles in CLAUDE.md by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2939\"\u003emodelcontextprotocol/typescript-sdk#2939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] docs: point the README at v2 and say what v1.x supports by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2942\"\u003emodelcontextprotocol/typescript-sdk#2942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2954\"\u003emodelcontextprotocol/typescript-sdk#2954\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.0...1.32.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.32.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eRedirects:\u003c/strong\u003e the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets \u003ccode\u003eredirectPolicy: 'follow'\u003c/code\u003e on \u003ccode\u003eStreamableHTTPClientTransport\u003c/code\u003e or \u003ccode\u003eSSEClientTransport\u003c/code\u003e. In browsers, a redirected request fails unless that option is set.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNew options, both off unless you set them:\u003c/strong\u003e \u003ccode\u003emaxToolInputElements\u003c/code\u003e on \u003ccode\u003eMcpServer\u003c/code\u003e limits the number of array elements and object members in a tool call's arguments. \u003ccode\u003eexpectedResource\u003c/code\u003e on \u003ccode\u003erequireBearerAuth\u003c/code\u003e accepts only tokens issued for this server (the token's audience).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(client): follow redirects only within the endpoint's origin by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2902\"\u003emodelcontextprotocol/typescript-sdk#2902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: point SECURITY.md at GitHub Security Advisories (v1.x) by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2910\"\u003emodelcontextprotocol/typescript-sdk#2910\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] examples: close idle sessions and cap the session map by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2914\"\u003emodelcontextprotocol/typescript-sdk#2914\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2925\"\u003emodelcontextprotocol/typescript-sdk#2925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2927\"\u003emodelcontextprotocol/typescript-sdk#2927\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by \u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] feat(auth): add expectedResource to requireBearerAuth by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2930\"\u003emodelcontextprotocol/typescript-sdk#2930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[v1.x] test(e2e): cover tools/call and prompts/get without arguments by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2931\"\u003emodelcontextprotocol/typescript-sdk#2931\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.32.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2935\"\u003emodelcontextprotocol/typescript-sdk#2935\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/raashish1601\"\u003e\u003ccode\u003e@​raashish1601\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2045\"\u003emodelcontextprotocol/typescript-sdk#2045\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.31.0...1.32.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.31.0\u003c/h2\u003e\n\u003ch2\u003eUpgrade notes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eStored OAuth tokens and client information now include an \u003ccode\u003eissuer\u003c/code\u003e field. Storage that rejects unknown fields needs to allow it.\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003eexpectedIssuer\u003c/code\u003e when constructing \u003ccode\u003eClientCredentialsProvider\u003c/code\u003e, \u003ccode\u003ePrivateKeyJwtProvider\u003c/code\u003e or \u003ccode\u003eStaticPrivateKeyJwtProvider\u003c/code\u003e. Constructing them without it is deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] Bind stored OAuth credentials to the authorization server that issued them by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2888\"\u003emodelcontextprotocol/typescript-sdk#2888\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.31.0 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2890\"\u003emodelcontextprotocol/typescript-sdk#2890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\"\u003ehttps://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.1...1.31.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.30.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by \u003ca href=\"https://github.com/maxisbey\"\u003e\u003ccode\u003e@​maxisbey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2717\"\u003emodelcontextprotocol/typescript-sdk#2717\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(auth): preserve resource URI without trailing slash (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968\"\u003e#1968\u003c/a\u003e) by \u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump version to 1.30.1 by \u003ca href=\"https://github.com/claude\"\u003e\u003ccode\u003e@​claude\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2848\"\u003emodelcontextprotocol/typescript-sdk#2848\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MukundaKatta\"\u003e\u003ccode\u003e@​MukundaKatta\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1972\"\u003emodelcontextprotocol/typescript-sdk#1972\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/ff07b001194fe60ee9deb2121cf119057565796d\"\u003e\u003ccode\u003eff07b00\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.1 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2954\"\u003e#2954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/8a74d504a9ac1250f209325536f2f6c443e04ae6\"\u003e\u003ccode\u003e8a74d50\u003c/code\u003e\u003c/a\u003e [v1.x] docs: point the README at v2 and say what v1.x supports (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/a8cf50360f1366ffee174ac337146657bad9be2c\"\u003e\u003ccode\u003ea8cf503\u003c/code\u003e\u003c/a\u003e [v1.x] docs: state the principles in CLAUDE.md (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/32549b00a9a808265f35a29f92fdf27fa4aac2ef\"\u003e\u003ccode\u003e32549b0\u003c/code\u003e\u003c/a\u003e chore: bump version to 1.32.0 (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2935\"\u003e#2935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/588d51dbe337000705890fad81e874eb080174c2\"\u003e\u003ccode\u003e588d51d\u003c/code\u003e\u003c/a\u003e [v1.x] test(e2e): cover tools/call and prompts/get without arguments (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2931\"\u003e#2931\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/5a0724d14cf34a27a3b070224d2996cdd611df9f\"\u003e\u003ccode\u003e5a0724d\u003c/code\u003e\u003c/a\u003e [v1.x] feat(auth): add expectedResource to requireBearerAuth (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2930\"\u003e#2930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ca0b62d93c6cb403b3b96122eff3a3140b84cc0\"\u003e\u003ccode\u003e0ca0b62\u003c/code\u003e\u003c/a\u003e [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/fd26801b3b387742fe24a90ed4b275dd6072209f\"\u003e\u003ccode\u003efd26801\u003c/code\u003e\u003c/a\u003e [v1.x] feat(server): add maxToolInputElements option to limit the number of e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/727075b5bbeb77fbea22041b36b72a73042160fa\"\u003e\u003ccode\u003e727075b\u003c/code\u003e\u003c/a\u003e [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/commit/0ff63772dae796f41578ace47f7c814f4d86fa24\"\u003e\u003ccode\u003e0ff6377\u003c/code\u003e\u003c/a\u003e [v1.x] examples: close idle sessions and cap the session map (\u003ca href=\"https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2914\"\u003e#2914\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/modelcontextprotocol/typescript-sdk/compare/1.30.0...1.32.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@toon-format/toon` from 4.1.0 to 4.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/toon-format/toon/releases\"\u003e@​toon-format/toon's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport spec v4.4  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/362\"\u003etoon-format/toon#362\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/236a7b9\"\u003e\u003c!-- raw HTML omitted --\u003e(236a7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep usage off stdout and split short option values  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/55483e6\"\u003e\u003c!-- raw HTML omitted --\u003e(55483)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuote a root string that starts with U+FEFF  -  by \u003ca href=\"https://github.com/Iams4kura\"\u003e\u003ccode\u003e@​Iams4kura\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/343\"\u003etoon-format/toon#343\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/0936414\"\u003e\u003c!-- raw HTML omitted --\u003e(09364)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecli\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eKeep the last duplicate key when decoding with \u003ccode\u003e--no-strict\u003c/code\u003e  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/353\"\u003etoon-format/toon#353\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/c6dd07a\"\u003e\u003c!-- raw HTML omitted --\u003e(c6dd0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edecode\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eThree decoder cases that diverged from the spec  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/355\"\u003etoon-format/toon#355\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/4234208\"\u003e\u003c!-- raw HTML omitted --\u003e(42342)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFollow the spec 4.2 decoder rules  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/357\"\u003etoon-format/toon#357\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/b620f9c\"\u003e\u003c!-- raw HTML omitted --\u003e(b620f)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eencode\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eNormalize sparse array holes to null  -  by \u003ca href=\"https://github.com/Iams4kura\"\u003e\u003ccode\u003e@​Iams4kura\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/toon-format/toon/issues/335\"\u003etoon-format/toon#335\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/033d885\"\u003e\u003c!-- raw HTML omitted --\u003e(033d8)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.1...v4.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev4.1.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWrite CLI diagnostics to stderr so stdout carries results only  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/4675789\"\u003e\u003c!-- raw HTML omitted --\u003e(46757)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTerminate the last line of file output with a newline  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/c3d7c2f\"\u003e\u003c!-- raw HTML omitted --\u003e(c3d7c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTreat a tab-indented hash line as content, not a comment  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/6e822b3\"\u003e\u003c!-- raw HTML omitted --\u003e(6e822)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReject a raw string whose comment marker follows a byte-order mark  -  by \u003ca href=\"https://github.com/johannschopplich\"\u003e\u003ccode\u003e@​johannschopplich\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/toon-format/toon/commit/bde6eae\"\u003e\u003c!-- raw HTML omitted --\u003e(bde6e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.0...v4.1.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/92d7fc6d8af920afc99d1b6533cfc976c472fe7d\"\u003e\u003ccode\u003e92d7fc6\u003c/code\u003e\u003c/a\u003e chore: release v4.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/83241b8b584b33b3de678e2bbf5b83742760902d\"\u003e\u003ccode\u003e83241b8\u003c/code\u003e\u003c/a\u003e chore: upgrade dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/d0d8268694cd0d4894a8ae61c4c426cc33cf605a\"\u003e\u003ccode\u003ed0d8268\u003c/code\u003e\u003c/a\u003e docs: update the spec versions of the implementations (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/033d8851c579f175490ac8b020451fab072b5bef\"\u003e\u003ccode\u003e033d885\u003c/code\u003e\u003c/a\u003e fix(encode): normalize sparse array holes to null (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/335\"\u003e#335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/236a7b987c896d26d8c9510c2b7571049a3dceaa\"\u003e\u003ccode\u003e236a7b9\u003c/code\u003e\u003c/a\u003e feat: support spec v4.4 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/fee1f34c87b2a9bf80823bf42331001f0d80dbc4\"\u003e\u003ccode\u003efee1f34\u003c/code\u003e\u003c/a\u003e docs: bump toon-fu to spec 4.3 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/3ca0c23bc55587d8b4e7eda1cc2be93c6f1a2895\"\u003e\u003ccode\u003e3ca0c23\u003c/code\u003e\u003c/a\u003e chore: update \u003ccode\u003e@toon-format/spec\u003c/code\u003e to v4.2.1 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/109decf93e4023372e6b4e5ab74fa110096505aa\"\u003e\u003ccode\u003e109decf\u003c/code\u003e\u003c/a\u003e docs: add toon-fu to community implementations (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/356\"\u003e#356\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/a0b3c22fe826f7c48e67cd3e9482bc76ebe7efd5\"\u003e\u003ccode\u003ea0b3c22\u003c/code\u003e\u003c/a\u003e docs: add the v4.2 section to the v4 release page (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/359\"\u003e#359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/toon-format/toon/commit/12a1bac2e0749aae3d46c2fe13d9fd71f36a04f8\"\u003e\u003ccode\u003e12a1bac\u003c/code\u003e\u003c/a\u003e chore: update \u003ccode\u003e@toon-format/spec\u003c/code\u003e to v4.2.0 (\u003ca href=\"https://redirect.github.com/toon-format/toon/issues/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/toon-format/toon/compare/v4.1.0...v4.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@xyflow/react` from 12.11.2 to 12.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/xyflow/xyflow/releases\"\u003e@​xyflow/react's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.12.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Always fire onResizeEnd after onResizeStart\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Fix incorrect values during resize when shouldResize returns false\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.83\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5994\"\u003e#5994\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/2350158ba91e82823477b0a1160c0319e79d6172\"\u003e\u003ccode\u003e2350158\u003c/code\u003e\u003c/a\u003e - Reset all properties in provider store when unmounting flow\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5997\"\u003e#5997\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e - Prevent attribution warning when pane is not rendered either\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.82\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/22e0be21507cfc319a97e30b88dd2668fd9086a8\"\u003e\u003ccode\u003e22e0be2\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.81\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5974\"\u003e#5974\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/8c429225b796f28c89c809ac1d4883ea44ae8c5b\"\u003e\u003ccode\u003e8c42922\u003c/code\u003e\u003c/a\u003e - Minimap still works after ReactFlow remounts\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5962\"\u003e#5962\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/cbf40b938f1651321198d3f1b2c1457c2b7145e4\"\u003e\u003ccode\u003ecbf40b9\u003c/code\u003e\u003c/a\u003e - Show log if user hides attribution in development\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5976\"\u003e#5976\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/3319ef4917c3d43a6f3cc035ba9850e5fe72e8d6\"\u003e\u003ccode\u003e3319ef4\u003c/code\u003e\u003c/a\u003e - Fix the \u003ccode\u003eMiniMap\u003c/code\u003e zooming out to include the origin when every node is hidden.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5955\"\u003e#5955\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/965ca7040445780c217c6e25ee5e566f0949e2f6\"\u003e\u003ccode\u003e965ca70\u003c/code\u003e\u003c/a\u003e - Fix \u003ccode\u003eMiniMap\u003c/code\u003e calling \u003ccode\u003euseCallback\u003c/code\u003e conditionally for \u003ccode\u003eonNodeClick\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​xyflow/react\u003c/code\u003e\u003ca href=\"https://github.com/12\"\u003e\u003ccode\u003e@​12\u003c/code\u003e\u003c/a\u003e.11.3\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5902\"\u003e#5902\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/393d95161802948a3c9cca55dde3d807e9a634f1\"\u003e\u003ccode\u003e393d951\u003c/code\u003e\u003c/a\u003e - Allow middle-mouse viewport panning to start from a selection rectangle.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5889\"\u003e#5889\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/ff126a06a57c341948407d7f66b2972e2627828a\"\u003e\u003ccode\u003eff126a0\u003c/code\u003e\u003c/a\u003e - Fix \u003ccode\u003eextent: 'parent'\u003c/code\u003e not immediately resolving when parent has \u003ccode\u003ewidth\u003c/code\u003e or \u003ccode\u003einitialWidth\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md\"\u003e@​xyflow/react's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.12.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Always fire onResizeEnd after onResizeStart\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5998\"\u003e#5998\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e - Fix incorrect values during resize when shouldResize returns false\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/xyflow/xyflow/commit/91a4adf4f901d2c59ed77486bc0d3ec6d3843423\"\u003e\u003ccode\u003e91a4adf\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.83\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.6\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5994\"\u003e#5994\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/2350158ba91e82823477b0a1160c0319e79d6172\"\u003e\u003ccode\u003e2350158\u003c/code\u003e\u003c/a\u003e - Reset all properties in provider store when unmounting flow\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5997\"\u003e#5997\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e - Prevent attribution warning when pane is not rendered either\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/0117cc9447b082369f238243d15327a5ac9c3dc3\"\u003e\u003ccode\u003e0117cc9\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.82\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.5\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/xyflow/xyflow/commit/22e0be21507cfc319a97e30b88dd2668fd9086a8\"\u003e\u003ccode\u003e22e0be2\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​xyflow/system\u003c/code\u003e\u003ca href=\"https://github.com/0\"\u003e\u003ccode\u003e@​0\u003c/code\u003e\u003c/a\u003e.0.81\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e12.11.4\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5974\"\u003e#5974\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/8c429225b796f28c89c809ac1d4883ea44ae8c5b\"\u003e\u003ccode\u003e8c42922\u003c/code\u003e\u003c/a\u003e - Minimap still works after ReactFlow remounts\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/xyflow/xyflow/pull/5962\"\u003e#5962\u003c/a\u003e \u003ca href=\"https://github.com/xyflow/xyflow/commit/cbf40b938f1651321198d3f1b2c1457c2b7145e4\"\u003e\u003ccode\u003ecbf40b9\u003c/code\u003e\u003c/a\u003e - Show log if user hides attribution in development\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/8716946b6b7f537a29049767f1a8d16c2965fe14\"\u003e\u003ccode\u003e8716946\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/9fd41fd4fc18a22b7c461da8888b2ab264a00a29\"\u003e\u003ccode\u003e9fd41fd\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/19f9c2ad98ac71e837d467edf66fea628fd87c55\"\u003e\u003ccode\u003e19f9c2a\u003c/code\u003e\u003c/a\u003e fix(react/store): reset defaultEdgeOptions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/2acefb5b4f3730b28f0480a107a887d35ed92b83\"\u003e\u003ccode\u003e2acefb5\u003c/code\u003e\u003c/a\u003e fix(react/store): reset functions \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5991\"\u003e#5991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/8f0a5d6429ab0ecb16f41b779be38acbdc38c53e\"\u003e\u003ccode\u003e8f0a5d6\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/286816c8368339aa0cd965f831e9dbc6ec9e7c74\"\u003e\u003ccode\u003e286816c\u003c/code\u003e\u003c/a\u003e chore(packages): bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/3319ef4917c3d43a6f3cc035ba9850e5fe72e8d6\"\u003e\u003ccode\u003e3319ef4\u003c/code\u003e\u003c/a\u003e fix(react): keep minimap bounds at the viewport when all nodes are hidden\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/b7186f335c827c58903ed07f9299a38ad3d22be0\"\u003e\u003ccode\u003eb7186f3\u003c/code\u003e\u003c/a\u003e fix(react): minimap still works after reactflow remounts \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5971\"\u003e#5971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/d8edc77821201d04743cbb75304df5bb5bc8cad8\"\u003e\u003ccode\u003ed8edc77\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5955\"\u003e#5955\u003c/a\u003e from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/xyflow/xyflow/commit/59b1a602034d25575498cdc7a5722f8546d0d941\"\u003e\u003ccode\u003e59b1a60\u003c/code\u003e\u003c/a\u003e Simplify node click handling in MiniMap component\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `csv-stringify` from 6.8.1 to 6.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/adaltas/node-csv/blob/master/packages/csv-stringify/CHANGELOG.md\"\u003ecsv-stringify's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.3...csv-stringify@6.9.0\"\u003e6.9.0\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e expose csv error and normalize_options (\u003ca href=\"https://github.com/adaltas/node-csv/commit/963388da88d150e0ab2dafa2ad4382917c25cc06\"\u003e963388d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e do not alter the source record when columns is set (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/504\"\u003e#504\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/041deff3f9b811e73ac0d151d00c605eaf2a00d6\"\u003e041deff\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve header cast context when eof is false (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/505\"\u003e#505\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/a38ef064a099cdac907cd170d028d8ced3fb1c52\"\u003ea38ef06\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve negative numeric values (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/510\"\u003e#510\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/0002d56f882eb386510ee725d318f06bfeccc9cc\"\u003e0002d56\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e preserve objects returned by cast functions (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/509\"\u003e#509\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/1742c9ff3386f9a20e3fdcf452322e75b3a19f1a\"\u003e1742c9f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e quote fields containing a carriage return (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/485\"\u003e#485\u003c/a\u003e) (\u003ca href=\"https://github.com/adaltas/node-csv/commit/d64d410b21cf126d410c79c9448b648531a2e8af\"\u003ed64d410\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.2...csv-stringify@6.8.3\"\u003e6.8.3\u003c/a\u003e (2026-08-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecsv-stringify:\u003c/strong\u003e quote every field matching a global quoted_match regexp (\u003ca href=\"https://redirect.github.com/adaltas/node-csv/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/adaltas/node-csv/compare/csv-stringify@6.8.1...csv-stringify@6.8.2\"\u003e6.8.2\u003c/a\u003e (2026-08-02)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package csv-stringify\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/594c6469c4a7376c1048d13c47859c2f91674206\"\u003e\u003ccode\u003e594c646\u003c/code\u003e\u003c/a\u003e chore(release): publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/9f041459c37f881ecf2f3a2610f7b76f5df89632\"\u003e\u003ccode\u003e9f04145\u003c/code\u003e\u003c/a\u003e build: latest dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/d64d410b21cf126d410c79c9448b648531a2e8af\"\u003e\u003ccode\u003ed64d410\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): quote fields containing a carriage return (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/485\"\u003e#485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/963388da88d150e0ab2dafa2ad4382917c25cc06\"\u003e\u003ccode\u003e963388d\u003c/code\u003e\u003c/a\u003e feat(csv-stringify): expose csv error and normalize_options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/041deff3f9b811e73ac0d151d00c605eaf2a00d6\"\u003e\u003ccode\u003e041deff\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): do not alter the source record when columns is set (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/504\"\u003e#504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/a38ef064a099cdac907cd170d028d8ced3fb1c52\"\u003e\u003ccode\u003ea38ef06\u003c/code\u003e\u003c/a\u003e fix(csv-stringify): preserve header cast context when eof is false (\u003ca href=\"https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-stringify/issues/505\"\u003e#505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/8d4173d6d8dbb375ba8699cfd1d83af93b921f80\"\u003e\u003ccode\u003e8d4173d\u003c/code\u003e\u003c/a\u003e build: latest dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/c8caa1ccd262151c7d11add8fb7b454ed1d447a9\"\u003e\u003ccode\u003ec8caa1c\u003c/code\u003e\u003c/a\u003e build: generate latest dist\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/3433750d78b890cb4c05c959af259e950c4ba473\"\u003e\u003ccode\u003e3433750\u003c/code\u003e\u003c/a\u003e test: eslint format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/adaltas/node-csv/commit/6c45c9b2f5aac96b2097229749a3521840cf1dc2\"\u003e\u003ccode\u003e6c45c9b\u003c/code\u003e\u003c/a\u003e build: remove npx usage in package scripts\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/adaltas/node-csv/commits/csv-stringify@6.9.0/packages/csv-stringify\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fumadocs-core` from 16.14.0 to 16.16.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fuma-nama/fumadocs/releases\"\u003efumadocs-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003efumadocs@16.16.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.2\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.2\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFocus inside the AI chat panel when opened\u003c/h3\u003e\n\u003cp\u003eThe \u003ccode\u003eaiChat\u003c/code\u003e panel turns visible as soon as it opens, so its input can take focus right away. It still hides only after the closing transition.\u003c/p\u003e\n\u003ch3\u003eCollapse the sidebar with \u003ccode\u003eCtrl + B\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eOn desktop, press \u003ccode\u003eCtrl + B\u003c/code\u003e (\u003ccode\u003e⌘ + B\u003c/code\u003e on macOS) to collapse or expand the sidebar, in layouts that support collapsing it. Like the theme hotkey, it is ignored while typing in an editable element, or when a dialog is opened.\u003c/p\u003e\n\u003ch3\u003eFix Spacious layout on Firefox mobile\u003c/h3\u003e\n\u003cp\u003eWhen scrolling in Firefox, the top edge of the page panel moved away from the navbar and table of contents bar, ending up in the middle of the page or off screen. It now stays below the bars, without relying on CSS anchor positioning.\u003c/p\u003e\n\u003ch3\u003eIgnore unknown values in tab groups\u003c/h3\u003e\n\u003cp\u003eTabs with a \u003ccode\u003egroupId\u003c/code\u003e, including code block tabs with \u003ccode\u003etab-group\u003c/code\u003e, applied persisted or shared values even when none of their tabs matched, for example after renaming a tab, or when tabs in the same group have different items. They then showed no content until a tab was clicked. Such values are now ignored.\u003c/p\u003e\n\u003ch2\u003efumadocs@16.16.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.1\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.1\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprove Spacious layout on mobile\u003c/h3\u003e\n\u003cp\u003eThe page sits in an inset panel on mobile too, while the navbar and table of contents bar stay on the outer surface.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe sidebar drawer floats as an inset panel, like the AI chat.\u003c/li\u003e\n\u003cli\u003eThe navbar and table of contents bar stay below the \u003ccode\u003e\u0026lt;Banner /\u0026gt;\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eLike the Docs layout, \u003ccode\u003e--fd-docs-row-3\u003c/code\u003e is the bottom of these bars, so API pages scroll their content below them.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003efumadocs@16.16.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​fumadocs/base-ui\u003c/code\u003e\u003ca href=\"https://github.com/16\"\u003e\u003ccode\u003e@​16\u003c/code\u003e\u003c/a\u003e.16.0\u003c/li\u003e\n\u003cli\u003efumadocs-core@16.16.0\u003c/li\u003e\n\u003cli\u003efumadocs-ui@16.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePlace AI chat in layouts\u003c/h3\u003e\n\u003cp\u003eDocs, Notebook, and Glass layouts accept an \u003ccode\u003eaiChat\u003c/code\u003e option, pass your chat as \u003ccode\u003eaiChat.panel\u003c/code\u003e and the layout places it beside the page on wide viewports, and floats it over the page on smaller ones.\u003c/p\u003e\n\u003cp\u003eYour chat component no longer needs layout-specific positioning, like targeting \u003ccode\u003e#nd-docs-layout\u003c/code\u003e or overriding \u003ccode\u003e--fd-right-width\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003eai\u003c/code\u003e feature of Fumadocs CLI now renders your docs layout from a client component at \u003ccode\u003eai/layout.tsx\u003c/code\u003e in your components directory, which passes the installed chat to \u003ccode\u003eaiChat\u003c/code\u003e. It supports Docs, Notebook, Glass, and Spacious layouts, and only adds a floating trigger to the layouts without their own.\u003c/p\u003e\n\u003ch3\u003eExport Glass layout as \u003ccode\u003eDocsLayout\u003c/code\u003e\u003c/h3\u003e\n\u003cp\u003eL...\n\n_Description has been truncated_","html_url":"https://github.com/foisalislambd/old-airoute/pull/31","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/foisalislambd%2Fold-airoute/issues/31","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/31/packages"}},{"old_version":"1.12.2","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-12T05:30:57.000Z","version_change":"1.12.2 → 1.20.0","issue":{"uuid":"5808854384","node_id":"PR_kwDOQ7Z8oc8AAAABH5yM2g","number":71,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 16 directories with 14 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T05:30:57.000Z","updated_at":"2026-10-12T05:31:28.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":14,"packages":[{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"next","old_version":"15.5.9","new_version":"15.5.27","repository_url":"https://github.com/vercel/next.js"},{"name":"axios","old_version":"1.12.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@redocly/cli","old_version":"1.34.1","new_version":"1.34.17","repository_url":"https://github.com/Redocly/redocly-cli"},{"name":"undici","old_version":"6.21.2","new_version":"6.27.0","repository_url":"https://github.com/nodejs/undici"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [next](https://github.com/vercel/next.js) | `15.5.9` | `15.5.27` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 4 updates in the /apps/cms directory: [js-yaml](https://github.com/nodeca/js-yaml), [axios](https://github.com/axios/axios), [@redocly/cli](https://github.com/Redocly/redocly-cli) and [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 5 updates in the /examples/auth/expo-social-auth directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.21.3` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/auth/hono-full directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [hono](https://github.com/honojs/hono) | `4.9.7` | `4.13.13` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/caching/with-cloudflare-workers-kv directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `removed` |\n| [undici](https://github.com/nodejs/undici) | `5.20.0` | `6.27.0` |\n\nBumps the npm_and_yarn group with 1 update in the /examples/clerk directory: [next](https://github.com/vercel/next.js).\nBumps the npm_and_yarn group with 6 updates in the /examples/realtime/nextjs-authorization-demo directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [next](https://github.com/vercel/next.js) | `14.2.4` | `16.4.0` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/slack-clone/nextjs-slack-clone directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/slack-clone/nextjs-slack-clone-dotenvx directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/user-management/expo-push-notifications directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.1` | `17.13.8` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/user-management/expo-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.22.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.1` | `17.13.8` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/user-management/nextjs-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 8 updates in the /examples/user-management/nuxt3-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [@fastify/busboy](https://github.com/fastify/busboy) | `2.1.1` | `removed` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.7` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.0.0` | `5.3.2` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.2` |\n| [undici](https://github.com/nodejs/undici) | `5.28.4` | `6.27.0` |\n\nBumps the npm_and_yarn group with 7 updates in the /examples/user-management/refine-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.7` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.8` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n| [figlet](https://github.com/patorjk/figlet.js) | `1.9.3` | `1.12.0` |\n\nBumps the npm_and_yarn group with 5 updates in the /examples/user-management/sveltekit-user-management directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [devalue](https://github.com/sveltejs/devalue) | `5.1.1` | `5.9.4` |\n| [undici](https://github.com/nodejs/undici) | `6.21.2` | `6.27.0` |\n\nBumps the npm_and_yarn group with 6 updates in the /examples/with-cloudflare-workers directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `1.34.1` | `1.34.17` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `removed` |\n| [undici](https://github.com/nodejs/undici) | `5.20.0` | `6.27.0` |\n\n\nUpdates `js-yaml` from 3.14.2 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 15.5.9 to 15.5.27\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.5.27\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev15.5.26\u003c/h2\u003e\n\u003cp\u003eThis release contains additional security hardening for \u003ccode\u003enext/og\u003c/code\u003e. For more information, check out \u003ca href=\"https://nextjs.org/blog/nextjs-security-update-september-22-2026\"\u003ehttps://nextjs.org/blog/nextjs-security-update-september-22-2026\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev15.5.25\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v15.5.24\"\u003ev15.5.24\u003c/a\u003e re-enabling AVIF Image Optimization when newer versions of \u003ccode\u003esharp\u003c/code\u003e are installed (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97954\"\u003e#97954\u003c/a\u003e).\u003c/p\u003e\n\u003ch2\u003ev15.5.24\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eCritical:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36\"\u003eUnauthenticated Remote Code Execution on windows-hosted servers\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-2xp9-vwfh-vxw4\"\u003eUnauthenticated Remote Code Execution in Image Optimization API when AVIF files are used\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/def7eff9063f79cf58610c15fe58dd78b967c885\"\u003e\u003ccode\u003edef7eff\u003c/code\u003e\u003c/a\u003e v15.5.27\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/52c94abdd2ea5f416f5e8353ea8a2edd3fe311b8\"\u003e\u003ccode\u003e52c94ab\u003c/code\u003e\u003c/a\u003e [lts-maintenance] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/219\"\u003e#219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/785f4c2397f25690edf02b5a9f1cd7deaa1abb6d\"\u003e\u003ccode\u003e785f4c2\u003c/code\u003e\u003c/a\u003e [lts-maintenance] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/197\"\u003e#197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/7217d63db316f1650cab9c2a15833155b540766c\"\u003e\u003ccode\u003e7217d63\u003c/code\u003e\u003c/a\u003e [lts-maintenance][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/d5979baa545099473b9fde8b6e03f06b3167242f\"\u003e\u003ccode\u003ed5979ba\u003c/code\u003e\u003c/a\u003e [lts-maintenance][ci] Remove PR creation from deploy test workflow (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99093\"\u003e#99093\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/812ae7db8453c0aa65859ea7b2810007e033487c\"\u003e\u003ccode\u003e812ae7d\u003c/code\u003e\u003c/a\u003e [lts-maintenance][test] Adjust deploy assertions for platform drift and the e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/6936da55033075528f0dfad8f2ec29550b8c9053\"\u003e\u003ccode\u003e6936da5\u003c/code\u003e\u003c/a\u003e v15.5.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b49b6ca47ed80a1a3601d63f7ed6c00355ca4bc1\"\u003e\u003ccode\u003eb49b6ca\u003c/code\u003e\u003c/a\u003e [maintenance-lts] Harden next/og SVG serialization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f391939d5ec8f1c32b339e902100987be0b6f959\"\u003e\u003ccode\u003ef391939\u003c/code\u003e\u003c/a\u003e [15.5.x][test] Disable deploy tests triggering bot challenge (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98132\"\u003e#98132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/013ee1d2f25326197453d129430a6da83b86426d\"\u003e\u003ccode\u003e013ee1d\u003c/code\u003e\u003c/a\u003e v15.5.25\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v15.5.9...v15.5.27\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.12.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@redocly/cli` from 1.34.1 to 1.34.17\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Redocly/redocly-cli/blob/@redocly/cli@1.34.17/docs/changelog.md\"\u003e@​redocly/cli's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/b0aaa23ff07a4a2fa8627faea2e022e4282cecbc\"\u003e\u003ccode\u003eb0aaa23\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2924\"\u003e#2924\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/504120419a72b5c684471478337ee3b45d8bfad3\"\u003e\u003ccode\u003e5041204\u003c/code\u003e\u003c/a\u003e fix: path traversal in the \u003ccode\u003esplit\u003c/code\u003e command (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2923\"\u003e#2923\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/e6baf41b436380f613a70e18e2fae9e42bb0a276\"\u003e\u003ccode\u003ee6baf41\u003c/code\u003e\u003c/a\u003e fix: fix $faker expression code execution vulnerablility (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/b82bd65335cf479d096191f9a245dcb0667440d5\"\u003e\u003ccode\u003eb82bd65\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/c160a58d16f4ca326ba38b97d20fde970d0a494c\"\u003e\u003ccode\u003ec160a58\u003c/code\u003e\u003c/a\u003e fix: update dependencies (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2920\"\u003e#2920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/ef56ebe2142390faca8780b4dfbcfe66b88ff33e\"\u003e\u003ccode\u003eef56ebe\u003c/code\u003e\u003c/a\u003e chore: update js-yaml to 4.2 (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2917\"\u003e#2917\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/1526df7dfa9d9910462868b4e6c2ff6703f89b27\"\u003e\u003ccode\u003e1526df7\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2837\"\u003e#2837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/de0cde819743ad4cb449449995b21394a8aa23ad\"\u003e\u003ccode\u003ede0cde8\u003c/code\u003e\u003c/a\u003e fix: do not crash on OAS3.2 description; apply npm audit fix (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2834\"\u003e#2834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/372109901eb40349cc2459425024389214b654f3\"\u003e\u003ccode\u003e3721099\u003c/code\u003e\u003c/a\u003e chore: 🔖 release new versions (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2790\"\u003e#2790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Redocly/redocly-cli/commit/17e040d035a9fccc7e8c9513a6a5435ac96517d3\"\u003e\u003ccode\u003e17e040d\u003c/code\u003e\u003c/a\u003e chore: update handlebars (\u003ca href=\"https://redirect.github.com/Redocly/redocly-cli/issues/2787\"\u003e#2787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Redocly/redocly-cli/compare/@redocly/cli@1.34.1...@redocly/cli@1.34.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​redocly/cli\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 6.21.2 to 6.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.27.0\u003c/h2\u003e\n\u003ch1\u003e⚠️ Security Release\u003c/h1\u003e\n\u003cp\u003eThis release line addresses \u003cstrong\u003e4 security advisories\u003c/strong\u003e.\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eAction required:\u003c/strong\u003e Upgrade to \u003cstrong\u003eundici 6.27.0\u003c/strong\u003e or later.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install undici@^6.27.0\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eNote on patched version:\u003c/strong\u003e the v6 fixes shipped in \u003cstrong\u003ev6.27.0\u003c/strong\u003e, not \u003ccode\u003e6.26.0\u003c/code\u003e\n— \u003ccode\u003ev6.26.0\u003c/code\u003e contains only the chunked-EOF fix (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e) and the version bump, none\nof the security fixes below.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThe v6 line is \u003cstrong\u003enot\u003c/strong\u003e affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g,\nGHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the\n8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).\u003c/p\u003e\n\u003ch2\u003eSummary\u003c/h2\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAdvisory\u003c/th\u003e\n\u003cth\u003eCVE\u003c/th\u003e\n\u003cth\u003eSeverity (CVSS)\u003c/th\u003e\n\u003cth\u003eFixed in\u003c/th\u003e\n\u003cth\u003eFix commit\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-12151\u003c/td\u003e\n\u003ctd\u003eHigh (7.5)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv\"\u003eGHSA-p88m-4jfj-68fv\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-9679\u003c/td\u003e\n\u003ctd\u003eModerate (5.9)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m\"\u003eGHSA-g8m3-5g58-fq7m\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-11525\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447\"\u003e\u003ccode\u003e25efa447\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52\"\u003eGHSA-35p6-xmwp-9g52\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003eCVE-2026-6733\u003c/td\u003e\n\u003ctd\u003eLow (3.7)\u003c/td\u003e\n\u003ctd\u003e6.27.0\u003c/td\u003e\n\u003ctd\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60\"\u003e\u003ccode\u003ef4c31d60\u003c/code\u003e\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003chr /\u003e\n\u003ch2\u003eHigh severity\u003c/h2\u003e\n\u003ch3\u003eWebSocket DoS via fragment count bypass — CVE-2026-12151\u003c/h3\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q\"\u003eGHSA-vxpw-j846-p89q\u003c/a\u003e\u003c/strong\u003e · CWE-400, CWE-770\n\u003cstrong\u003eFix:\u003c/strong\u003e \u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7\"\u003e\u003ccode\u003eb7f252e7\u003c/code\u003e\u003c/a\u003e \u003cem\u003eBackport WebSocket maxPayloadSize fixes\u003c/em\u003e (\u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5423\"\u003e#5423\u003c/a\u003e, backported to v6 in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5428\"\u003e#5428\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server can stream a large number of small or empty\ncontinuation frames. Undici enforced a limit on cumulative payload size but did\nnot limit the \u003cem\u003enumber\u003c/em\u003e of fragments per message, leading to unbounded memory\ngrowth and denial of service. All releases from 6.17.0 onward are affected.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAffected:\u003c/strong\u003e applications using \u003ccode\u003enew WebSocket(...)\u003c/code\u003e or \u003ccode\u003eWebSocketStream\u003c/code\u003e\nagainst untrusted endpoints.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eWorkaround:\u003c/strong\u003e none — upgrade is required.\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003ch2\u003eModerate severity\u003c/h2\u003e\n\u003ch3\u003eHTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/551138cbc1742c92242a68216167761075e8a82c\"\u003e\u003ccode\u003e551138c\u003c/code\u003e\u003c/a\u003e Bumped v6.27.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5431\"\u003e#5431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b7f252e7c0841418fb9d95cd297bdd9fad9d2a53\"\u003e\u003ccode\u003eb7f252e\u003c/code\u003e\u003c/a\u003e Backport WebSocket maxPayloadSize fixes to v7.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5423\"\u003e#5423\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5428\"\u003e#5428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/25efa447997f74d5881edd144525c3fd7db945a4\"\u003e\u003ccode\u003e25efa44\u003c/code\u003e\u003c/a\u003e fix(cookies): preserve values and parse SameSite strictly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/f4c31d60c42d0385bca6ad602c112706b0695212\"\u003e\u003ccode\u003ef4c31d6\u003c/code\u003e\u003c/a\u003e fix: guard idle socket validation to skip fresh sockets (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5400\"\u003e#5400\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/768beacd331786c6a1ca61dd81938fca041a45b5\"\u003e\u003ccode\u003e768beac\u003c/code\u003e\u003c/a\u003e Bumped v6.26.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5323\"\u003e#5323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/7917b254484132f848fb785afbc398b1cfba389f\"\u003e\u003ccode\u003e7917b25\u003c/code\u003e\u003c/a\u003e fix: validate EOF for chunked h1 responses (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5308\"\u003e#5308\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/3420499cad88e72e04972b7bb28dd9f2ec2638ac\"\u003e\u003ccode\u003e3420499\u003c/code\u003e\u003c/a\u003e Bumped v6.25.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5029\"\u003e#5029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/d7a1e55fbe9607e8b56a10b4be129ca63d16014b\"\u003e\u003ccode\u003ed7a1e55\u003c/code\u003e\u003c/a\u003e feat: add configurable maxPayloadSize for WebSocket (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/4955\"\u003e#4955\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/a9d1848fa18d351813e9563bb7653acf1e3c60ad\"\u003e\u003ccode\u003ea9d1848\u003c/code\u003e\u003c/a\u003e Do not mark v6.x releases as latest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/01265866974369f75f939109969097e45e72b1e1\"\u003e\u003ccode\u003e0126586\u003c/code\u003e\u003c/a\u003e Ignore local agent configuration files\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.21.2...v6.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for undici since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.2 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.2...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca hr...\n\n_Description has been truncated_","html_url":"https://github.com/Sin-Estres-dev/supabase/pull/71","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sin-Estres-dev%2Fsupabase/issues/71","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/71/packages"}},{"old_version":"1.15.0","new_version":"1.20.0","update_type":"minor","path":"/enygma_dvp","pr_created_at":"2026-10-12T02:31:33.000Z","version_change":"1.15.0 → 1.20.0","issue":{"uuid":"5807518404","node_id":"PR_kwDOQNYD388AAAABH4vsJw","number":50,"state":"closed","title":"Bump axios from 1.15.0 to 1.20.0 in /enygma_dvp","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-13T21:07:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-12T02:31:33.000Z","updated_at":"2026-10-13T21:07:23.000Z","time_to_close":153338,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.15.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/enygma_dvp","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.15.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.15.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/raylsnetwork/Enygma/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/raylsnetwork/Enygma/pull/50","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/raylsnetwork%2FEnygma/issues/50","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/50/packages"}},{"old_version":"1.17.0","new_version":"1.20.0","update_type":"minor","path":"/backend","pr_created_at":"2026-10-12T01:52:17.000Z","version_change":"1.17.0 → 1.20.0","issue":{"uuid":"5807236105","node_id":"PR_kwDOS2_Rzs8AAAABH4hrRQ","number":3,"state":"open","title":"chore(deps): bump axios from 1.17.0 to 1.20.0 in /backend","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T01:52:17.000Z","updated_at":"2026-10-12T01:56:59.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"axios","old_version":"1.17.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/backend","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.17.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.17.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.17.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TPAINN/ringvault/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/TPAINN/ringvault/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TPAINN%2Fringvault/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"1.10.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-11T08:47:07.000Z","version_change":"1.10.0 → 1.20.0","issue":{"uuid":"5799521557","node_id":"PR_kwDORpJxUs8AAAABHyozfg","number":35,"state":"open","title":"chore(deps): bump axios from 1.10.0 to 1.20.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T08:47:07.000Z","updated_at":"2026-10-11T08:48:02.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"axios","old_version":"1.10.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.10.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.10.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/extension/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/extension/35)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/extension/pull/35","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Fextension/issues/35","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/35/packages"}},{"old_version":"1.19.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-11T07:07:00.000Z","version_change":"1.19.0 → 1.20.0","issue":{"uuid":"5798854923","node_id":"PR_kwDOGVTvs88AAAABHyHxYQ","number":5475,"state":"open","title":"deps(deps): bump the webui-dependencies group across 1 directory with 24 updates","user":"dependabot[bot]","labels":["lang/javascript","dependencies","weekly-release"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T07:07:00.000Z","updated_at":"2026-10-11T07:08:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"webui-dependencies","update_count":24,"packages":[{"name":"@radix-ui/react-alert-dialog","old_version":"1.1.23","new_version":"1.1.24","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-dialog","old_version":"1.1.23","new_version":"1.2.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-dropdown-menu","old_version":"2.1.24","new_version":"2.1.25","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-select","old_version":"2.3.7","new_version":"2.3.8","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-slot","old_version":"1.3.3","new_version":"1.4.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-switch","old_version":"1.3.7","new_version":"1.3.8","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-tabs","old_version":"1.1.21","new_version":"1.1.22","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-toast","old_version":"1.2.23","new_version":"1.2.24","repository_url":"https://github.com/radix-ui/primitives"},{"name":"@radix-ui/react-tooltip","old_version":"1.2.16","new_version":"1.3.0","repository_url":"https://github.com/radix-ui/primitives"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"lucide-react","old_version":"1.28.0","new_version":"1.53.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"next","old_version":"16.3.3","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"react","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react","old_version":"19.2.18","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"react-dom","old_version":"19.2.8","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"tailwind-merge","old_version":"3.6.0","new_version":"3.7.0","repository_url":"https://github.com/dcastil/tailwind-merge"},{"name":"@types/node","old_version":"26.2.0","new_version":"26.6.4","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react","old_version":"19.2.18","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@typescript-eslint/eslint-plugin","old_version":"8.66.0","new_version":"8.71.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"@typescript-eslint/parser","old_version":"8.66.0","new_version":"8.71.1","repository_url":"https://github.com/typescript-eslint/typescript-eslint"},{"name":"eslint","old_version":"9.39.5","new_version":"10.12.0","repository_url":"https://github.com/eslint/eslint"},{"name":"eslint-config-next","old_version":"16.3.0","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"postcss","old_version":"8.5.26","new_version":"8.5.29","repository_url":"https://github.com/postcss/postcss"},{"name":"prettier","old_version":"3.9.6","new_version":"3.9.9","repository_url":"https://github.com/prettier/prettier"}],"path":null,"ecosystem":"npm"},"body":"Bumps the webui-dependencies group with 24 updates in the /webui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.23` | `1.1.24` |\n| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.23` | `1.2.0` |\n| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.24` | `2.1.25` |\n| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.7` | `2.3.8` |\n| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.4.0` |\n| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.7` | `1.3.8` |\n| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.21` | `1.1.22` |\n| [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast) | `1.2.23` | `1.2.24` |\n| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.3.0` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.53.0` |\n| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.4.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |\n| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.4` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |\n| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.66.0` | `8.71.1` |\n| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.66.0` | `8.71.1` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.12.0` |\n| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.0` | `16.4.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.29` |\n| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |\n\n\nUpdates `@radix-ui/react-alert-dialog` from 1.1.23 to 1.1.24\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md\"\u003e@​radix-ui/react-alert-dialog's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.1.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-dialog@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-dialog` from 1.1.23 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md\"\u003e@​radix-ui/react-dialog's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eFixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped \u003ccode\u003eFocusScope\u003c/code\u003e reclaimed focus, and its \u003ccode\u003eRemoveScroll\u003c/code\u003e only allowed scrolling within the modal content.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-focus-scope@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-dropdown-menu` from 2.1.24 to 2.1.25\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md\"\u003e@​radix-ui/react-dropdown-menu's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.1.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-menu@2.1.25\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-select` from 2.3.7 to 2.3.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md\"\u003e@​radix-ui/react-select's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.3.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where internal event handlers were still called on disabled \u003ccode\u003eSelect.Item\u003c/code\u003e elements. Consumer-provided event handlers still run, but Radix's own selection logic no longer fires for disabled items.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-focus-scope@1.2.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-direction@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-popper@1.3.8\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-collection@1.1.16\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-slot` from 1.3.3 to 1.4.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md\"\u003e@​radix-ui/react-slot's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eFixed compatibility issues with React Server Components.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-switch` from 1.3.7 to 1.3.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md\"\u003e@​radix-ui/react-switch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.3.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-use-size@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-tabs` from 1.1.21 to 1.1.22\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md\"\u003e@​radix-ui/react-tabs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.1.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where a focused element inside \u003ccode\u003eTabs.Content\u003c/code\u003e did not fire a blur event before the tab switched. \u003ccode\u003eTabs.Trigger\u003c/code\u003e now moves focus before the tab's state change.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-roving-focus@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-direction@1.1.5\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-toast` from 1.2.23 to 1.2.24\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md\"\u003e@​radix-ui/react-toast's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug where a paused \u003ccode\u003eToast\u003c/code\u003e would not auto-close after its \u003ccode\u003eduration\u003c/code\u003e changed while the timer was paused.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-collection@1.1.16\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@radix-ui/react-tooltip` from 1.2.16 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md\"\u003e@​radix-ui/react-tooltip's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded support for multiple \u003ccode\u003earia-describedby\u003c/code\u003e attributes.\u003c/li\u003e\n\u003cli\u003eUpdated dependencies: \u003ccode\u003e@radix-ui/react-slot@1.4.0\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-dismissable-layer@1.1.20\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-visually-hidden@1.2.12\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-primitive@2.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-presence@1.1.11\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-popper@1.3.8\u003c/code\u003e, \u003ccode\u003e@radix-ui/react-portal@1.1.18\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lucide-react` from 1.28.0 to 1.53.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lucide-icons/lucide/releases\"\u003elucide-react's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 1.53.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4961\"\u003elucide-icons/lucide#4961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4958\"\u003elucide-icons/lucide#4958\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(site): Fix reset button and rename absolute stroke width to non-scaling stroke by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4956\"\u003elucide-icons/lucide#4956\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4968\"\u003elucide-icons/lucide#4968\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the angular-deps group across 1 directory with 11 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4960\"\u003elucide-icons/lucide#4960\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(categories): Add description field to categories by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4909\"\u003elucide-icons/lucide#4909\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003egroceries\u003c/code\u003e icon by \u003ca href=\"https://github.com/rrod497\"\u003e\u003ccode\u003e@​rrod497\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4907\"\u003elucide-icons/lucide#4907\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003epen-tool\u003c/code\u003e icon by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4972\"\u003elucide-icons/lucide#4972\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added new \u003ccode\u003ehiking-stick\u003c/code\u003e icon by \u003ca href=\"https://github.com/kamilasw\"\u003e\u003ccode\u003e@​kamilasw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4711\"\u003elucide-icons/lucide#4711\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added scratch-blocks icon by \u003ca href=\"https://github.com/mc20000-01\"\u003e\u003ccode\u003e@​mc20000-01\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4969\"\u003elucide-icons/lucide#4969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003esoup\u003c/code\u003e and \u003ccode\u003esalad\u003c/code\u003e icons by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4971\"\u003elucide-icons/lucide#4971\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mc20000-01\"\u003e\u003ccode\u003e@​mc20000-01\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4969\"\u003elucide-icons/lucide#4969\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.52.0...1.53.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.52.0...1.53.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.52.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(icons): changed \u003ccode\u003ewifi-cog\u003c/code\u003e icon by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4952\"\u003elucide-icons/lucide#4952\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lucide-icons/lucide/compare/1.51.0...1.52.0\"\u003ehttps://github.com/lucide-icons/lucide/compare/1.51.0...1.52.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 1.51.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(site): persist icon customizer by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4944\"\u003elucide-icons/lucide#4944\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Upgrade to vite 8 by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4950\"\u003elucide-icons/lucide#4950\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003erugby-ball\u003c/code\u003e icon by \u003ca href=\"https://github.com/dev-mralph\"\u003e\u003ccode\u003e@​dev-mralph\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3496\"\u003elucide-icons/lucide#3496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump the react-deps group across 1 directory with 3 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4951\"\u003elucide-icons/lucide#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(react-native): stop forwarding arbitrary rest props to child shape elements by \u003ca href=\"https://github.com/cipherprofessor\"\u003e\u003ccode\u003e@​cipherprofessor\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4903\"\u003elucide-icons/lucide#4903\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(lucide-solid): add Vite and SolidStart integration fixtures by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4884\"\u003elucide-icons/lucide#4884\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add door-closed-cog icon by \u003ca href=\"https://github.com/ajaxjiang96\"\u003e\u003ccode\u003e@​ajaxjiang96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4905\"\u003elucide-icons/lucide#4905\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add text-align-justify-* icons by \u003ca href=\"https://github.com/HectorZaGa\"\u003e\u003ccode\u003e@​HectorZaGa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4942\"\u003elucide-icons/lucide#4942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4939\"\u003elucide-icons/lucide#4939\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): Upgrade to vitest 5 by \u003ca href=\"https://github.com/ericfennis\"\u003e\u003ccode\u003e@​ericfennis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4953\"\u003elucide-icons/lucide#4953\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003ewind-arrow-up\u003c/code\u003e icon by \u003ca href=\"https://github.com/jamesgpearce\"\u003e\u003ccode\u003e@​jamesgpearce\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4501\"\u003elucide-icons/lucide#4501\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(github/actions): move to daily release flow by \u003ca href=\"https://github.com/karsa-mistmere\"\u003e\u003ccode\u003e@​karsa-mistmere\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4911\"\u003elucide-icons/lucide#4911\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(\u003ccode\u003e@​lucide/solid\u003c/code\u003e): Support for Solid 2.0 RC by \u003ca href=\"https://github.com/davedbase\"\u003e\u003ccode\u003e@​davedbase\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4751\"\u003elucide-icons/lucide#4751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4954\"\u003elucide-icons/lucide#4954\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump nuxt from 4.4.8 to 4.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4949\"\u003elucide-icons/lucide#4949\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): added \u003ccode\u003earmenian-dram\u003c/code\u003e icon by \u003ca href=\"https://github.com/Elawphant\"\u003e\u003ccode\u003e@​Elawphant\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4456\"\u003elucide-icons/lucide#4456\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(icons): add \u003ccode\u003ekazakh-tenge\u003c/code\u003e icon by \u003ca href=\"https://github.com/hkayrad\"\u003e\u003ccode\u003e@​hkayrad\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4925\"\u003elucide-icons/lucide#4925\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-mralph\"\u003e\u003ccode\u003e@​dev-mralph\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/3496\"\u003elucide-icons/lucide#3496\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cipherprofessor\"\u003e\u003ccode\u003e@​cipherprofessor\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4903\"\u003elucide-icons/lucide#4903\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HectorZaGa\"\u003e\u003ccode\u003e@​HectorZaGa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/lucide-icons/lucide/pull/4942\"\u003elucide-icons/lucide#4942\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/98331e287029edeff0e04f269439884d060af703\"\u003e\u003ccode\u003e98331e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump the react-deps group across 1 directory with 3 updates (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4951\"\u003e#4951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/09aa9c5c62c3b4b519fbb8c9ce1c396cc12f4dae\"\u003e\u003ccode\u003e09aa9c5\u003c/code\u003e\u003c/a\u003e chore(deps): Upgrade to vite 8 (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4950\"\u003e#4950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/e042fec3b59b2bc36a07bcd8b433c1aedde1db29\"\u003e\u003ccode\u003ee042fec\u003c/code\u003e\u003c/a\u003e fix(packages): declare \u003ccode\u003e@types/react\u003c/code\u003e as an optional peer dependency (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4892\"\u003e#4892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/f06ac67e33d645c40b8ce19a0419c85c5d7dd751\"\u003e\u003ccode\u003ef06ac67\u003c/code\u003e\u003c/a\u003e chore(typchecking): More typecheck jobs for all packages (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4885\"\u003e#4885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/94e4cb9d9db5907053ebf3636a97c45529cf776b\"\u003e\u003ccode\u003e94e4cb9\u003c/code\u003e\u003c/a\u003e chore(dependencies): Update dependencies (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4806\"\u003e#4806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/99d25bdee231922e73e19525f57a585d1682fab2\"\u003e\u003ccode\u003e99d25bd\u003c/code\u003e\u003c/a\u003e feat(packages): extract icon build logic into \u003ccode\u003e@lucide/shared\u003c/code\u003e (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/75b55160aa9edd7095dfed1a6e3d88e66fb2b153\"\u003e\u003ccode\u003e75b5516\u003c/code\u003e\u003c/a\u003e chore(dev): upgrade ESLint to latest compatible stack (v10) (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4378\"\u003e#4378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lucide-icons/lucide/commit/0f8d48b266e7af1e2bab49ff12ab6ec0795ed204\"\u003e\u003ccode\u003e0f8d48b\u003c/code\u003e\u003c/a\u003e test(packages): updates unit test snapshots with face-slightly-smiling (\u003ca href=\"https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4676\"\u003e#4676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lucide-icons/lucide/commits/1.53.0/packages/lucide-react\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ccf8c15a42d1a7140cf569ac15bec3ccb0187e8f\"\u003e\u003ccode\u003eccf8c15\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b8c7c7f2f3222d133f2a64d9bb77cc83d68f8172\"\u003e\u003ccode\u003eb8c7c7f\u003c/code\u003e\u003c/a\u003e Improve static route error guidance (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99724\"\u003e#99724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react` from 19.2.8 to 19.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/releases\"\u003ereact's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e19.3.0 (September 9, 2026)\u003c/h2\u003e\n\u003cp\u003eBelow is a list of all new features, APIs, and bug fixes.\u003c/p\u003e\n\u003cp\u003eRead the \u003ca href=\"https://react.dev/blog/2026/09/09/react-19-3\"\u003eReact 19.3 release post\u003c/a\u003e for more information.\u003c/p\u003e\n\u003ch2\u003eNew React Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e: Adds \u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e and \u003ccode\u003eaddTransitionType\u003c/code\u003e APIs to power View Transition animations in React (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gaearon\"\u003e\u003ccode\u003e@​gaearon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/31975\"\u003e#31975\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31987\"\u003e#31987\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31996\"\u003e#31996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31999\"\u003e#31999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32001\"\u003e#32001\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32002\"\u003e#32002\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32028\"\u003e#32028\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32029\"\u003e#32029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32031\"\u003e#32031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32034\"\u003e#32034\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32038\"\u003e#32038\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32041\"\u003e#32041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32050\"\u003e#32050\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32090\"\u003e#32090\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32105\"\u003e#32105\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32254\"\u003e#32254\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32379\"\u003e#32379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32422\"\u003e#32422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32462\"\u003e#32462\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32540\"\u003e#32540\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32545\"\u003e#32545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32585\"\u003e#32585\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32599\"\u003e#32599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32611\"\u003e#32611\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32612\"\u003e#32612\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32617\"\u003e#32617\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32651\"\u003e#32651\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32653\"\u003e#32653\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32656\"\u003e#32656\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32664\"\u003e#32664\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32699\"\u003e#32699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32723\"\u003e#32723\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32734\"\u003e#32734\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32751\"\u003e#32751\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32752\"\u003e#32752\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32760\"\u003e#32760\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32761\"\u003e#32761\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32764\"\u003e#32764\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32772\"\u003e#32772\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32790\"\u003e#32790\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32819\"\u003e#32819\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32820\"\u003e#32820\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32822\"\u003e#32822\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32833\"\u003e#32833\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32849\"\u003e#32849\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33094\"\u003e#33094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33191\"\u003e#33191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33200\"\u003e#33200\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33206\"\u003e#33206\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33293\"\u003e#33293\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33331\"\u003e#33331\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33332\"\u003e#33332\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33357\"\u003e#33357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33362\"\u003e#33362\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33433\"\u003e#33433\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33576\"\u003e#33576\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34374\"\u003e#34374\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34450\"\u003e#34450\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34481\"\u003e#34481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34500\"\u003e#34500\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34502\"\u003e#34502\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34510\"\u003e#34510\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34511\"\u003e#34511\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34539\"\u003e#34539\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35567\"\u003e#35567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35564\"\u003e#35564\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35485\"\u003e#35485\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35380\"\u003e#35380\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35063\"\u003e#35063\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35060\"\u003e#35060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34676\"\u003e#34676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36917\"\u003e#36917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35337\"\u003e#35337\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35520\"\u003e#35520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFragment Refs: Add Refs to \u003ccode\u003e\u0026lt;Fragment /\u0026gt;\u003c/code\u003e to support composable platform behavior (\u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Dhakshin2007\"\u003e\u003ccode\u003e@​Dhakshin2007\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/chirokas\"\u003e\u003ccode\u003e@​chirokas\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/teamleaderleo\"\u003e\u003ccode\u003e@​teamleaderleo\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fallintoplace\"\u003e\u003ccode\u003e@​fallintoplace\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/32465\"\u003e#32465\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32613\"\u003e#32613\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32619\"\u003e#32619\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32654\"\u003e#32654\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32660\"\u003e#32660\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32682\"\u003e#32682\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32722\"\u003e#32722\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32813\"\u003e#32813\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32814\"\u003e#32814\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33056\"\u003e#33056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33058\"\u003e#33058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33093\"\u003e#33093\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34069\"\u003e#34069\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34103\"\u003e#34103\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34544\"\u003e#34544\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34545\"\u003e#34545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37062\"\u003e#37062\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37061\"\u003e#37061\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37060\"\u003e#37060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36047\"\u003e#36047\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36010\"\u003e#36010\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35642\"\u003e#35642\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35641\"\u003e#35641\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35637\"\u003e#35637\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35630\"\u003e#35630\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34935\"\u003e#34935\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37457\"\u003e#37457\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37408\"\u003e#37408\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37326\"\u003e#37326\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37251\"\u003e#37251\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37171\"\u003e#37171\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37169\"\u003e#37169\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37168\"\u003e#37168\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37167\"\u003e#37167\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37166\"\u003e#37166\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37165\"\u003e#37165\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37164\"\u003e#37164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37163\"\u003e#37163\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37162\"\u003e#37162\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37161\"\u003e#37161\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37160\"\u003e#37160\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37125\"\u003e#37125\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37063\"\u003e#37063\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew React DOM Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebrowser()\u003c/code\u003e: a new \u003ccode\u003ereact-dom\u003c/code\u003e API that returns a usable which errors during server rendering and resolves in the browser. \u003ccode\u003euse(browser())\u003c/code\u003e inside a \u003ccode\u003e\u0026lt;Suspense\u0026gt;\u003c/code\u003e boundary marks a subtree as browser-only without reporting a recoverable error (\u003ca href=\"https://github.com/gnoff\"\u003e\u003ccode\u003e@​gnoff\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37143\"\u003e#37143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37241\"\u003e#37241\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eAdded an \u003ccode\u003eonBrowserBailout\u003c/code\u003e option to the \u003ccode\u003ereact-dom/server\u003c/code\u003e APIs to observe when a subtree defers to the browser (\u003ca href=\"https://github.com/gnoff\"\u003e\u003ccode\u003e@​gnoff\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37193\"\u003e#37193\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNotable changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eEnable Trusted Types API integration (\u003ca href=\"https://github.com/rickhanlonii\"\u003e\u003ccode\u003e@​rickhanlonii\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35816\"\u003e#35816\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTransitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37290\"\u003e#37290\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded a DEV-only warning when a component appears to have been unblocked by calling \u003ccode\u003euse()\u003c/code\u003e conditionally (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37104\"\u003e#37104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37203\"\u003e#37203\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37491\"\u003e#37491\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAll Changes\u003c/h2\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFast Refresh Fixes\n\u003cul\u003e\n\u003cli\u003eFix Fast Refresh to find and remount edits to components wrapped behind \u003ccode\u003elazy()\u003c/code\u003e (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36965\"\u003e#36965\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh so edits to a \u003ccode\u003ememo()\u003c/code\u003e comparison function take effect (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36964\"\u003e#36964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh crash when an edit changes the kind of a component's type (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36963\"\u003e#36963\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUnify hot reload type resolution for Fast Refresh (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36962\"\u003e#36962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Fast Refresh to remount correctly when an edit changes the component kind (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36950\"\u003e#36950\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDouble invoke effects in StrictMode after Fast Refresh (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35962\"\u003e#35962\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePerformance Track Fixes\n\u003cul\u003e\n\u003cli\u003ePrevent crash when accessing \u003ccode\u003e$$typeof\u003c/code\u003e in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35679\"\u003e#35679\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle non-string function names in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse minus (\u003ccode\u003e-\u003c/code\u003e) instead of en dash for removed props in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35649\"\u003e#35649\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle arrays with bigints in deep objects in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35648\"\u003e#35648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't enumerate typed array props in Performance Tracks in DEV (\u003ca href=\"https://github.com/UditDewan\"\u003e\u003ccode\u003e@​UditDewan\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36913\"\u003e#36913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBail out of diffing wide objects and arrays in Performance Tracks (\u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34742\"\u003e#34742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear potentially large performance measures in DEV (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34803\"\u003e#34803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing else branch for renders with no props change in Performance Tracks (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34837\"\u003e#34837\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eActivity Fixes\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003euseSyncExternalStore\u003c/code\u003e missing store mutations that happened while an Activity tree was hidden (\u003ca href=\"https://github.com/sophiebits\"\u003e\u003ccode\u003e@​sophiebits\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/36947\"\u003e#36947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHide portal contents when an Activity is hidden (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35091\"\u003e#35091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent metadata hoisting in hidden \u003ccode\u003e\u0026lt;Activity\u0026gt;\u003c/code\u003e trees (\u003ca href=\"https://github.com/ronnakamoto\"\u003e\u003ccode\u003e@​ronnakamoto\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34983\"\u003e#34983\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent errors thrown inside a hidden Activity from escaping to the visible UI (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35074\"\u003e#35074\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't unhide a node if a direct parent Offscreen is still hidden (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/34821\"\u003e#34821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDon't show internal \u003ccode\u003e\u0026lt;Offscreen\u0026gt;\u003c/code\u003e component in error messages (\u003ca href=\"https://github.com/rickhanlonii\"\u003e\u003ccode\u003e@​rickhanlonii\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/35763\"\u003e#35763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eWarn in DEV when a component appears to have been unblocked by a conditional \u003ccode\u003euse()\u003c/code\u003e (\u003ca href=\"https://github.com/hoxyq\"\u003e\u003ccode\u003e@​hoxyq\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/37104\"\u003e#37104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37203\"\u003e#37203\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/37491\"\u003e#37491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRender transitions independently instead of entangling them into a single render (\u003ca href=\"https://github.com/acdlite\"\u003e\u003ccode\u003e@​acdlite\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://redirect.github.com/facebook/react/pull/37290\"\u003e#37290\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/blob/main/CHANGELOG.md\"\u003ereact's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e19.3.0 (September 9, 2026)\u003c/h2\u003e\n\u003ch3\u003eNew React Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e: Adds \u003ccode\u003e\u0026lt;ViewTransition /\u0026gt;\u003c/code\u003e and \u003ccode\u003eaddTransitionType\u003c/code\u003e APIs to power View Transition animations in React (\u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gaearon\"\u003e\u003ccode\u003e@​gaearon\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/facebook/react/pull/31975\"\u003e#31975\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31987\"\u003e#31987\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31996\"\u003e#31996\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/31999\"\u003e#31999\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32001\"\u003e#32001\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32002\"\u003e#32002\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32028\"\u003e#32028\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32029\"\u003e#32029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32031\"\u003e#32031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32034\"\u003e#32034\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32038\"\u003e#32038\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32041\"\u003e#32041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32050\"\u003e#32050\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32090\"\u003e#32090\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32105\"\u003e#32105\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32254\"\u003e#32254\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32379\"\u003e#32379\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32422\"\u003e#32422\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32462\"\u003e#32462\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32540\"\u003e#32540\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32545\"\u003e#32545\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32585\"\u003e#32585\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32599\"\u003e#32599\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32611\"\u003e#32611\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32612\"\u003e#32612\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32617\"\u003e#32617\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32651\"\u003e#32651\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32653\"\u003e#32653\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32656\"\u003e#32656\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32664\"\u003e#32664\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32699\"\u003e#32699\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32723\"\u003e#32723\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32734\"\u003e#32734\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32751\"\u003e#32751\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32752\"\u003e#32752\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32760\"\u003e#32760\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32761\"\u003e#32761\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32764\"\u003e#32764\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32772\"\u003e#32772\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32790\"\u003e#32790\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32819\"\u003e#32819\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32820\"\u003e#32820\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32822\"\u003e#32822\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32833\"\u003e#32833\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/32849\"\u003e#32849\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33094\"\u003e#33094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33191\"\u003e#33191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33200\"\u003e#33200\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33206\"\u003e#33206\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33293\"\u003e#33293\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33330\"\u003e#33330\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33331\"\u003e#33331\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33332\"\u003e#33332\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33357\"\u003e#33357\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33362\"\u003e#33362\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33433\"\u003e#33433\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/33576\"\u003e#33576\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34374\"\u003e#34374\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34450\"\u003e#34450\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34481\"\u003e#34481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34500\"\u003e#34500\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34502\"\u003e#34502\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34510\"\u003e#34510\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34511\"\u003e#34511\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34539\"\u003e#34539\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35567\"\u003e#35567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35564\"\u003e#35564\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35485\"\u003e#35485\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35380\"\u003e#35380\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35063\"\u003e#35063\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35060\"\u003e#35060\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/34676\"\u003e#34676\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/36917\"\u003e#36917\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35337\"\u003e#35337\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/facebook/react/pull/35520\"\u003e#35520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFragment Refs: Add Refs to \u003ccode\u003e\u0026lt;Fragment /\u0026gt;\u003c/code\u003e to support composable platform behavior (\u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/sebmarkbage\"\u003e\u003ccode\u003e@​sebmarkbage\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/eps1lon\"\u003e\u003ccode\u003e@​eps1lon\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Dhakshin2007\"\u003e\u003ccode\u003e@​Dhakshin2007\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/chirokas\"\u003e\u003ccode\u003e@​chirokas\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/teamleaderleo\"\u003e\u003ccode\u003e@​teamleaderleo\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/fallintoplace\"\u003e\u003ccode\u003e@​fallintoplace\u003c/code\u003e\u003c/a\u003e: \u003ca href=\"https://redirect.github.com/fa...\n\n_Description has been truncated_\n\n\u003c!-- codesmith:footer --\u003e\n---\n\u003ca href=\"https://app.blacksmith.sh/bacalhau-project/codesmith/bacalhau/pr/5475?autoLogin=true\u0026ref=codesmith_pr_footer\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-light-v3.svg\"\u003e\u003cimg alt=\"View with [code]smith\" src=\"https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://backend.blacksmith.sh/track/enable-autofix?expires=1794294424\u0026installation_model_id=427922\u0026pr_number=5475\u0026ref=codesmith_pr_footer\u0026repository=bacalhau-project%2Fbacalhau\u0026return_to=https%3A%2F%2Fgithub.com%2Fbacalhau-project%2Fbacalhau%2Fpull%2F5475\u0026signature=c4ed29a583a4f4125bce4f1142573886a62af0ef0c23d1d1ce2275f87556641a\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-light.svg\"\u003e\u003cimg alt=\"Autofix with [code]smith\" src=\"https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\u003csup\u003eNeed help on this PR? Tag \u003ccode\u003e@codesmith-bot\u003c/code\u003e with what you need. Autofix is disabled.\u003c/sup\u003e\n\n\u003c!-- codesmith:autofix:disabled --\u003e\n\u003c!-- /codesmith:footer --\u003e","html_url":"https://github.com/bacalhau-project/bacalhau/pull/5475","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bacalhau-project%2Fbacalhau/issues/5475","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5475/packages"}},{"old_version":"1.18.0","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-11T05:30:47.000Z","version_change":"1.18.0 → 1.20.0","issue":{"uuid":"5798290954","node_id":"PR_kwDORZHj188AAAABHxsJrQ","number":330,"state":"open","title":"chore(deps): Bump the npm_and_yarn group across 14 directories with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T05:30:47.000Z","updated_at":"2026-10-11T05:33:40.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"next","old_version":"16.3.3","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"sharp","old_version":"0.35.4","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"axios","old_version":"1.18.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the /.migration-backup/public/data directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/full-repo/pirc-unified-hub directory: [next](https://github.com/vercel/next.js), [brace-expansion](https://github.com/juliangruber/brace-expansion), [sharp](https://github.com/lovell/sharp) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/isolated-envs/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr), [axios](https://github.com/axios/axios) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 4 updates in the /.migration-backup/public/data/isolated-envs/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr), [axios](https://github.com/axios/axios) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data/full-repo directory: [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 1 update in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC directory: [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/downloads/divine_justice_repo directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 2 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/downloads/divine_justice_repo/PiRC_divine_justice/server directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [proxy-addr](https://github.com/jshttp/proxy-addr).\nBumps the npm_and_yarn group with 4 updates in the /artifacts/pirc-wealth-core/public/data/full-repo/pirc-unified-hub directory: [next](https://github.com/vercel/next.js), [brace-expansion](https://github.com/juliangruber/brace-expansion), [sharp](https://github.com/lovell/sharp) and [source-map-js](https://github.com/7rulnik/source-map-js).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/isolated-envs/PiRC_Isolated_Workspace directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\nBumps the npm_and_yarn group with 3 updates in the /artifacts/pirc-wealth-core/public/data/isolated-envs/PiRC_Master_Workspace/PiRC directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [proxy-addr](https://github.com/jshttp/proxy-addr) and [smol-toml](https://github.com/squirrelchat/smol-toml).\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.3.3 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.3.3...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sharp` from 0.35.4 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.4...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6fa26\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016\"\u003e\u003ccode\u003ecf76580\u003c/code\u003e\u003c/a\u003e Fix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/79\"\u003e#79\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df\"\u003e\u003ccode\u003e7899a86\u003c/code\u003e\u003c/a\u003e Fix crash when executing browser with CSP script-src that don't permit unsafe...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.18.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.c...\n\n_Description has been truncated_","html_url":"https://github.com/Ze0ro99/PiRC/pull/330","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Ze0ro99%2FPiRC/issues/330","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/330/packages"}},{"old_version":"1.13.5","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-10T16:14:31.000Z","version_change":"1.13.5 → 1.20.0","issue":{"uuid":"5793021520","node_id":"PR_kwDORMVWK88AAAABHtsLkg","number":7,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 17 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T16:14:31.000Z","updated_at":"2026-10-10T16:18:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":17,"packages":[{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"mongoose","old_version":"9.1.6","new_version":"9.7.2","repository_url":"https://github.com/Automattic/mongoose"},{"name":"next","old_version":"16.1.7","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.28","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"immutable","old_version":"5.1.5","new_version":"5.1.9","repository_url":"https://github.com/immutable-js/immutable-js"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss","old_version":"8.4.31","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"protobufjs","old_version":"7.5.4","new_version":"7.6.6","repository_url":"https://github.com/protobufjs/protobuf.js"},{"name":"sharp","old_version":"0.34.5","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 17 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [mongoose](https://github.com/Automattic/mongoose) | `9.1.6` | `9.7.2` |\n| [next](https://github.com/vercel/next.js) | `16.1.7` | `16.4.0` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.28` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.5` | `5.1.9` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.5.23` |\n| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.5.4` | `7.6.6` |\n| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.5` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongoose` from 9.1.6 to 9.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/releases\"\u003emongoose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.7.2 / 2026-06-22\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): avoid accessing special properties in \u003ccode\u003eDocument.prototype.get()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): only return own properties in schematype lookups and disallow setting schema paths under special properties\u003c/li\u003e\n\u003cli\u003edocs: update homepage sponsor layout\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.1 / 2026-06-17\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16331\"\u003e#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): include ObjectId regex pattern in \u003ccode\u003etoJSONSchema()\u003c/code\u003e output \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16335\"\u003e#16335\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16334\"\u003e#16334\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): split populate into separate queries per document if the resulting \u003ccode\u003e$in\u003c/code\u003e filter has more than 50k elements to reduce risk of BSON size errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5890\"\u003e#5890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add assistant sidebar with MongoDB Knowledge integration \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16311\"\u003e#16311\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16283\"\u003e#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update docs copy buttons, edit links, homepage alignment, and \u003ccode\u003ellms.txt\u003c/code\u003e generation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16326\"\u003e#16326\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16327\"\u003e#16327\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16329\"\u003e#16329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.0 / 2026-06-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Node.js TracingChannel support for APM instrumentation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16275\"\u003e#16275\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16105\"\u003e#16105\u003c/a\u003e \u003ca href=\"https://github.com/logaretm\"\u003elogaretm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(model): add standard schema adapter for models \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): avoid waiting on buffering to run aggregation middleware \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16289\"\u003e#16289\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16284\"\u003e#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): throw error if overwriting array selected with \u003ccode\u003e$slice\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16313\"\u003e#16313\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/2432\"\u003e#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): remove \u003ccode\u003evalidateSync()\u003c/code\u003e union fallback \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16310\"\u003e#16310\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: cast primitive types within unions when applying create casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16320\"\u003e#16320\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16316\"\u003e#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add \u003ccode\u003ellms.txt\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16312\"\u003e#16312\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15687\"\u003e#15687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: rewrite documents docs \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16298\"\u003e#16298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): clarify some details on \u003ccode\u003emodel.validate()\u003c/code\u003e casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(findOneAndUpdate): clarify update handling of undefined \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16299\"\u003e#16299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): fix link to be absolute \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16321\"\u003e#16321\u003c/a\u003e \u003ca href=\"https://github.com/hasezoey\"\u003ehasezoey\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.3 / 2026-05-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(clone): isolate cloned arrays from source documents \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16281\"\u003e#16281\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): preserve user-provided \u003ccode\u003e$setOnInsert.createdAt\u003c/code\u003e with \u003ccode\u003eoverwriteImmutable: true\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16278\"\u003e#16278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15781\"\u003e#15781\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16238\"\u003e#16238\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16236\"\u003e#16236\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15550\"\u003e#15550\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15571\"\u003e#15571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: add \u003ccode\u003e$percentile\u003c/code\u003e to TypeScript aggregation expression types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16290\"\u003e#16290\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16288\"\u003e#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update default pool sizes on createConnection() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16295\"\u003e#16295\u003c/a\u003e \u003ca href=\"https://github.com/torbiak-samdesk\"\u003etorbiak-samdesk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve code block copy button behavior and sidebar scrolling \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16294\"\u003e#16294\u003c/a\u003e \u003ca href=\"https://github.com/DraXx-Van\"\u003eDraXx-Van\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove broken link to deleted schema example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16297\"\u003e#16297\u003c/a\u003e \u003ca href=\"https://github.com/kaseken\"\u003ekaseken\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.2 / 2026-05-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): correctly handle modified subpaths when parent path is unset after modifying \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16271\"\u003e#16271\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16252\"\u003e#16252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16277\"\u003e#16277\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: align Node version docs and types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16270\"\u003e#16270\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.1 / 2026-04-29\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003etypes(objectid): fix \u003ccode\u003e_id\u003c/code\u003e getter helper on ObjectId \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16251\"\u003e#16251\u003c/a\u003e \u003ca href=\"https://github.com/noseworthy\"\u003enoseworthy\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e9.6.0 / 2026-04-28\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md\"\u003emongoose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.7.2 / 2026-06-22\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): avoid accessing special properties in \u003ccode\u003eDocument.prototype.get()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): only return own properties in schematype lookups and disallow setting schema paths under special properties\u003c/li\u003e\n\u003cli\u003edocs: update homepage sponsor layout\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.1 / 2026-06-17\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16331\"\u003e#16331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): include ObjectId regex pattern in \u003ccode\u003etoJSONSchema()\u003c/code\u003e output \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16335\"\u003e#16335\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16334\"\u003e#16334\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): split populate into separate queries per document if the resulting \u003ccode\u003e$in\u003c/code\u003e filter has more than 50k elements to reduce risk of BSON size errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5890\"\u003e#5890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add assistant sidebar with MongoDB Knowledge integration \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16311\"\u003e#16311\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16283\"\u003e#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update docs copy buttons, edit links, homepage alignment, and \u003ccode\u003ellms.txt\u003c/code\u003e generation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16326\"\u003e#16326\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16327\"\u003e#16327\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16329\"\u003e#16329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.7.0 / 2026-06-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add Node.js TracingChannel support for APM instrumentation \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16275\"\u003e#16275\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16105\"\u003e#16105\u003c/a\u003e \u003ca href=\"https://github.com/logaretm\"\u003elogaretm\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(model): add standard schema adapter for models \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): avoid waiting on buffering to run aggregation middleware \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16289\"\u003e#16289\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16284\"\u003e#16284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): throw error if overwriting array selected with \u003ccode\u003e$slice\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16313\"\u003e#16313\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/2432\"\u003e#2432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): remove \u003ccode\u003evalidateSync()\u003c/code\u003e union fallback \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16310\"\u003e#16310\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: cast primitive types within unions when applying create casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16320\"\u003e#16320\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16316\"\u003e#16316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add \u003ccode\u003ellms.txt\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16312\"\u003e#16312\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15687\"\u003e#15687\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: rewrite documents docs \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16298\"\u003e#16298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): clarify some details on \u003ccode\u003emodel.validate()\u003c/code\u003e casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16308\"\u003e#16308\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16280\"\u003e#16280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(findOneAndUpdate): clarify update handling of undefined \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16299\"\u003e#16299\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(model): fix link to be absolute \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16321\"\u003e#16321\u003c/a\u003e \u003ca href=\"https://github.com/hasezoey\"\u003ehasezoey\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.3 / 2026-05-27\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(clone): isolate cloned arrays from source documents \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16281\"\u003e#16281\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): preserve user-provided \u003ccode\u003e$setOnInsert.createdAt\u003c/code\u003e with \u003ccode\u003eoverwriteImmutable: true\u003c/code\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16278\"\u003e#16278\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15781\"\u003e#15781\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16238\"\u003e#16238\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16236\"\u003e#16236\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15550\"\u003e#15550\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/15571\"\u003e#15571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: add \u003ccode\u003e$percentile\u003c/code\u003e to TypeScript aggregation expression types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16290\"\u003e#16290\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16288\"\u003e#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update default pool sizes on createConnection() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16295\"\u003e#16295\u003c/a\u003e \u003ca href=\"https://github.com/torbiak-samdesk\"\u003etorbiak-samdesk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve code block copy button behavior and sidebar scrolling \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16294\"\u003e#16294\u003c/a\u003e \u003ca href=\"https://github.com/DraXx-Van\"\u003eDraXx-Van\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove broken link to deleted schema example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16297\"\u003e#16297\u003c/a\u003e \u003ca href=\"https://github.com/kaseken\"\u003ekaseken\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e8.24.0 / 2026-05-14\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16247\"\u003e#16247\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16041\"\u003e#16041\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16033\"\u003e#16033\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(connection): handle calling watch() on disconnected connection \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16246\"\u003e#16246\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16034\"\u003e#16034\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16286\"\u003e#16286\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.6.2 / 2026-05-08\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): correctly handle modified subpaths when parent path is unset after modifying \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16271\"\u003e#16271\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16252\"\u003e#16252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: handle compiling with exactOptionalPropertyTypes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16277\"\u003e#16277\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16273\"\u003e#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: align Node version docs and types \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16270\"\u003e#16270\u003c/a\u003e \u003ca href=\"https://github.com/AbdelrahmanHafez\"\u003eAbdelrahmanHafez\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/87ade9bfb84132cddd3e5f257660e1556347e884\"\u003e\u003ccode\u003e87ade9b\u003c/code\u003e\u003c/a\u003e chore: release 9.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/4e127860e6c65aa047dd43fb6ce103605e277361\"\u003e\u003ccode\u003e4e12786\u003c/code\u003e\u003c/a\u003e Merge branch 'vkarpov15/fix-security-20260609-master'\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/b3dd12a9d1121df7d12af0824df7d81eb3d99ce5\"\u003e\u003ccode\u003eb3dd12a\u003c/code\u003e\u003c/a\u003e docs: flex wrap for major sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/d48fee3d146d6624a79f2a30bd332a484a28c16d\"\u003e\u003ccode\u003ed48fee3\u003c/code\u003e\u003c/a\u003e fix(documentarray): reindex subdocs after reordering (\u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16282\"\u003e#16282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/03bedeaf57b3154cc89178fbb547cd16a951ccc0\"\u003e\u003ccode\u003e03bedea\u003c/code\u003e\u003c/a\u003e docs: add mongodb as sponsor on homepage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/8fa236568ea6536612c86ff73117a9436c9715e3\"\u003e\u003ccode\u003e8fa2365\u003c/code\u003e\u003c/a\u003e fix(document): additional defensive checks in Document.prototype.get()\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/35a3f33bc9a0a28671f99e3c5010000425650d0f\"\u003e\u003ccode\u003e35a3f33\u003c/code\u003e\u003c/a\u003e fix(schema): only return own properties in schematype lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/d2a725f00853d2a97de62ae14ac4376cbdcedb00\"\u003e\u003ccode\u003ed2a725f\u003c/code\u003e\u003c/a\u003e chore: fix eslint ignore to exclude old docs files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/7fee4b58ce881716ad91c16a8e82c78341742274\"\u003e\u003ccode\u003e7fee4b5\u003c/code\u003e\u003c/a\u003e chore: release 9.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Automattic/mongoose/commit/1e81fcc6a8757df38329892a753b79fe553d4c4d\"\u003e\u003ccode\u003e1e81fcc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16333\"\u003e#16333\u003c/a\u003e from Automattic/vkarpov15/gh-5890-2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Automattic/mongoose/compare/9.1.6...9.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 16.1.7 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/ccf8c15a42d1a7140cf569ac15bec3ccb0187e8f\"\u003e\u003ccode\u003eccf8c15\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b8c7c7f2f3222d133f2a64d9bb77cc83d68f8172\"\u003e\u003ccode\u003eb8c7c7f\u003c/code\u003e\u003c/a\u003e Improve static route error guidance (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99724\"\u003e#99724\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v16.1.7...v16.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for next since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.28\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/487368484af4ff9aba321be0ac65bf9a8dab3d34\"\u003e\u003ccode\u003e4873684\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/9030798a5922aa76e94db887aeed97daaf2dfb1b\"\u003e\u003ccode\u003e9030798\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/a5df351eb505078f62bf07477d3583fa9df51e5b\"\u003e\u003ccode\u003ea5df351\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.28\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/...\n\n_Description has been truncated_","html_url":"https://github.com/amank736836/Project-Next-ECommerce/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/amank736836%2FProject-Next-ECommerce/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"1.7.9","new_version":"1.20.0","update_type":"minor","path":"/web","pr_created_at":"2026-10-10T10:23:34.000Z","version_change":"1.7.9 → 1.20.0","issue":{"uuid":"5790345693","node_id":"PR_kwDOSP8CPM8AAAABHrpinw","number":21,"state":"open","title":"Bump axios from 1.7.9 to 1.20.0 in /web","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T10:23:34.000Z","updated_at":"2026-10-10T10:23:44.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.7.9","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/web","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.7.9 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.9...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.7.9\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TW199501/mind-map/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/TW199501/mind-map/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TW199501%2Fmind-map/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"}},{"old_version":"1.7.9","new_version":"1.20.0","update_type":"minor","path":"/client","pr_created_at":"2026-10-10T05:41:35.000Z","version_change":"1.7.9 → 1.20.0","issue":{"uuid":"5788504561","node_id":"PR_kwDONXVVVs8AAAABHqQYlw","number":59,"state":"open","title":"Bump axios from 1.7.9 to 1.20.0 in /client","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T05:41:35.000Z","updated_at":"2026-10-10T05:45:37.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.7.9","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/client","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.7.9 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.9...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.7.9\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Lajwantiharani/DMYF/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Lajwantiharani/DMYF/pull/59","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Lajwantiharani%2FDMYF/issues/59","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/59/packages"}},{"old_version":"1.7.7","new_version":"1.20.0","update_type":"minor","path":null,"pr_created_at":"2026-10-10T00:51:30.000Z","version_change":"1.7.7 → 1.20.0","issue":{"uuid":"5786572195","node_id":"PR_kwDOMngwx88AAAABHovyhA","number":2,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T00:51:30.000Z","updated_at":"2026-10-10T00:51:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":13,"packages":[{"name":"axios","old_version":"1.7.7","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"@babel/core","old_version":"7.24.9","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.0","repository_url":"https://github.com/ljharb/qs"},{"name":"browserslist","old_version":"4.23.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"cookie","old_version":"0.6.0","new_version":"0.7.2","repository_url":"https://github.com/jshttp/cookie"},{"name":"flatted","old_version":"3.3.1","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"follow-redirects","old_version":"1.15.6","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"form-data","old_version":"4.0.0","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"send","old_version":"0.18.0","new_version":"1.2.1","repository_url":"https://github.com/pillarjs/send"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 13 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.7.7` | `1.20.0` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.9` | `7.29.7` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.0` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.23.2` | `4.29.3` |\n| [cookie](https://github.com/jshttp/cookie) | `0.6.0` | `0.7.2` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.4` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.6` | `1.16.1` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.6` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [send](https://github.com/pillarjs/send) | `0.18.0` | `1.2.1` |\n\n\nUpdates `axios` from 1.7.7 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.7.7...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.24.9 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​babel/core\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined entries in \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e + \u003ccode\u003eencodeValuesOnly\u003c/code\u003e instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: use configured \u003ccode\u003edelimiter\u003c/code\u003e after \u003ccode\u003echarsetSentinel\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: apply \u003ccode\u003eformatter\u003c/code\u003e to encoded key under \u003ccode\u003estrictNullHandling\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: skip null/undefined filter-array entries instead of crashing in \u003ccode\u003eencoder\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: handle nested bracket groups and add regression tests (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/530\"\u003e#530\u003c/a\u003e); changes output for some unbalanced bracket keys (see \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] fix grammar (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add regression tests for keys containing percent-encoded bracket text\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eparameterLimit: Infinity\u003c/code\u003e with \u003ccode\u003ethrowOnLimitExceeded: true\u003c/code\u003e silently drops all parameters\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eiconv-lite\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003estrictMerge\u003c/code\u003e option to wrap object/primitive conflicts in an array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/425\"\u003e#425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eduplicates\u003c/code\u003e option should not apply to bracket notation keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/514\"\u003e#514\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: mark overflow objects for indexed notation exceeding \u003ccode\u003earrayLimit\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/546\"\u003e#546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003earrayLimit\u003c/code\u003e means max count, not max index, in \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e/\u003ccode\u003eparseArrayValue\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: throw on \u003ccode\u003earrayLimit\u003c/code\u003e exceeded with indexed notation when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is true (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/529\"\u003e#529\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/bb9379e01fad04c601478acd6152143cb20c984b\"\u003e\u003ccode\u003ebb9379e\u003c/code\u003e\u003c/a\u003e v6.16.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/62fd25480b0b0d9c0a667ee67e13608a363f5d0e\"\u003e\u003ccode\u003e62fd254\u003c/code\u003e\u003c/a\u003e [Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464\"\u003e\u003ccode\u003e8859c37\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when `throwOn...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/8079adc7e7cf84b8289898d1b18877160de67d40\"\u003e\u003ccode\u003e8079adc\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping `array...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d56f48ca137b1bf6385da749b1044246ae142f19\"\u003e\u003ccode\u003ed56f48c\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6\"\u003e\u003ccode\u003ee83d321\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/7e87a07c2c62301dd8fc2e099ac38227bc96c74c\"\u003e\u003ccode\u003e7e87a07\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/9a76af21604a4ece315e58ba251b93cf0fd944f2\"\u003e\u003ccode\u003e9a76af2\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/3a890d4ecd3deb72a45d90be36f4f8c5970467c7\"\u003e\u003ccode\u003e3a890d4\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b433a9b1633e1c3348aa53c513589a5bfe47f113\"\u003e\u003ccode\u003eb433a9b\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or dro...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.11.0...v6.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.23.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.23.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cookie` from 0.6.0 to 0.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/cookie/releases\"\u003ecookie's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFixed\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFix object assignment of \u003ccode\u003ehasOwnProperty\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/177\"\u003e#177\u003c/a\u003e)  bc38ffd\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2\"\u003ehttps://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e0.7.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFixed\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAllow leading dot for domain (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/174\"\u003e#174\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eAlthough not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdd fast path for \u003ccode\u003eserialize\u003c/code\u003e without options, use \u003ccode\u003eobj.hasOwnProperty\u003c/code\u003e when parsing (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/172\"\u003e#172\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1\"\u003ehttps://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e0.7.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eperf: parse cookies ~10% faster (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/144\"\u003e#144\u003c/a\u003e by \u003ca href=\"https://github.com/kurtextrem\"\u003e\u003ccode\u003e@​kurtextrem\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/170\"\u003e#170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: narrow the validation of cookies to match RFC6265 (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/167\"\u003e#167\u003c/a\u003e by \u003ca href=\"https://github.com/bewinsnw\"\u003e\u003ccode\u003e@​bewinsnw\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: add \u003ccode\u003emain\u003c/code\u003e to \u003ccode\u003epackage.json\u003c/code\u003e for rspack (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/166\"\u003e#166\u003c/a\u003e by \u003ca href=\"https://github.com/proudparrot2\"\u003e\u003ccode\u003e@​proudparrot2\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0\"\u003ehttps://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/d19eaa1a2bb9ca43ac0951edd852ba4e88e410e0\"\u003e\u003ccode\u003ed19eaa1\u003c/code\u003e\u003c/a\u003e 0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/bc38ffd0eae716b199236dda061d0bdc74192dd3\"\u003e\u003ccode\u003ebc38ffd\u003c/code\u003e\u003c/a\u003e Fix object assignment of \u003ccode\u003ehasOwnProperty\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/177\"\u003e#177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/cf4658f492c5bd96aeaf5693c3500f8495031014\"\u003e\u003ccode\u003ecf4658f\u003c/code\u003e\u003c/a\u003e 0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/6a8b8f5a49af7897b98ebfb29a1c4955afa3d33e\"\u003e\u003ccode\u003e6a8b8f5\u003c/code\u003e\u003c/a\u003e Allow leading dot for domain (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/174\"\u003e#174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/58015c0b93de0b63db245cfdc5a108e511a81ad0\"\u003e\u003ccode\u003e58015c0\u003c/code\u003e\u003c/a\u003e Remove more code and perf wins (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/172\"\u003e#172\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/ab057d6c06b94a7b1e3358e69a685ae49c97b627\"\u003e\u003ccode\u003eab057d6\u003c/code\u003e\u003c/a\u003e 0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/5f02ca87688481dbcf155e49ca8b61732f30e542\"\u003e\u003ccode\u003e5f02ca8\u003c/code\u003e\u003c/a\u003e Migrate history to GitHub releases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/a5d591ce8447dd63821779724f96ad3c774c8579\"\u003e\u003ccode\u003ea5d591c\u003c/code\u003e\u003c/a\u003e Migrate history to GitHub releases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/51968f94b5e820adeceef505539fa193ffe2d105\"\u003e\u003ccode\u003e51968f9\u003c/code\u003e\u003c/a\u003e Skip isNaN\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/cookie/commit/9e7ca51ade4b325307eedd6b4dec190983e9e2cc\"\u003e\u003ccode\u003e9e7ca51\u003c/code\u003e\u003c/a\u003e perf(parse): cache length, return early (\u003ca href=\"https://redirect.github.com/jshttp/cookie/issues/144\"\u003e#144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~blakeembrey\"\u003eblakeembrey\u003c/a\u003e, a new releaser for cookie since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `flatted` from 3.3.1 to 3.4.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/e6f5ca700c4ca8104a6a83472c8219e267bd5e84\"\u003e\u003ccode\u003ee6f5ca7\u003c/code\u003e\u003c/a\u003e 3.4.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/47f14fac0b1a41989f216b0cda4c50596ca339f6\"\u003e\u003ccode\u003e47f14fa\u003c/code\u003e\u003c/a\u003e removed E_STRICT from PHP\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/40505688464c49fe6374e7bc4cdd9bd2e9e6f330\"\u003e\u003ccode\u003e4050568\u003c/code\u003e\u003c/a\u003e fixced go-lang issues in CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/4303f4db38ba0ba8d5e2ed6e9689cefc74c46b63\"\u003e\u003ccode\u003e4303f4d\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/101\"\u003e#101\u003c/a\u003e from mfinelli/gocriticfixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/106735b609c15df51539a0d7c0a270182efd904c\"\u003e\u003ccode\u003e106735b\u003c/code\u003e\u003c/a\u003e updated package-lock.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/670a1bdf9dcfba02111c3034294366f10696fb53\"\u003e\u003ccode\u003e670a1bd\u003c/code\u003e\u003c/a\u003e 3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/50a61a90ea5ca64c114f0aa040ad127e3a97feff\"\u003e\u003ccode\u003e50a61a9\u003c/code\u003e\u003c/a\u003e Fix \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/104\"\u003e#104\u003c/a\u003e - allow \u003ccode\u003enull\u003c/code\u003e as replacer value\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/8aa64f460cf0c4dac9cc214c831aade28f8f2c6e\"\u003e\u003ccode\u003e8aa64f4\u003c/code\u003e\u003c/a\u003e solved crytical errors over dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/b85577f39ff85959d02e8862cc0dde8114b43762\"\u003e\u003ccode\u003eb85577f\u003c/code\u003e\u003c/a\u003e Fix go-critic errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/WebReflection/flatted/commit/bb8c63cea5befd4315519cb4458c6fc07bb9cf7b\"\u003e\u003ccode\u003ebb8c63c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/WebReflection/flatted/issues/100\"\u003e#100\u003c/a\u003e from WebReflection/WebReflection-patch-1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.15.6 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/0c23a223067201c368035e82954c11eb2578a33b\"\u003e\u003ccode\u003e0c23a22\u003c/code\u003e\u003c/a\u003e Release version 1.16.0 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/844c4d302ac963d29bdb5dc1754ec7df3d70d7f9\"\u003e\u003ccode\u003e844c4d3\u003c/code\u003e\u003c/a\u003e Add sensitiveHeaders option.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/5e8b8d024e2c76f804a284258e585ecb49a575be\"\u003e\u003ccode\u003e5e8b8d0\u003c/code\u003e\u003c/a\u003e ci: add Node.js 24.x to the CI matrix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/7953e2255aa0b93602eed3804f3bc5e6923a03af\"\u003e\u003ccode\u003e7953e22\u003c/code\u003e\u003c/a\u003e ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/86dc1f86e4b56bcd642c78384d51f10f123aea75\"\u003e\u003ccode\u003e86dc1f8\u003c/code\u003e\u003c/a\u003e Sanitizing input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/21ef28a544c5e57f4c34b8476d75f2144609a1eb\"\u003e\u003ccode\u003e21ef28a\u003c/code\u003e\u003c/a\u003e Release version 1.15.11 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/7c88135da3bd0681a7e156ee66b16b2f6f98b480\"\u003e\u003ccode\u003e7c88135\u003c/code\u003e\u003c/a\u003e Roll back tree shaking.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `form-data` from 4.0.0 to 4.0.6\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/form-data/form-data/blob/master/CHANGELOG.md\"\u003eform-data's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6\"\u003ev4.0.6\u003c/a\u003e - 2026-06-12\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames \u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.4...v4.0.5\"\u003ev4.0.5\u003c/a\u003e - 2025-11-17\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Tests] Switch to newer v8 prediction library; enable node 24 testing \u003ca href=\"https://github.com/form-data/form-data/commit/16e00765342106876f98a1c9703314006c9e937a\"\u003e\u003ccode\u003e16e0076\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/5822467f0ec21f6ad613c1c90856375e498793c7\"\u003e\u003ccode\u003e5822467\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] set Symbol.toStringTag in the proper place \u003ca href=\"https://github.com/form-data/form-data/commit/76d0dee43933b5e167f7f09e5d9cbbd1cf911aa7\"\u003e\u003ccode\u003e76d0dee\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4\"\u003ev4.0.4\u003c/a\u003e - 2025-07-16\u003c/h2\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[meta] add \u003ccode\u003eauto-changelog\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/811f68282fab0315209d0e2d1c44b6c32ea0d479\"\u003e\u003ccode\u003e811f682\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] handle predict-v8-randomness failures in node \u0026lt; 17 and node \u0026gt; 23 \u003ca href=\"https://github.com/form-data/form-data/commit/1d11a76434d101f22fdb26b8aef8615f28b98402\"\u003e\u003ccode\u003e1d11a76\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] Switch to using \u003ccode\u003ecrypto\u003c/code\u003e random for boundary values \u003ca href=\"https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0\"\u003e\u003ccode\u003e3d17230\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] fix linting errors \u003ca href=\"https://github.com/form-data/form-data/commit/5e340800b5f8914213e4e0378c084aae71cfd73a\"\u003e\u003ccode\u003e5e34080\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] actually ensure the readme backup isn’t published \u003ca href=\"https://github.com/form-data/form-data/commit/316c82ba93fd4985af757b771b9a1f26d3b709ef\"\u003e\u003ccode\u003e316c82b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/58c25d76406a5b0dfdf54045cf252563f2bbda8d\"\u003e\u003ccode\u003e58c25d7\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] fix readme capitalization \u003ca href=\"https://github.com/form-data/form-data/commit/2300ca19595b0ee96431e868fe2a40db79e41c61\"\u003e\u003ccode\u003e2300ca1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.2...v4.0.3\"\u003ev4.0.3\u003c/a\u003e - 2025-06-05\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eappend\u003c/code\u003e: avoid a crash on nullish values \u003ca href=\"https://redirect.github.com/form-data/form-data/issues/577\"\u003e\u003ccode\u003e[#577](https://github.com/form-data/form-data/issues/577)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[eslint] use a shared config \u003ca href=\"https://github.com/form-data/form-data/commit/426ba9ac440f95d1998dac9a5cd8d738043b048f\"\u003e\u003ccode\u003e426ba9a\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[eslint] fix some spacing issues \u003ca href=\"https://github.com/form-data/form-data/commit/20941917f0e9487e68c564ebc3157e23609e2939\"\u003e\u003ccode\u003e2094191\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003ehasown\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/81ab41b46fdf34f5d89d7ff30b513b0925febfaa\"\u003e\u003ccode\u003e81ab41b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] validate boundary type in \u003ccode\u003esetBoundary()\u003c/code\u003e method \u003ca href=\"https://github.com/form-data/form-data/commit/8d8e4693093519f7f18e3c597d1e8df8c493de9e\"\u003e\u003ccode\u003e8d8e469\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] add tests to check the behavior of \u003ccode\u003egetBoundary\u003c/code\u003e with non-strings \u003ca href=\"https://github.com/form-data/form-data/commit/837b8a1f7562bfb8bda74f3fc538adb7a5858995\"\u003e\u003ccode\u003e837b8a1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] remove unused deps \u003ca href=\"https://github.com/form-data/form-data/commit/870e4e665935e701bf983a051244ab928e62d58e\"\u003e\u003ccode\u003e870e4e6\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] remove local commit hooks \u003ca href=\"https://github.com/form-data/form-data/commit/e6e83ccb545a5619ed6cd04f31d5c2f655eb633e\"\u003e\u003ccode\u003ee6e83cc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/form-data/form-data/commit/4066fd6f65992b62fa324a6474a9292a4f88c916\"\u003e\u003ccode\u003e4066fd6\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] fix scripts to use prepublishOnly \u003ca href=\"https://github.com/form-data/form-data/commit/c4bbb13c0ef669916657bc129341301b1d331d75\"\u003e\u003ccode\u003ec4bbb13\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/form-data/form-data/compare/v4.0.1...v4.0.2\"\u003ev4.0.2\u003c/a\u003e - 2025-02-14\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\"\u003e\u003ccode\u003e64190db\u003c/code\u003e\u003c/a\u003e v4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd\"\u003e\u003ccode\u003e92ae0eb\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003ehasown\u003c/code\u003e, \u003ccode\u003emime-types\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1\"\u003e\u003ccode\u003ef31d21e\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99\"\u003e\u003ccode\u003e8dff42c\u003c/code\u003e\u003c/a\u003e [Fix] escape CR, LF, and \u003ccode\u003e\u0026quot;\u003c/code\u003e in field names and filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97\"\u003e\u003ccode\u003e67b0f65\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ejs-randomness-predictor\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/68ff7dda8834d6de095a7008cef0e03bc252ca98\"\u003e\u003ccode\u003e68ff7dd\u003c/code\u003e\u003c/a\u003e v4.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/5822467f0ec21f6ad613c1c90856375e498793c7\"\u003e\u003ccode\u003e5822467\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/76d0dee43933b5e167f7f09e5d9cbbd1cf911aa7\"\u003e\u003ccode\u003e76d0dee\u003c/code\u003e\u003c/a\u003e [Fix] set Symbol.toStringTag in the proper place\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/16e00765342106876f98a1c9703314006c9e937a\"\u003e\u003ccode\u003e16e0076\u003c/code\u003e\u003c/a\u003e [Tests] Switch to newer v8 prediction library; enable node 24 testing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/form-data/form-data/commit/41996f5ac73a867046d48512cab62e64fc846dad\"\u003e\u003ccode\u003e41996f5\u003c/code\u003e\u003c/a\u003e v4.0.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.c...\n\n_Description has been truncated_\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nBumps 13 npm dependencies in the `npm_and_yarn` group, including major-version jumps for `axios` (1.7.7 → 1.20.0) and `send` (0.18.0 → 1.2.1), plus security fixes in `js-yaml`, `brace-expansion`, `minimatch`, `cookie`, `form-data`, `browserslist`, and `follow-redirects`.\n\n**Migration**\n- `axios` 1.20.0 adds `ContentTooLarge` (413) and `UnprocessableContent` (422) status names; `PayloadTooLarge` and `UnprocessableEntity` remain as deprecated aliases.\n- `send` jumps from 0.18.0 to 1.2.1 — verify static file serving still works as expected.\n\n\u003csup\u003eWritten for commit f801b428a4e2546db68fb4058c6249bbe3d1ed3e. Summary will update on new commits.\u003c/sup\u003e\n\n\u003ca href=\"https://cubic.dev/pr/theplenkov-forks/cds-types/pull/2?utm_source=github\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003cimg alt=\"View guided diff\" src=\"https://www.cubic.dev/buttons/review-in-cubic-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e \u003ca href=\"https://www.cubic.dev/action/auto-fix/pr/theplenkov-forks/cds-types/2?returnTo=https%3A%2F%2Fgithub.com%2Ftheplenkov-forks%2Fcds-types%2Fpull%2F2\u0026source=description\" target=\"_blank\" rel=\"noopener noreferrer\" data-no-image-dialog=\"true\"\u003e\u003cpicture\u003e\u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg\"\u003e\u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003cimg alt=\"Turn on auto-fix\" src=\"https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg\"\u003e\u003c/picture\u003e\u003c/a\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/theplenkov-forks/cds-types/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/theplenkov-forks%2Fcds-types/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.16.0","new_version":"1.20.0","update_type":"minor","path":"/build-system/tasks/e2e","pr_created_at":"2026-10-10T00:31:24.000Z","version_change":"1.16.0 → 1.20.0","issue":{"uuid":"5786425102","node_id":"PR_kwDOSmIp1c8AAAABHooWGA","number":18,"state":"open","title":"Bump axios from 1.16.0 to 1.20.0 in /build-system/tasks/e2e","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-10T00:31:24.000Z","updated_at":"2026-10-10T00:32:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"axios","old_version":"1.16.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"}],"path":"/build-system/tasks/e2e","ecosystem":"npm"},"body":"Bumps [axios](https://github.com/axios/axios) from 1.16.0 to 1.20.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.16.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios\u0026package-manager=npm_and_yarn\u0026previous-version=1.16.0\u0026new-version=1.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Dustin4444/amphtml/network/alerts).\n\n\u003c/details\u003e\n\n\u003c!-- Reviewable:start --\u003e\n- - -\nThis change is [\u003cimg src=\"https://reviewable.io/review_button.svg\" height=\"34\" align=\"absmiddle\" alt=\"Reviewable\"/\u003e](https://reviewable.io/reviews/Dustin4444/amphtml/18)\n\u003c!-- Reviewable:end --\u003e\n","html_url":"https://github.com/Dustin4444/amphtml/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dustin4444%2Famphtml/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"}}]}