{"id":290,"name":"commander","ecosystem":"npm","repository_url":"https://github.com/tj/commander.js","issues_count":4094,"created_at":"2025-06-06T15:01:33.596Z","updated_at":"2025-06-06T15:01:33.596Z","purl":"pkg:npm/commander","metadata":{"id":1544991,"name":"commander","ecosystem":"npm","description":"the complete solution for node.js command-line programs","homepage":"https://github.com/tj/commander.js#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/tj/commander.js","keywords_array":["commander","command","option","parser","cli","argument","args","argv"],"namespace":null,"versions_count":119,"first_release_published_at":"2011-08-14T22:17:52.365Z","latest_release_published_at":"2025-05-18T06:10:29.194Z","latest_release_number":"14.0.0","last_synced_at":"2025-06-06T00:11:01.377Z","created_at":"2022-04-09T05:15:53.051Z","updated_at":"2025-06-06T00:11:01.377Z","registry_url":"https://www.npmjs.com/package/commander","install_command":"npm install commander","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"2_x":"2.20.3","next":"13.0.0-0","latest":"14.0.0"}},"repo_metadata":{"id":37561671,"uuid":"2206953","full_name":"tj/commander.js","owner":"tj","description":"node.js command-line interfaces made easy","archived":false,"fork":false,"pushed_at":"2024-10-29T08:34:23.000Z","size":3474,"stargazers_count":26734,"open_issues_count":13,"forks_count":1690,"subscribers_count":232,"default_branch":"master","last_synced_at":"2024-10-29T09:52:41.676Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tj.png","metadata":{"files":{"readme":"Readme.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["tj","shadowspawn","abetomo"],"tidelift":"npm/commander"}},"created_at":"2011-08-14T21:33:58.000Z","updated_at":"2024-10-29T07:48:35.000Z","dependencies_parsed_at":"2023-10-04T13:47:53.393Z","dependency_job_id":"aad99add-09ef-4746-af63-343334d75cd5","html_url":"https://github.com/tj/commander.js","commit_stats":{"total_commits":930,"total_committers":186,"mean_commits":5.0,"dds":0.5881720430107527,"last_synced_commit":"33195f189b1ffa568c232503fb6ac0cf5548eb74"},"previous_names":["visionmedia/commander.js"],"tags_count":116,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tj","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222088858,"owners_count":16929038,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tj","name":"TJ Holowaychuk","uuid":"25254","kind":"user","description":"","email":"","website":"https://apex.sh","location":"London, UK","twitter":"tjholowaychuk","company":"Apex","icon_url":"https://avatars.githubusercontent.com/u/25254?u=d332bdd6d335df9f08e7cdac0e17143d898ec70d\u0026v=4","repositories_count":296,"last_synced_at":"2024-05-01T10:36:56.726Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/tj","funding_links":["https://github.com/sponsors/tj"],"total_stars":136833,"followers":50470,"following":45,"created_at":"2022-11-02T16:19:01.582Z","updated_at":"2024-05-01T10:37:16.850Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tj","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tj/repositories"},"tags":[{"name":"v12.0.0","sha":"83c3f4e391754d2f80b179acc4bccc2d4d0c863d","kind":"commit","published_at":"2024-02-03T09:10:52.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v12.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v12.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0/manifests"},{"name":"v12.0.0-1","sha":"90f3c8a4c99bd03e641ab23210fce8a3c989df8a","kind":"tag","published_at":"2024-01-19T20:07:40.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v12.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v12.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0-1/manifests"},{"name":"v12.0.0-0","sha":"18f921d9778ebd1578ad98aba9b873f51786fbe4","kind":"tag","published_at":"2023-11-11T05:28:12.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v12.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v12.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v12.0.0-0/manifests"},{"name":"v11.1.0","sha":"f1ae2db8e2da01d6efcbfd59cbf82202f864b0c1","kind":"commit","published_at":"2023-10-13T00:27:03.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v11.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v11.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v11.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v11.1.0/manifests"},{"name":"v11.0.0","sha":"4ef19faac1564743d8c7e3ce89ef8d190e1551b4","kind":"commit","published_at":"2023-06-16T00:47:22.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v11.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v11.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v11.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v11.0.0/manifests"},{"name":"v10.0.1","sha":"33195f189b1ffa568c232503fb6ac0cf5548eb74","kind":"commit","published_at":"2023-04-15T05:00:07.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v10.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/v10.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v10.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v10.0.1/manifests"},{"name":"v10.0.0","sha":"8b03ab75b5431fd2d58a24b842ba088d621f12dc","kind":"tag","published_at":"2023-01-14T01:49:56.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v10.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v10.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v10.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v10.0.0/manifests"},{"name":"v9.5.0","sha":"7a5bd0626a5a2e6353052de0a6985480e51bbb9b","kind":"tag","published_at":"2023-01-07T07:03:27.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.5.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.5.0/manifests"},{"name":"v9.4.1","sha":"0b4198dde02cc8fc571c1265afa5bde447f6fca8","kind":"tag","published_at":"2022-09-30T07:26:46.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.4.1","html_url":"https://github.com/tj/commander.js/releases/tag/v9.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.4.1/manifests"},{"name":"v9.4.0","sha":"82fcb98cc27164a98e0c5f2c6f54621b5bbceef9","kind":"commit","published_at":"2022-07-15T06:17:59.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.4.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.4.0/manifests"},{"name":"v9.3.0","sha":"f2aec2648d68b01d8947298b27093df3fdb551a7","kind":"commit","published_at":"2022-05-28T02:45:25.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.3.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.3.0/manifests"},{"name":"v9.2.0","sha":"6c26370fcba737d9786a34d0e8693f689a067569","kind":"commit","published_at":"2022-04-15T07:10:28.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.2.0/manifests"},{"name":"v9.1.0","sha":"5bddedf2496e31c0a5d3eae7b8419b09291cf2fc","kind":"commit","published_at":"2022-03-18T05:54:23.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.1.0/manifests"},{"name":"v9.0.0","sha":"02a124c7d58dbae2ef11f9284b2c68ad94f6dc8b","kind":"commit","published_at":"2022-01-28T19:17:24.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0/manifests"},{"name":"v9.0.0-1","sha":"c58fe4d32f72b9fd6a6bfb64b499f6d3dfd06bb2","kind":"tag","published_at":"2022-01-14T20:25:24.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v9.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0-1/manifests"},{"name":"v9.0.0-0","sha":"253f4ff7486e4e1ae09ba35d16964f45791c6a7a","kind":"tag","published_at":"2021-12-22T05:41:23.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v9.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v9.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v9.0.0-0/manifests"},{"name":"v8.3.0","sha":"43f4743864e2f670db5eebcf88c92aa4612c54f1","kind":"commit","published_at":"2021-10-22T07:00:17.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.3.0","html_url":"https://github.com/tj/commander.js/releases/tag/v8.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.3.0/manifests"},{"name":"v8.2.0","sha":"950f742e60ae6b30a3d4e945db6d4322919628fd","kind":"commit","published_at":"2021-09-10T03:39:53.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/v8.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.2.0/manifests"},{"name":"v8.1.0","sha":"a9c9f17c7eff96b8da8c2b9d01751d41f1eb0ae3","kind":"commit","published_at":"2021-07-27T03:53:18.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v8.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.1.0/manifests"},{"name":"v8.0.0","sha":"80054ba3756853c1acf80e168ee7d44b63ad826b","kind":"commit","published_at":"2021-06-23T07:53:48.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0/manifests"},{"name":"v8.0.0-2","sha":"0e204e8babbe5290c8e3670fc8d9b8f6da6b8c29","kind":"tag","published_at":"2021-06-06T04:34:58.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.0.0-2","html_url":"https://github.com/tj/commander.js/releases/tag/v8.0.0-2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-2/manifests"},{"name":"v8.0.0-1","sha":"5ddc41b5503114b50cb6ac6e91baa8fa25a834a5","kind":"tag","published_at":"2021-05-31T07:32:15.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v8.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-1/manifests"},{"name":"v8.0.0-0","sha":"ff7658cb0ddcf20cc13f7b792634867771397eac","kind":"tag","published_at":"2021-05-22T23:27:34.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v8.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v8.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v8.0.0-0/manifests"},{"name":"v7.2.0","sha":"327a3ddd552f90d1dbd37f55fa7a88b9553468ae","kind":"commit","published_at":"2021-03-21T21:54:44.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/v7.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.2.0/manifests"},{"name":"v7.1.0","sha":"4aaaa9de3fd09401afe3894483193ba0e2e512d7","kind":"commit","published_at":"2021-02-14T03:02:41.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v7.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.1.0/manifests"},{"name":"v7.0.0","sha":"034ad9f326ee2b26001b864adda5fea465ee148b","kind":"commit","published_at":"2021-01-13T08:17:21.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0/manifests"},{"name":"v7.0.0-2","sha":"4b43f66f868c3810467cae811fe9292382dc7e22","kind":"tag","published_at":"2020-12-14T07:45:56.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.0.0-2","html_url":"https://github.com/tj/commander.js/releases/tag/v7.0.0-2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-2/manifests"},{"name":"v6.2.1","sha":"e0e723810357e915210af38ccf5098ffe1fb8e65","kind":"commit","published_at":"2020-12-13T23:18:15.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v6.2.1","html_url":"https://github.com/tj/commander.js/releases/tag/v6.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.2.1/manifests"},{"name":"v7.0.0-1","sha":"e1a6cf43b29ccd7f8976fb432f57236b9af25c63","kind":"tag","published_at":"2020-11-21T21:25:09.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v7.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-1/manifests"},{"name":"v7.0.0-0","sha":"0703a4d94794bec546537e5782ac212ce10fd870","kind":"tag","published_at":"2020-10-25T04:46:06.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v7.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v7.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v7.0.0-0/manifests"},{"name":"v6.2.0","sha":"0192d6664a0d52af54ba73e83b8527faa38508e8","kind":"commit","published_at":"2020-10-25T02:36:04.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v6.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.2.0/manifests"},{"name":"v6.1.0","sha":"9c7cfc07d523faa9577249e5d18759186408115d","kind":"commit","published_at":"2020-08-28T01:18:05.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v6.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.1.0/manifests"},{"name":"v6.0.0","sha":"c5a5e7b70d425d6f739bd84cc622c1d8775743f1","kind":"commit","published_at":"2020-07-19T13:48:52.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v6.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.0.0/manifests"},{"name":"v6.0.0-0","sha":"fc36472de1e2b0eccf205ba1854ac1acee1be76f","kind":"tag","published_at":"2020-06-20T05:53:36.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v6.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v6.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v6.0.0-0/manifests"},{"name":"v5.1.0","sha":"64053252cbd5b5434afb7ec3f12c46ad2a352d8a","kind":"commit","published_at":"2020-04-25T02:27:00.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.1.0/manifests"},{"name":"v5.0.0","sha":"2aad525640d5885d9f51ae8dfe07a01c280cf4e3","kind":"commit","published_at":"2020-03-12T02:11:26.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0/manifests"},{"name":"v5.0.0-4","sha":"95e0d193ec02859f1bdcb08785e21f86942fc5e5","kind":"tag","published_at":"2020-03-03T05:34:07.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0-4","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0-4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-4/manifests"},{"name":"v5.0.0-3","sha":"a3f453f11cf3ad69d2b15ce82efdfd3af53efe22","kind":"tag","published_at":"2020-02-20T07:28:55.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0-3","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0-3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-3/manifests"},{"name":"v5.0.0-2","sha":"1a84b806f3f83055fb8f864d0c5d849319ce522a","kind":"tag","published_at":"2020-02-11T09:51:23.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0-2","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0-2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-2/manifests"},{"name":"v5.0.0-1","sha":"a8a14c91b3a65ad09d163894adab2d1c93316150","kind":"tag","published_at":"2020-02-08T20:50:55.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-1/manifests"},{"name":"v4.1.1","sha":"d5186ba4b9b64a72cd685fccbb9ec5d0ec0c430d","kind":"commit","published_at":"2020-02-02T01:22:57.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.1.1","html_url":"https://github.com/tj/commander.js/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.1/manifests"},{"name":"v5.0.0-0","sha":"6857562e2952561b226d09b2683c859dcca800ae","kind":"tag","published_at":"2020-02-01T03:42:12.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v5.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v5.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v5.0.0-0/manifests"},{"name":"v4.1.0","sha":"8e1cdf5405b1e67359ca7613ff3c6ed81714b181","kind":"commit","published_at":"2020-01-06T09:14:39.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.0/manifests"},{"name":"v4.1.0-0","sha":"29a7f46a650d83c111108faa610367fcdf5d1085","kind":"tag","published_at":"2019-12-11T03:48:24.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.1.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v4.1.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.1.0-0/manifests"},{"name":"v4.0.1","sha":"5083e1463ef4a7d91e42d430965246a7a80439a0","kind":"tag","published_at":"2019-11-11T09:27:31.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.1/manifests"},{"name":"4.0.1","sha":"5083e1463ef4a7d91e42d430965246a7a80439a0","kind":"commit","published_at":"2019-11-11T09:14:53.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/4.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/4.0.1/manifests"},{"name":"v4.0.0","sha":"f0315b892d0425dcb8589d19a8ef61c2f965071e","kind":"tag","published_at":"2019-11-01T10:01:29.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0/manifests"},{"name":"v2.20.3","sha":"fe9927dab5b628ca4707e5a036bef33f07c552d1","kind":"tag","published_at":"2019-10-11T04:40:02.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.20.3","html_url":"https://github.com/tj/commander.js/releases/tag/v2.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.3/manifests"},{"name":"v4.0.0-1","sha":"e9929fb8c83ab8cd654167f02d027c041f295d69","kind":"commit","published_at":"2019-10-08T01:22:23.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.0.0-1","html_url":"https://github.com/tj/commander.js/releases/tag/v4.0.0-1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0-1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0-1/manifests"},{"name":"v4.0.0-0","sha":"400e6afd493c8ebf59cf54174bb80b123aa27138","kind":"tag","published_at":"2019-10-01T08:42:50.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v4.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v4.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v4.0.0-0/manifests"},{"name":"v2.20.1","sha":"48b02f06da3b96b200a973aaa1f7e40287882e8a","kind":"commit","published_at":"2019-09-28T21:29:09.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.20.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.1/manifests"},{"name":"v3.0.2","sha":"2544df81b478a4afe15560f27b3575aa3a1581c4","kind":"tag","published_at":"2019-09-26T09:14:48.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v3.0.2","html_url":"https://github.com/tj/commander.js/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.2/manifests"},{"name":"v3.0.1","sha":"43123022cae2f01cc4cffe3eb44b5275e857a6d2","kind":"tag","published_at":"2019-08-30T08:39:23.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v3.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"bfcd39a433d8ef34feaca511a9b9f401dc92ed90","kind":"tag","published_at":"2019-08-08T06:22:10.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v3.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.0/manifests"},{"name":"v3.0.0-0","sha":"f743bf456bbda392dbc4a106fc196bc9ef5c8b76","kind":"tag","published_at":"2019-07-28T08:44:04.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v3.0.0-0","html_url":"https://github.com/tj/commander.js/releases/tag/v3.0.0-0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.0-0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v3.0.0-0/manifests"},{"name":"v2.20.0","sha":"3e8bf54b9b2fb3960fc2320a4174aa79efca90fa","kind":"commit","published_at":"2019-04-03T00:39:24.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.20.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.20.0/manifests"},{"name":"v2.19.0","sha":"78b7dbd18aabc23ccc9d151db411913237a3c483","kind":"commit","published_at":"2018-10-08T16:21:49.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.19.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.19.0/manifests"},{"name":"v2.18.0","sha":"54b7f142b1fa960442c6c8982da16f7a5204c0a2","kind":"commit","published_at":"2018-09-07T10:10:44.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.18.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.18.0/manifests"},{"name":"v2.17.1","sha":"e5b27cc553c0c55eb2f8890dc83034d3a3eee531","kind":"commit","published_at":"2018-08-07T11:16:51.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.17.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.17.1/manifests"},{"name":"v2.17.0","sha":"25b06ee12b6f14afa0b4b7b6f028a66a7c4faf5e","kind":"commit","published_at":"2018-08-03T18:17:29.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.17.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.17.0/manifests"},{"name":"v2.16.0","sha":"4cc348bd9808f799ca0600a39136b1fa25820f3b","kind":"commit","published_at":"2018-06-29T09:39:31.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.16.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.16.0/manifests"},{"name":"v2.15.1","sha":"649eaef336ddc7224eb5c73e4a958685e24de25e","kind":"tag","published_at":"2018-03-20T01:46:31.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.15.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.15.1/manifests"},{"name":"v2.15.0","sha":"d8404f8de45c9ba780606878f4d35d0a45743d32","kind":"commit","published_at":"2018-03-08T01:10:09.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.15.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.15.0/manifests"},{"name":"v2.14.1","sha":"6b026a5c88a2c7f67db70831c015e9d11c7babca","kind":"commit","published_at":"2018-02-07T07:39:12.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.14.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.14.1/manifests"},{"name":"v2.14.0","sha":"de4af3abbe9baa6dd60dce614e2c94b615c603a5","kind":"commit","published_at":"2018-02-05T18:19:42.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.14.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.14.0/manifests"},{"name":"v2.13.0","sha":"291fbaa61e3704ec30617812ab6646c8443a03f0","kind":"commit","published_at":"2018-01-11T07:08:24.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.13.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.13.0/manifests"},{"name":"v2.12.2","sha":"6864c953d781d4f665afecbdace84d9d80e45060","kind":"commit","published_at":"2017-11-28T07:06:47.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.12.2","html_url":"https://github.com/tj/commander.js/releases/tag/v2.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.2/manifests"},{"name":"v2.12.1","sha":"91c2514f849722eac57c38c2c63f0c0dac9b59c8","kind":"commit","published_at":"2017-11-23T10:17:53.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.12.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.1/manifests"},{"name":"v2.12.0","sha":"7e22f38a09a0975ec2da2e0eda13cb7fdac370f0","kind":"commit","published_at":"2017-11-22T19:31:05.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.12.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.12.0/manifests"},{"name":"v2.11.0","sha":"30535a67a7d1f3809231603bc4dc0ba873ae85ef","kind":"tag","published_at":"2017-07-03T10:06:50.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.11.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.11.0/manifests"},{"name":"v2.10.0","sha":"e0bea67222aecc4158c60208284d056c948d3c8c","kind":"tag","published_at":"2017-06-19T11:15:31.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.10.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.10.0/manifests"},{"name":"v2.9.0","sha":"b2aad7a8471d434593a85306aa73777a526e9f75","kind":"commit","published_at":"2015-10-13T15:20:01.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.9.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.9.0/manifests"},{"name":"v2.8.1","sha":"c6c84726050b19c0373de27cd359f3baddff579f","kind":"commit","published_at":"2015-04-22T16:20:22.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.8.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.8.1/manifests"},{"name":"v2.8.0","sha":"4dae21d9336eb225ef20deadbd12347d278390d8","kind":"commit","published_at":"2015-04-09T04:48:06.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.8.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.8.0/manifests"},{"name":"v2.7.1","sha":"103654f8f32c010ad1e62cefc9ab92d7c8d18c8e","kind":"commit","published_at":"2015-03-11T00:44:38.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.7.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.7.1/manifests"},{"name":"v2.7.0","sha":"481e94381a0997260b867c066f1a8ac02b45e290","kind":"commit","published_at":"2015-03-09T15:26:17.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.7.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"c6807fd154dd3b7ce8756f141f8d3acfcc74be60","kind":"commit","published_at":"2014-12-29T16:09:13.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.6.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"863e73a311d85589355fbb9556692ea0cad48e8e","kind":"commit","published_at":"2014-12-15T12:51:22.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.5.1","html_url":"https://github.com/tj/commander.js/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"a12386a9529f14e404c88925c34b8a5b4c99c61c","kind":"commit","published_at":"2014-10-24T07:37:37.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.5.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.5.0/manifests"},{"name":"v2.4.0","sha":"db67c895df167682112e3a523de8d23b0a5ee543","kind":"commit","published_at":"2014-10-17T13:57:33.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.4.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.4.0/manifests"},{"name":"v2.3.0","sha":"7064153ba005eec3434fc670aff96bb5c3fe5416","kind":"tag","published_at":"2014-07-17T00:48:34.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/v2.3.0","html_url":"https://github.com/tj/commander.js/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/v2.3.0/manifests"},{"name":"2.2.0","sha":"534c63a55990c56090f5c05cca897985033331d7","kind":"tag","published_at":"2014-03-29T12:36:02.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/2.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.2.0/manifests"},{"name":"2.1.0","sha":"963458a078b727ba52ec9819e13a6d6cce0eab1f","kind":"tag","published_at":"2013-11-21T17:06:05.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/2.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.1.0/manifests"},{"name":"2.0.0","sha":"efc585c7831f589a9ab0c9e34ed8a9ac5b97acbf","kind":"tag","published_at":"2013-07-19T00:54:38.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/2.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/2.0.0/manifests"},{"name":"1.3.2","sha":"bf228821c28bb8bf410f1a843b298baf286509da","kind":"tag","published_at":"2013-07-18T16:26:42.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.3.2","html_url":"https://github.com/tj/commander.js/releases/tag/1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.2/manifests"},{"name":"1.3.1","sha":"1c6ea15fa56c6482f02d63f35d935880ff5a8cdb","kind":"tag","published_at":"2013-07-18T16:17:39.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.3.1","html_url":"https://github.com/tj/commander.js/releases/tag/1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.1/manifests"},{"name":"1.3.0","sha":"3dd56ef019bfecb9a8f1960bc08263c4ba06ebf2","kind":"tag","published_at":"2013-07-09T15:13:54.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.3.0","html_url":"https://github.com/tj/commander.js/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.3.0/manifests"},{"name":"1.2.0","sha":"fc560de5a5951e8d852c7bb4975010f59299f09c","kind":"tag","published_at":"2013-06-13T13:52:25.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.2.0/manifests"},{"name":"1.1.1","sha":"15da0f550acffabaccd4828c4d14de524e52350a","kind":"tag","published_at":"2012-11-20T23:10:10.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.1.1","html_url":"https://github.com/tj/commander.js/releases/tag/1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.1.1/manifests"},{"name":"1.1.0","sha":"2a2165584e5a149ad9949ffc999abab1b19980f9","kind":"tag","published_at":"2012-11-17T04:59:33.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.1.0/manifests"},{"name":"1.0.5","sha":"53d38cfe2e569bf0d69ca501ed0091ae77820ed4","kind":"tag","published_at":"2012-10-10T01:50:16.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.5","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.5/manifests"},{"name":"1.0.4","sha":"7cb5aeb88e249fc45d967a62f0638753404eb61b","kind":"tag","published_at":"2012-09-03T15:41:14.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.4","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"6092d8ef20e1f2c7ee2271ad5292a7143f790f68","kind":"tag","published_at":"2012-08-30T15:07:45.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.3","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"f0529b159e11b73b97e7d3238d3b2c561ffdb3f0","kind":"tag","published_at":"2012-08-24T20:37:02.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.2","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"77a337fffb69eb53ec2cc0cb1b23cfd7270f7f71","kind":"tag","published_at":"2012-08-03T20:48:21.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"cc966f6ce7a0e30484f56ba636d0a25f635dcb6c","kind":"tag","published_at":"2012-07-05T15:39:25.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/1.0.0","html_url":"https://github.com/tj/commander.js/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/1.0.0/manifests"},{"name":"0.6.1","sha":"df60805f235f5d32989ff5f826ef5a40a1a718a2","kind":"tag","published_at":"2012-06-01T19:23:41.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.6.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.6.1/manifests"},{"name":"0.6.0","sha":"d660ff3bd66e0d6198ca7a3f5e7ec018aedbe003","kind":"commit","published_at":"2012-04-11T00:52:15.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.6.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.6.0/manifests"},{"name":"0.5.1","sha":"25705d69e7f98de5d3061368890e728a66106da6","kind":"commit","published_at":"2011-12-20T16:24:09.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.5.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.5.1/manifests"},{"name":"0.5.0","sha":"f91f2035f972e90d0bc4c09391e834b39936676d","kind":"commit","published_at":"2011-12-04T19:44:34.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.5.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.5.0/manifests"},{"name":"0.4.3","sha":"0aec641d6882a601765e52c868d07c3ef1a8e02d","kind":"commit","published_at":"2011-12-04T17:54:20.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.4.3","html_url":"https://github.com/tj/commander.js/releases/tag/0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.3/manifests"},{"name":"0.4.2","sha":"22abcff0c76584ec9f4bb278bc0f4154ffbff756","kind":"commit","published_at":"2011-11-24T15:20:08.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.4.2","html_url":"https://github.com/tj/commander.js/releases/tag/0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.2/manifests"},{"name":"0.4.1","sha":"41fdf8924a3527872b1013dcaca761f003950f96","kind":"commit","published_at":"2011-11-18T16:48:11.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.4.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"29a3187961c74041f03e0ed6e169d2f40cc1d83c","kind":"commit","published_at":"2011-11-15T16:05:16.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.4.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.4.0/manifests"},{"name":"0.3.3","sha":"8cecea0dfc344b58ab0a63c1cef013bd840cbc13","kind":"commit","published_at":"2011-11-14T19:02:10.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.3.3","html_url":"https://github.com/tj/commander.js/releases/tag/0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.3/manifests"},{"name":"0.3.2","sha":"d1491e45b15d97b33fc306595a2832e94f56e97a","kind":"commit","published_at":"2011-11-01T21:27:27.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.3.2","html_url":"https://github.com/tj/commander.js/releases/tag/0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.2/manifests"},{"name":"0.3.1","sha":"d3deb365515b903eb77bf5f9261d5d7e18ef4b4e","kind":"commit","published_at":"2011-10-31T22:07:08.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.3.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.1/manifests"},{"name":"0.3.0","sha":"476ddaf918c721b5e72bdd4ee62c27fcc156c998","kind":"commit","published_at":"2011-10-31T15:36:44.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.3.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.3.0/manifests"},{"name":"0.2.1","sha":"81ec7aa05581a8e36df8d27fdc32f901f571775b","kind":"commit","published_at":"2011-10-24T21:03:17.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.2.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.2.1/manifests"},{"name":"0.2.0","sha":"15814b923a833b95bfecc45a4fc8c4ed60f1f9f0","kind":"commit","published_at":"2011-09-26T15:43:54.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.2.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.2.0/manifests"},{"name":"0.1.0","sha":"3fb7ab0588cc46b36a7a24954df8d54bb30fc85d","kind":"commit","published_at":"2011-08-24T11:45:29.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.1.0","html_url":"https://github.com/tj/commander.js/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.1.0/manifests"},{"name":"0.0.5","sha":"2fd3d5ad79da7d694f6a6a9447cb064136411546","kind":"commit","published_at":"2011-08-19T01:18:06.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.0.5","html_url":"https://github.com/tj/commander.js/releases/tag/0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.5/manifests"},{"name":"0.0.4","sha":"3353805a5b8afc91ff1d52dee571b156fd0ab757","kind":"commit","published_at":"2011-08-15T15:44:49.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.0.4","html_url":"https://github.com/tj/commander.js/releases/tag/0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.4/manifests"},{"name":"0.0.3","sha":"85c6b5016df837eefb07da000497c0ad86a1ff34","kind":"commit","published_at":"2011-08-15T11:00:06.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.0.3","html_url":"https://github.com/tj/commander.js/releases/tag/0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.3/manifests"},{"name":"0.0.2","sha":"7f12f03d0974238a1e3b63f063611dabec159379","kind":"commit","published_at":"2011-08-15T10:12:28.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.0.2","html_url":"https://github.com/tj/commander.js/releases/tag/0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.2/manifests"},{"name":"0.0.1","sha":"d4a9c4071506300967dc59fc48ed7c2f4f54d882","kind":"commit","published_at":"2011-08-14T22:17:46.000Z","download_url":"https://codeload.github.com/tj/commander.js/tar.gz/0.0.1","html_url":"https://github.com/tj/commander.js/releases/tag/0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tj%2Fcommander.js/tags/0.0.1/manifests"}]},"repo_metadata_updated_at":"2024-10-29T20:52:21.474Z","dependent_packages_count":74942,"downloads":870795079,"downloads_period":"last-month","dependent_repos_count":1082389,"rankings":{"downloads":0.000520216716808257,"dependent_repos_count":0.031623700416501935,"dependent_packages_count":0.0012594720512199903,"stargazers_count":0.5614781163993118,"forks_count":0.9371567254164745,"docker_downloads_count":0.006516398873703429,"average":0.25642577164567},"purl":"pkg:npm/commander","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/commander","docker_dependents_count":41813,"docker_downloads_count":11556582607,"usage_url":"https://repos.ecosyste.ms/usage/npm/commander","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/commander/dependencies","status":null,"funding_links":["https://github.com/sponsors/tj","https://github.com/sponsors/shadowspawn","https://github.com/sponsors/abetomo","https://tidelift.com/funding/github/npm/commander"],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/commander/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/commander/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/commander/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/commander/related_packages","maintainers":[{"uuid":"tjholowaychuk","login":"tjholowaychuk","name":null,"email":"tj@vision-media.ca","url":null,"packages_count":528,"html_url":"https://www.npmjs.com/~tjholowaychuk","role":null,"created_at":"2022-11-10T11:16:59.802Z","updated_at":"2022-11-10T11:16:59.802Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/tjholowaychuk/packages"},{"uuid":"abetomo","login":"abetomo","name":null,"email":"abe@enzou.tokyo","url":null,"packages_count":13,"html_url":"https://www.npmjs.com/~abetomo","role":null,"created_at":"2022-11-10T11:16:59.809Z","updated_at":"2022-11-10T11:16:59.809Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/abetomo/packages"},{"uuid":"shadowspawn","login":"shadowspawn","name":null,"email":"npm_j@ruru.gen.nz","url":null,"packages_count":7,"html_url":"https://www.npmjs.com/~shadowspawn","role":null,"created_at":"2022-11-10T11:16:59.806Z","updated_at":"2022-11-10T11:16:59.806Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/shadowspawn/packages"},{"uuid":"somekittens","login":"somekittens","name":null,"email":"rkoutnik@gmail.com","url":null,"packages_count":24,"html_url":"https://www.npmjs.com/~somekittens","role":null,"created_at":"2022-11-10T11:16:59.798Z","updated_at":"2022-11-10T11:16:59.798Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/somekittens/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5005316,"maintainers_count":1012639,"namespaces_count":295318,"keywords_count":699769,"github":"npm","metadata":{"funded_packages_count":150180},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-05T05:52:15.849Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":1888,"unique_repositories_count_past_30_days":24,"recent_issues":[{"uuid":"5897311912","node_id":"PR_kwDOUhE1P88AAAABJARYPA","number":84,"state":"closed","title":"build(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-17T18:13:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T10:14:13.000Z","updated_at":"2026-10-17T18:13:29.000Z","time_to_close":28746,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/ashlrai/lexicon/pull/84","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ashlrai%2Flexicon/issues/84","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/84/packages"},{"uuid":"5880383346","node_id":"PR_kwDOSSJsEs8AAAABIy4ANg","number":328,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T07:46:58.000Z","updated_at":"2026-10-16T07:59:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":20,"packages":[{"name":"@heycatch/sdk","old_version":"0.7.0","new_version":"0.8.3","repository_url":"https://github.com/White-Digital-Company/heycatch"},{"name":"@sentry/nextjs","old_version":"10.68.0","new_version":"11.7.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@simplewebauthn/browser","old_version":"13.3.0","new_version":"14.0.0","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"@simplewebauthn/server","old_version":"13.3.2","new_version":"14.0.3","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"drizzle-orm","old_version":"0.45.2","new_version":"0.45.4","repository_url":"https://github.com/drizzle-team/drizzle-orm"},{"name":"jose","old_version":"6.2.3","new_version":"6.2.12","repository_url":"https://github.com/panva/jose"},{"name":"mongoose","old_version":"9.8.0","new_version":"9.11.2","repository_url":"https://github.com/Automattic/mongoose"},{"name":"next","old_version":"16.3.8","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"next-intl","old_version":"4.13.0","new_version":"4.14.9","repository_url":"https://github.com/amannn/next-intl"},{"name":"nodemailer","old_version":"10.0.12","new_version":"10.1.0","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"otpauth","old_version":"9.4.1","new_version":"9.5.2","repository_url":"https://github.com/hectorm/otpauth"},{"name":"react","old_version":"19.2.5","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.5","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"stripe","old_version":"22.1.1","new_version":"23.0.0","repository_url":"https://github.com/stripe/stripe-node"},{"name":"dotenv","old_version":"16.6.1","new_version":"18.0.7","repository_url":"https://github.com/motdotla/dotenv"},{"name":"twitter-api-v2","old_version":"1.29.0","new_version":"1.29.1","repository_url":"https://github.com/plhery/node-twitter-api-v2"},{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"@actions/core","old_version":"2.0.3","new_version":"3.0.1","repository_url":"https://github.com/actions/toolkit"},{"name":"smol-toml","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"yaml","old_version":"2.9.0","new_version":"2.9.1","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 20 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@heycatch/sdk](https://github.com/White-Digital-Company/heycatch/tree/HEAD/packages/sdk) | `0.7.0` | `0.8.3` |\n| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.68.0` | `11.7.0` |\n| [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) | `13.3.0` | `14.0.0` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.2` | `14.0.3` |\n| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |\n| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.12` |\n| [mongoose](https://github.com/Automattic/mongoose) | `9.8.0` | `9.11.2` |\n| [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.0` |\n| [next-intl](https://github.com/amannn/next-intl) | `4.13.0` | `4.14.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.12` | `10.1.0` |\n| [otpauth](https://github.com/hectorm/otpauth) | `9.4.1` | `9.5.2` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.5` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.3.0` |\n| [stripe](https://github.com/stripe/stripe-node) | `22.1.1` | `23.0.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `18.0.7` |\n| [twitter-api-v2](https://github.com/plhery/node-twitter-api-v2) | `1.29.0` | `1.29.1` |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.3` | `3.0.1` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.9.0` | `1.9.1` |\n| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |\n\n\nUpdates `@heycatch/sdk` from 0.7.0 to 0.8.3\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/White-Digital-Company/heycatch/commits/HEAD/packages/sdk\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/nextjs` from 10.68.0 to 11.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/nextjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e11.7.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(cloudflare): Add opt-in cron monitoring for Cron Triggers (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25014\"\u003e#25014\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003ecronTriggersIntegration\u003c/code\u003e sends check-ins for Cron Triggers. Each check-in includes the schedule from \u003ccode\u003econtroller.cron\u003c/code\u003e, so Sentry creates the monitor on the first run. The integration is opt-in, because monitors are billed.\u003c/p\u003e\n\u003cp\u003eCron Triggers have no names, so map each cron expression of your wrangler config to a monitor slug. With the Sentry Cloudflare Vite plugin, add the integration to \u003ccode\u003esrc/instrument.server.ts\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// src/monitorSlugs.ts\nexport const monitorSlugs: Record\u0026lt;string, string\u0026gt; = {\n  '30 9 * * MON-FRI': 'daily-report',\n};\n\u003cp\u003e// src/instrument.server.ts\nimport * as Sentry from '\u003ccode\u003e@​sentry/cloudflare\u003c/code\u003e';\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default Sentry.defineCloudflareOptions(env =\u0026gt; ({\ndsn: env.SENTRY_DSN,\nintegrations: [Sentry.cronTriggersIntegration({ monitorSlug: cron =\u0026gt; monitorSlugs[cron] })],\n}));\u003c/p\u003e\n\u003cp\u003e// src/index.ts\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default {\nasync scheduled(controller, env) {\nswitch (monitorSlugs[controller.cron]) {\ncase 'daily-report':\n// Your daily report job\nbreak;\n}\n},\n};\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003emonitorSlug\u003c/code\u003e function can also return monitor settings, for example \u003ccode\u003e{ monitorSlug: 'daily-report', maxRuntime: 30 }\u003c/code\u003e, or \u003ccode\u003eundefined\u003c/code\u003e to send no check-ins for a trigger. Without \u003ccode\u003emonitorSlug\u003c/code\u003e, the SDK derives the slug from the cron expression. If you deploy with \u003ccode\u003ewrangler\u003c/code\u003e directly, pass the same integration to \u003ccode\u003eSentry.withSentry\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Add neonIntegration for \u003ccode\u003e@​neondatabase/serverless\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25164\"\u003e#25164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25176\"\u003e#25176\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003eneonIntegration\u003c/code\u003e creates \u003ccode\u003edb\u003c/code\u003e spans for queries of the \u003ccode\u003e@neondatabase/serverless\u003c/code\u003e driver: for the WebSocket \u003ccode\u003eClient\u003c/code\u003e and \u003ccode\u003ePool\u003c/code\u003e, and for the HTTP \u003ccode\u003eneon()\u003c/code\u003e function. This includes the \u003ccode\u003eneon-http\u003c/code\u003e and \u003ccode\u003eneon-serverless\u003c/code\u003e adapters of Drizzle. The integration is on by default when tracing is enabled.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Stop sending the process session once request sessions are tracked (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/24915\"\u003e#24915\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eNode servers sent release health data two times: as request session aggregates, and as the process session of \u003ccode\u003eprocessSessionIntegration\u003c/code\u003e. An error in a request also marked the process session as errored, so the SDK counted the error two times. Now the SDK drops the process session when it tracks the first request session. Scripts, CLIs and workers that do not serve requests keep the process session, and so do servers with \u003ccode\u003ehttpServerIntegration({ sessions: false })\u003c/code\u003e. This changes the release health numbers of Node servers, because they no longer send the errored or crashed update of the process session.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(server-utils): Record decide calls as \u003ccode\u003egen_ai.decide\u003c/code\u003e spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25270\"\u003e#25270\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25272\"\u003e#25272\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25274\"\u003e#25274\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25281\"\u003e#25281\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/nextjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e11.7.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(cloudflare): Add opt-in cron monitoring for Cron Triggers (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25014\"\u003e#25014\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003ecronTriggersIntegration\u003c/code\u003e sends check-ins for Cron Triggers. Each check-in includes the schedule from \u003ccode\u003econtroller.cron\u003c/code\u003e, so Sentry creates the monitor on the first run. The integration is opt-in, because monitors are billed.\u003c/p\u003e\n\u003cp\u003eCron Triggers have no names, so map each cron expression of your wrangler config to a monitor slug. With the Sentry Cloudflare Vite plugin, add the integration to \u003ccode\u003esrc/instrument.server.ts\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// src/monitorSlugs.ts\nexport const monitorSlugs: Record\u0026lt;string, string\u0026gt; = {\n  '30 9 * * MON-FRI': 'daily-report',\n};\n\u003cp\u003e// src/instrument.server.ts\nimport * as Sentry from '\u003ccode\u003e@​sentry/cloudflare\u003c/code\u003e';\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default Sentry.defineCloudflareOptions(env =\u0026gt; ({\ndsn: env.SENTRY_DSN,\nintegrations: [Sentry.cronTriggersIntegration({ monitorSlug: cron =\u0026gt; monitorSlugs[cron] })],\n}));\u003c/p\u003e\n\u003cp\u003e// src/index.ts\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default {\nasync scheduled(controller, env) {\nswitch (monitorSlugs[controller.cron]) {\ncase 'daily-report':\n// Your daily report job\nbreak;\n}\n},\n};\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003emonitorSlug\u003c/code\u003e function can also return monitor settings, for example \u003ccode\u003e{ monitorSlug: 'daily-report', maxRuntime: 30 }\u003c/code\u003e, or \u003ccode\u003eundefined\u003c/code\u003e to send no check-ins for a trigger. Without \u003ccode\u003emonitorSlug\u003c/code\u003e, the SDK derives the slug from the cron expression. If you deploy with \u003ccode\u003ewrangler\u003c/code\u003e directly, pass the same integration to \u003ccode\u003eSentry.withSentry\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Add neonIntegration for \u003ccode\u003e@​neondatabase/serverless\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25164\"\u003e#25164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25176\"\u003e#25176\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003eneonIntegration\u003c/code\u003e creates \u003ccode\u003edb\u003c/code\u003e spans for queries of the \u003ccode\u003e@neondatabase/serverless\u003c/code\u003e driver: for the WebSocket \u003ccode\u003eClient\u003c/code\u003e and \u003ccode\u003ePool\u003c/code\u003e, and for the HTTP \u003ccode\u003eneon()\u003c/code\u003e function. This includes the \u003ccode\u003eneon-http\u003c/code\u003e and \u003ccode\u003eneon-serverless\u003c/code\u003e adapters of Drizzle. The integration is on by default when tracing is enabled.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Stop sending the process session once request sessions are tracked (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/24915\"\u003e#24915\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eNode servers sent release health data two times: as request session aggregates, and as the process session of \u003ccode\u003eprocessSessionIntegration\u003c/code\u003e. An error in a request also marked the process session as errored, so the SDK counted the error two times. Now the SDK drops the process session when it tracks the first request session. Scripts, CLIs and workers that do not serve requests keep the process session, and so do servers with \u003ccode\u003ehttpServerIntegration({ sessions: false })\u003c/code\u003e. This changes the release health numbers of Node servers, because they no longer send the errored or crashed update of the process session.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(server-utils): Record decide calls as \u003ccode\u003egen_ai.decide\u003c/code\u003e spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25270\"\u003e#25270\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25272\"\u003e#25272\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25274\"\u003e#25274\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25281\"\u003e#25281\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/47dff7de2de5e24e18d7f43003e55dd497bd9a8d\"\u003e\u003ccode\u003e47dff7d\u003c/code\u003e\u003c/a\u003e release: 11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/72588e6b35e6d3b988ecb7fd2bffe4cafb5b1d48\"\u003e\u003ccode\u003e72588e6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/25296\"\u003e#25296\u003c/a\u003e from getsentry/prepare-release/11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/323307a0ca407ac8cdae9ff3e2d3b2f60f4636d6\"\u003e\u003ccode\u003e323307a\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/87bdc84665943aaabade21a1bdc1ba46a6b2d2e6\"\u003e\u003ccode\u003e87bdc84\u003c/code\u003e\u003c/a\u003e fix(bundler-plugins): Escape JSON in generated injection code (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/25265\"\u003e#25265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/b80300bd1c05538cda5ae39296a12499a1ac4af7\"\u003e\u003ccode\u003eb80300b\u003c/code\u003e\u003c/a\u003e fix(server-utils): Stop treating previous_response_id as the OpenAI conversat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/236c0ceb2eb8ff362e664e810b0ae284bd632689\"\u003e\u003ccode\u003e236c0ce\u003c/code\u003e\u003c/a\u003e fix(browser): Apply \u003ccode\u003eurlQueryParams\u003c/code\u003e to breadcrumb and element timing URLs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/ee046613aa4eb59b456abd90718a340e9eb010ae\"\u003e\u003ccode\u003eee04661\u003c/code\u003e\u003c/a\u003e fix(browser): Apply \u003ccode\u003eurlQueryParams\u003c/code\u003e to event URLs, static span names and LCP...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/1e861780b1afd311d87461d1a93c0834ccbc62c4\"\u003e\u003ccode\u003e1e86178\u003c/code\u003e\u003c/a\u003e fix(nuxt): Keep \u003ccode\u003e@sentry/server-runtime-injection\u003c/code\u003e external on Nitro v3 (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/24901\"\u003e#24901\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/8a6b9cae09670ff92ddc096a9190191ad6361f05\"\u003e\u003ccode\u003e8a6b9ca\u003c/code\u003e\u003c/a\u003e test(node-integration): Stop exporting \u003ccode\u003eNODE_VERSION\u003c/code\u003e and \u003ccode\u003eRUNTIME\u003c/code\u003e from the ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/9f7cbad3bb6129f446e3b1ecfa414395d8364b12\"\u003e\u003ccode\u003e9f7cbad\u003c/code\u003e\u003c/a\u003e feat(server-utils): Map Mastra classifier evaluations to gen_ai.decide spans ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.68.0...11.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/browser` from 13.3.0 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/browser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method as a single method to call all of the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x and higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on \u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno minor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public key algorithm during registration. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's \u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument that supports cross-origin authentication verification. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e, h/t \u003ca href=\"https://github.com/agektmr\"\u003e\u003ccode\u003e@​agektmr\u003c/code\u003e\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be used to capture MetadataService status output in a project-specific manner. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/765\"\u003e#765\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The typing of \u003ccode\u003etransports\u003c/code\u003e in \u003ccode\u003eexcludeCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e, and \u003ccode\u003eallowCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateAuthenticationOptions()\u003c/code\u003e, has been updated to \u003ccode\u003estring[]\u003c/code\u003e to make it easier to call these methods (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/776\"\u003e#776\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003e\u0026quot;tpm\u0026quot;\u003c/code\u003e attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/772\"\u003e#772\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e and \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e now use the same default list of allowed public key algorithms for \u003ccode\u003esupportedAlgorithmIDs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/791\"\u003e#791\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The \u003ccode\u003evalidateCertificatePath()\u003c/code\u003e helper now supports x5c arrays containing cross-signed certificates (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/796\"\u003e#796\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[browser] [server]\u003c/strong\u003e The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Updated MDS blob signature verification to support more algorithms (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/788\"\u003e#788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Updated \u003ccode\u003eMetadataService\u003c/code\u003e to know about the new FIDO MDS blob trust anchor certificate (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/789\"\u003e#789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/browser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys\nusing the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those\nsame supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44\npasskeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers\nstart coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for\nmore info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method\nas a single method to call all of the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x\nand higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim\nto support Node LTS releases through their Active and Maintenance windows as tracked on\n\u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno\nminor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as\npasskey public key algorithms when the runtime supports them. In runtimes that support these PQC\nalgorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public\nkey algorithm during registration. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e,\n\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn\nsupport detection by also checking for typical passkey-related WebAuthn features. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's\n\u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument\nthat supports cross-origin authentication verification. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be\nused to capture MetadataService status output in a project-specific manner. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/3e2dc0c4505b1a381cf7f2da5495825f1f43661e\"\u003e\u003ccode\u003e3e2dc0c\u003c/code\u003e\u003c/a\u003e Update version to v14.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/618c0e9611f08d7f9f6d43ba5b100e21cb957fd4\"\u003e\u003ccode\u003e618c0e9\u003c/code\u003e\u003c/a\u003e Merge v14.0.0 milestone to master (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser/issues/792\"\u003e#792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.0/packages/browser\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.2 to 14.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings from when the Node process starts to when a method is called that checks for PQC support (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v3 Moderate (5.4) security vulnerability identified in \u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Revamped certificate revocation logic to only cryptographically verify and process CRLs from certificates that chained back to an RP-chosen trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-2g3p-m8c9-hhwh\"\u003eGHSA-2g3p-m8c9-hhwh\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Attestation statements using PQC algorithms can now be verified (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method as a single method to call all of the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x and higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on \u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno minor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public key algorithm during registration. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's \u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument that supports cross-origin authentication verification. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e, h/t \u003ca href=\"https://github.com/agektmr\"\u003e\u003ccode\u003e@​agektmr\u003c/code\u003e\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be used to capture MetadataService status output in a project-specific manner. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/765\"\u003e#765\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The typing of \u003ccode\u003etransports\u003c/code\u003e in \u003ccode\u003eexcludeCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e, and \u003ccode\u003eallowCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateAuthenticationOptions()\u003c/code\u003e, has been updated to \u003ccode\u003estring[]\u003c/code\u003e to make it easier to call these methods (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/776\"\u003e#776\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003e\u0026quot;tpm\u0026quot;\u003c/code\u003e attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/772\"\u003e#772\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e and \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e now use the same default list of allowed public key algorithms for \u003ccode\u003esupportedAlgorithmIDs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/791\"\u003e#791\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The \u003ccode\u003evalidateCertificatePath()\u003c/code\u003e helper now supports x5c arrays containing cross-signed certificates (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/796\"\u003e#796\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[browser] [server]\u003c/strong\u003e The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings\nfrom when the Node process starts to when a method is called that checks for PQC support\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v3 Moderate (5.4 / 10) and a CVSS v3 Moderate (6.3 / 10) security\nvulnerabilities identified in \u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e. See the security advisory linked below for\nmore information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Revamped certificate revocation logic to only cryptographically verify and process\nCRLs from certificates that chained back to an RP-chosen trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-2g3p-m8c9-hhwh\"\u003eGHSA-2g3p-m8c9-hhwh\u003c/a\u003e,\n\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-j3h4-m3m2-7p7j\"\u003eGHSA-j3h4-m3m2-7p7j\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Attestation statements using PQC algorithms can now be verified\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys\nusing the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those\nsame supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44\npasskeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers\nstart coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for\nmore info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method\nas a single method to call all of the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x\nand higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim\nto support Node LTS releases through their Active and Maintenance windows as tracked on\n\u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno\nminor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/084e601404f02429b61d3f0d027068b697566ba9\"\u003e\u003ccode\u003e084e601\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/cd402cce117ff8df1ac4c96ca719031ad114138a\"\u003e\u003ccode\u003ecd402cc\u003c/code\u003e\u003c/a\u003e Lazily evaluate PQC support to prevent Node warnings on startup (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7e3c4c4ff7b3465de4e614274a3285e4f06d36fc\"\u003e\u003ccode\u003e7e3c4c4\u003c/code\u003e\u003c/a\u003e Kinda makes more sense to do the AKI check first\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/21f99a28d5331735844235044af5783d4353c1d5\"\u003e\u003ccode\u003e21f99a2\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/f03758a427845dff1a66a573f6b5e2efa291ec5e\"\u003e\u003ccode\u003ef03758a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/0bfdc3bcb58e2662bf5e9017242a57523424b025\"\u003e\u003ccode\u003e0bfdc3b\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/4831ce29093ecb7e5ddbdaa786f2cf5c846475de\"\u003e\u003ccode\u003e4831ce2\u003c/code\u003e\u003c/a\u003e Fix X.509 parsing to support PQC use in attestation statements (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/3e2dc0c4505b1a381cf7f2da5495825f1f43661e\"\u003e\u003ccode\u003e3e2dc0c\u003c/code\u003e\u003c/a\u003e Update version to v14.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/618c0e9611f08d7f9f6d43ba5b100e21cb957fd4\"\u003e\u003ccode\u003e618c0e9\u003c/code\u003e\u003c/a\u003e Merge v14.0.0 milestone to master (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/792\"\u003e#792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/4b189bdfd6ffd5e3d30023b2d3e9970d81c89ce9\"\u003e\u003ccode\u003e4b189bd\u003c/code\u003e\u003c/a\u003e Update server version to 13.3.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.3/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `drizzle-orm` from 0.45.2 to 0.45.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/drizzle-team/drizzle-orm/releases\"\u003edrizzle-orm's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.45.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostgres-js\u003c/code\u003e not using prepared queries on explicit \u003ccode\u003e.prepare(name)\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.45.3\u003c/h2\u003e\n\u003ch2\u003eNew Netlify DB Driver\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eNote: The Netlify DB driver is developed and maintained by the Netlify team.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e\u003cstrong\u003eInstallation:\u003c/strong\u003e\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003enpm i @netlify/db\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eUsage example:\u003c/strong\u003e\u003c/p\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\u003cp\u003e// reads NETLIFY_DB_URL and NETLIFY_DB_DRIVER env vars\nconst db = drizzle();\u003c/p\u003e\n\u003cp\u003econst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\nconst db = drizzle(process.env.DATABASE_URL);\n\nconst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\n// Explicit client — consumer controls the driver\nconst db = drizzle({ client: netlifyDbClient });\n\nconst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/eab8bedbb65d5429c54e612ddbd88aa23091d398\"\u003e\u003ccode\u003eeab8bed\u003c/code\u003e\u003c/a\u003e Fixed \u003ccode\u003epostgres-js\u003c/code\u003e not using prepared queries on explicit \u003ccode\u003e.prepare(name)\u003c/code\u003e (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/15454dbe49d827c6081f3d0231e2e7985e517295\"\u003e\u003ccode\u003e15454db\u003c/code\u003e\u003c/a\u003e +\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/54e436feea82c856d5644152cc9d186e237e2e95\"\u003e\u003ccode\u003e54e436f\u003c/code\u003e\u003c/a\u003e exclude gel from pull\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/0fd1cc61f1ff6553234d29042461fc5e9aa551c3\"\u003e\u003ccode\u003e0fd1cc6\u003c/code\u003e\u003c/a\u003e remove gel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/d028db74f20cbf3740bcaaf136beb9eb27f0928c\"\u003e\u003ccode\u003ed028db7\u003c/code\u003e\u003c/a\u003e skip gel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/93dc01e355724e666b656377cb07cf9613153787\"\u003e\u003ccode\u003e93dc01e\u003c/code\u003e\u003c/a\u003e [All-kit]: Warn when journal timestamps can cause migrations to be skipped (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/b7862528fd8fc39bc2653a6c18dad7c1f4e68d10\"\u003e\u003ccode\u003eb786252\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/drizzle-team/drizzle-orm/issues/6049\"\u003e#6049\u003c/a\u003e from drizzle-team/drizzle-kit-announcements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/f9fc5bf30bc14e84f2416349acbd6c04001a497e\"\u003e\u003ccode\u003ef9fc5bf\u003c/code\u003e\u003c/a\u003e Add drizzle-kit announcement manifest and schema doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/9d6453215d18705986c2081124437bb6a03fb943\"\u003e\u003ccode\u003e9d64532\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/drizzle-team/drizzle-orm/issues/6004\"\u003e#6004\u003c/a\u003e from drizzle-team/pin-npm-11-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/0af2f2ea5b75f0831a36874e23df9c294c49e26e\"\u003e\u003ccode\u003e0af2f2e\u003c/code\u003e\u003c/a\u003e Pin the release npm self-update to major 11: the npm 12.0.0 tarball is missin...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/drizzle-team/drizzle-orm/compare/0.45.2...0.45.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jose` from 6.2.3 to 6.2.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/panva/jose/releases\"\u003ejose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.2.12\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclarify and shorten public API guidance (\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003ebe62530\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify JWS and JWE operation cores (\u003ca href=\"https://github.com/panva/jose/commit/92e9640290085dd37c152aeb7c4d5b22e9df96ab\"\u003e92e9640\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid copying AES-GCM output (\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e6925d43\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ededuplicate pending jwks key imports (\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003ebf5138b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eencode single-signature JWS input once (\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e7bc9a33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize General JWE shared headers once (\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e78637bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize jwks selection metadata once (\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003efd3ae3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse native encoding for larger ASCII strings (\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003eb23a6f3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.2.11\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erender subpath indexes as tables (\u003ca href=\"https://github.com/panva/jose/commit/94589ee9efe6cf257a133765d753bbe8d55f6ed3\"\u003e94589ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eshorten API index descriptions (\u003ca href=\"https://github.com/panva/jose/commit/681482fcca7577c6a4b8df61c992f195f6e6ac1b\"\u003e681482f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emodel JWE key management modes (\u003ca href=\"https://github.com/panva/jose/commit/e01dda65d5d272c8dd44710d0c70673c1530038e\"\u003ee01dda6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e reduce declaration repetition (\u003ca href=\"https://github.com/panva/jose/commit/55b970fc08c9082041f40473470ee0fe0e8b0087\"\u003e55b970f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.2.10\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e consume serialization members once (\u003ca href=\"https://github.com/panva/jose/commit/9bee285a6bc356b495c29ae0a5e70b24e723568e\"\u003e9bee285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e reject empty protected and JWE AAD members (\u003ca href=\"https://github.com/panva/jose/commit/8da41453dce79967c6e3f47a787039a7f94de8fe\"\u003e8da4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e validate serialized header values (\u003ca href=\"https://github.com/panva/jose/commit/b711d8fe223e3e85520d6c822d7a417cd872b718\"\u003eb711d8f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e conceal invalid decrypted CEK lengths (\u003ca href=\"https://github.com/panva/jose/commit/41fafe035a62d85f4b313e166100004dd09b111f\"\u003e41fafe0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e enforce AES-GCM tag boundaries (\u003ca href=\"https://github.com/panva/jose/commit/9a5b74454bf145a106312d519efe95b8a9b53a87\"\u003e9a5b744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e validate explicit encryption parameters (\u003ca href=\"https://github.com/panva/jose/commit/7a02697126e40757ed9e02ae786ec9a2b180aa5c\"\u003e7a02697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e accept empty octet-sequence keys (\u003ca href=\"https://github.com/panva/jose/commit/3f871e7859c1ce51d1afcbfeff92c354b8e96dd9\"\u003e3f871e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e normalize key resolution inputs (\u003ca href=\"https://github.com/panva/jose/commit/f54ee7bad8e21c975606bc5e47b352921ac0d890\"\u003ef54ee7b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e enforce verification key metadata (\u003ca href=\"https://github.com/panva/jose/commit/f9ba5101383154147780da7acf1aabc705f75aaf\"\u003ef9ba510\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e order overlapping remote reloads (\u003ca href=\"https://github.com/panva/jose/commit/9a1a913983aa44d065a423692a92148b2a6a36c3\"\u003e9a1a913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e reject invalid remote duration values (\u003ca href=\"https://github.com/panva/jose/commit/7bdb9e56e6a74b833af582532c6fff5bc727ec1c\"\u003e7bdb9e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e validate ext and key_ops parameters (\u003ca href=\"https://github.com/panva/jose/commit/4d91c37fdd36241785cb172774fa017bb8854458\"\u003e4d91c37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e reject mixed payload encoding modes (\u003ca href=\"https://github.com/panva/jose/commit/dc69713081a55a3d6955dd1d8c2cf184905febad\"\u003edc69713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e validate unencoded payload strings (\u003ca href=\"https://github.com/panva/jose/commit/541f28234442c5cbfc5f843a95ccd18a721f3697\"\u003e541f282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e enforce explicit verification policies (\u003ca href=\"https://github.com/panva/jose/commit/b3471826b02589656eaf71843671922644cc60e2\"\u003eb347182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e prevent replacing protected headers (\u003ca href=\"https://github.com/panva/jose/commit/ae07d09bcbac91825e27cde9989b603af3495263\"\u003eae07d09\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e reject invalid duration inputs (\u003ca href=\"https://github.com/panva/jose/commit/282f9aaa496e57f55417bca15e13c369b3f242fb\"\u003e282f9aa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e validate builder claim values (\u003ca href=\"https://github.com/panva/jose/commit/ea03f83d607fcaee6fc0778c8a4d40a2bbd75c9e\"\u003eea03f83\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/panva/jose/blob/main/CHANGELOG.md\"\u003ejose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.11...v6.2.12\"\u003e6.2.12\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclarify and shorten public API guidance (\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003ebe62530\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify JWS and JWE operation cores (\u003ca href=\"https://github.com/panva/jose/commit/92e9640290085dd37c152aeb7c4d5b22e9df96ab\"\u003e92e9640\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid copying AES-GCM output (\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e6925d43\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ededuplicate pending jwks key imports (\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003ebf5138b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eencode single-signature JWS input once (\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e7bc9a33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize General JWE shared headers once (\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e78637bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize jwks selection metadata once (\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003efd3ae3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse native encoding for larger ASCII strings (\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003eb23a6f3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.10...v6.2.11\"\u003e6.2.11\u003c/a\u003e (2026-09-04)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erender subpath indexes as tables (\u003ca href=\"https://github.com/panva/jose/commit/94589ee9efe6cf257a133765d753bbe8d55f6ed3\"\u003e94589ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eshorten API index descriptions (\u003ca href=\"https://github.com/panva/jose/commit/681482fcca7577c6a4b8df61c992f195f6e6ac1b\"\u003e681482f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emodel JWE key management modes (\u003ca href=\"https://github.com/panva/jose/commit/e01dda65d5d272c8dd44710d0c70673c1530038e\"\u003ee01dda6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e reduce declaration repetition (\u003ca href=\"https://github.com/panva/jose/commit/55b970fc08c9082041f40473470ee0fe0e8b0087\"\u003e55b970f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.9...v6.2.10\"\u003e6.2.10\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e consume serialization members once (\u003ca href=\"https://github.com/panva/jose/commit/9bee285a6bc356b495c29ae0a5e70b24e723568e\"\u003e9bee285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e reject empty protected and JWE AAD members (\u003ca href=\"https://github.com/panva/jose/commit/8da41453dce79967c6e3f47a787039a7f94de8fe\"\u003e8da4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e validate serialized header values (\u003ca href=\"https://github.com/panva/jose/commit/b711d8fe223e3e85520d6c822d7a417cd872b718\"\u003eb711d8f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e conceal invalid decrypted CEK lengths (\u003ca href=\"https://github.com/panva/jose/commit/41fafe035a62d85f4b313e166100004dd09b111f\"\u003e41fafe0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e enforce AES-GCM tag boundaries (\u003ca href=\"https://github.com/panva/jose/commit/9a5b74454bf145a106312d519efe95b8a9b53a87\"\u003e9a5b744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e validate explicit encryption parameters (\u003ca href=\"https://github.com/panva/jose/commit/7a02697126e40757ed9e02ae786ec9a2b180aa5c\"\u003e7a02697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e accept empty octet-sequence keys (\u003ca href=\"https://github.com/panva/jose/commit/3f871e7859c1ce51d1afcbfeff92c354b8e96dd9\"\u003e3f871e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e normalize key resolution inputs (\u003ca href=\"https://github.com/panva/jose/commit/f54ee7bad8e21c975606bc5e47b352921ac0d890\"\u003ef54ee7b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e enforce verification key metadata (\u003ca href=\"https://github.com/panva/jose/commit/f9ba5101383154147780da7acf1aabc705f75aaf\"\u003ef9ba510\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e order overlapping remote reloads (\u003ca href=\"https://github.com/panva/jose/commit/9a1a913983aa44d065a423692a92148b2a6a36c3\"\u003e9a1a913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e reject invalid remote duration values (\u003ca href=\"https://github.com/panva/jose/commit/7bdb9e56e6a74b833af582532c6fff5bc727ec1c\"\u003e7bdb9e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e validate ext and key_ops parameters (\u003ca href=\"https://github.com/panva/jose/commit/4d91c37fdd36241785cb172774fa017bb8854458\"\u003e4d91c37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e reject mixed payload encoding modes (\u003ca href=\"https://github.com/panva/jose/commit/dc69713081a55a3d6955dd1d8c2cf184905febad\"\u003edc69713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e validate unencoded payload strings (\u003ca href=\"https://github.com/panva/jose/commit/541f28234442c5cbfc5f843a95ccd18a721f3697\"\u003e541f282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e enforce explicit verification policies (\u003ca href=\"https://github.com/panva/jose/commit/b3471826b02589656eaf71843671922644cc60e2\"\u003eb347182\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/505a55b8f73536082367b2614cb77e927ba96ec1\"\u003e\u003ccode\u003e505a55b\u003c/code\u003e\u003c/a\u003e chore(release): 6.2.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e\u003ccode\u003e7bc9a33\u003c/code\u003e\u003c/a\u003e perf: encode single-signature JWS input once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e\u003ccode\u003e78637bd\u003c/code\u003e\u003c/a\u003e perf: normalize General JWE shared headers once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003e\u003ccode\u003ebf5138b\u003c/code\u003e\u003c/a\u003e perf: deduplicate pending jwks key imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003e\u003ccode\u003eb23a6f3\u003c/code\u003e\u003c/a\u003e perf: use native encoding for larger ASCII strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003e\u003ccode\u003efd3ae3f\u003c/code\u003e\u003c/a\u003e perf: normalize jwks selection metadata once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e\u003ccode\u003e6925d43\u003c/code\u003e\u003c/a\u003e perf: avoid copying AES-GCM output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003e\u003ccode\u003ebe62530\u003c/code\u003e\u003c/a\u003e docs: clarify and shorten public API guidance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/1b413121c71eed953852ac82a288f8a6b37f1343\"\u003e\u003ccode\u003e1b41312\u003c/code\u003e\u003c/a\u003e build: preserve README when generation fails\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/0b518296d441aa95e45268eee178b3ad22a78d49\"\u003e\u003ccode\u003e0b51829\u003c/code\u003e\u003c/a\u003e build: check tree-shaking for every public binding\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/panva/jose/compare/v6.2.3...v6.2.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongoose` from 9.8.0 to 9.11.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/releases\"\u003emongoose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.11.2 / 2026-10-12\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf: avoid applying saveSubdocs and sharding plugins to subdocuments \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16585\"\u003e#16585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: upgrade to kareem@3.4.1 for \u003ca href=\"https://redirect.github.com/mongoosejs/kareem/issues/47\"\u003emongoosejs/kareem#47\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16588\"\u003e#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): cast array filter values in bulkWrite() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16574\"\u003e#16574\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16573\"\u003e#16573\u003c/a\u003e \u003ca href=\"https://github.com/OmBhandwaldar\"\u003eOmBhandwaldar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): allow function messages for number min/max and string minlength \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16579\"\u003e#16579\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16572\"\u003e#16572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/8512\"\u003e#8512\u003c/a\u003e \u003ca href=\"https://github.com/NotAFlightRisk\"\u003eNotAFlightRisk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: make MergeType more efficiently handle MergeType\u0026lt;A, {}\u0026gt; \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16581\"\u003e#16581\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16580\"\u003e#16580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix broken API anchors and a malformed link \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16583\"\u003e#16583\u003c/a\u003e \u003ca href=\"https://github.com/SatvikMishra08\"\u003eSatvikMishra08\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.11.1 / 2026-10-07\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): call recursive toObject() when setting a path to a nested object \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16571\"\u003e#16571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): keep casting array filters after a path not in the schema \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16558\"\u003e#16558\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): apply flattenDecimals when toObject() takes the shallow fast path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16569\"\u003e#16569\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16568\"\u003e#16568\u003c/a\u003e \u003ca href=\"https://github.com/jeremyml\"\u003ejeremyml\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): cast operators under $not inside $elemMatch on primitive arrays \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16542\"\u003e#16542\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/13880\"\u003e#13880\u003c/a\u003e \u003ca href=\"https://github.com/breken-ai\"\u003ebreken-ai\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): use embedded discriminator schema when filter selects the key with $eq or $in \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16543\"\u003e#16543\u003c/a\u003e \u003ca href=\"https://github.com/breken-ai\"\u003ebreken-ai\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(documentarray): don't pass arrayPathIndex to subdocuments when initializing nested document arrays \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16546\"\u003e#16546\u003c/a\u003e \u003ca href=\"https://github.com/Mohamed-Elshesheny\"\u003eMohamed-Elshesheny\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): await driver cleanup when destroying query cursors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16562\"\u003e#16562\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16560\"\u003e#16560\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): reject getDriverCursor after initialization errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16563\"\u003e#16563\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16561\"\u003e#16561\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes(schema): treat Int32 paths as number \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16565\"\u003e#16565\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16564\"\u003e#16564\u003c/a\u003e \u003ca href=\"https://github.com/lazerg\"\u003elazerg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes(models): align UpdateOneModel and UpdateManyModel update typing with UpdateQuery \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16559\"\u003e#16559\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16545\"\u003e#16545\u003c/a\u003e \u003ca href=\"https://github.com/aipd506\"\u003eaipd506\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.11.0 / 2026-10-05\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: use MongoDB Node.js driver 7.7.x \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16550\"\u003e#16550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(query): add Query.prototype.findAndCount() for composable paginated queries \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16508\"\u003e#16508\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16504\"\u003e#16504\u003c/a\u003e \u003ca href=\"https://github.com/lokeshllkumar\"\u003elokeshllkumar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid double-calling validators on document arrays underneath nested paths \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16484\"\u003e#16484\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5411\"\u003e#5411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: pass TLeanResultType into query for type narrowing support with lean() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16523\"\u003e#16523\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16519\"\u003e#16519\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(guide): use async/await instead of removed callbacks \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16566\"\u003e#16566\u003c/a\u003e \u003ca href=\"https://github.com/joi-agent\"\u003ejoi-agent\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run TypeScript tests on typescript 5+7 with combinations of exactOptionalPropertyTypes, skipLibCheck, strict \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16510\"\u003e#16510\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16506\"\u003e#16506\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.4 / 2026-10-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16557\"\u003e#16557\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): resolve dotted parent path when collecting deferred sub-populate children \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16538\"\u003e#16538\u003c/a\u003e \u003ca href=\"https://github.com/jfits\"\u003ejfits\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(array): compare dates by value in indexOf() so pull() removes them \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16535\"\u003e#16535\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(map): register $set when Map#set() replaces an array \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16540\"\u003e#16540\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16539\"\u003e#16539\u003c/a\u003e \u003ca href=\"https://github.com/luantaraschi\"\u003eluantaraschi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): cast case and then expressions in $expr $switch branches \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16534\"\u003e#16534\u003c/a\u003e \u003ca href=\"https://github.com/kwy404\"\u003ekwy404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(guide): fix read preference tag set example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16541\"\u003e#16541\u003c/a\u003e \u003ca href=\"https://github.com/NotAFlightRisk\"\u003eNotAFlightRisk\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.3 / 2026-09-29\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(model): preserve unsaved documents after ordered bulkSave errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16533\"\u003e#16533\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16532\"\u003e#16532\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): don't mutate the caller's update object in bulkWrite updateMany \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16526\"\u003e#16526\u003c/a\u003e \u003ca href=\"https://github.com/fadiroot\"\u003efadiroot\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): run setters declared on the union path itself \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16528\"\u003e#16528\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(collection): open collection if connection was already opened \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16527\"\u003e#16527\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16525\"\u003e#16525\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16524\"\u003e#16524\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16529\"\u003e#16529\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16502\"\u003e#16502\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16480\"\u003e#16480\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.2 / 2026-09-22\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md\"\u003emongoose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.11.2 / 2026-10-12\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf: avoid applying saveSubdocs and sharding plugins to subdocuments \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16585\"\u003e#16585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: upgrade to kareem@3.4.1 for \u003ca href=\"https://redirect.github.com/mongoosejs/kareem/issues/47\"\u003emongoosejs/kareem#47\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16588\"\u003e#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): cast array filter values in bulkWrite() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16574\"\u003e#16574\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16573\"\u003e#16573\u003c/a\u003e \u003ca href=\"https://github.com/OmBhandwaldar\"\u003eOmBhandwaldar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): allow function messages for number min/max and string minlength \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16579\"\u003e#16579\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16572\"\u003e#16572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/8512\"\u003e#8512\u003c/a\u003e \u003ca...\n\n_Description has been truncated_","html_url":"https://github.com/BehalfID/behalf/pull/328","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/BehalfID%2Fbehalf/issues/328","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/328/packages"},{"uuid":"5857735067","node_id":"PR_kwDOVBIbmM8AAAABIg0_oA","number":32,"state":"open","title":"chore(deps): bump the npm-production group across 1 directory with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-15T00:11:23.000Z","updated_at":"2026-10-15T00:12:07.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-production","update_count":9,"packages":[{"name":"@stellar/stellar-sdk","old_version":"13.3.0","new_version":"17.2.1","repository_url":"https://github.com/stellar/js-stellar-sdk"},{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"smol-toml","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.6","repository_url":"https://github.com/colinhacks/zod"},{"name":"next","old_version":"14.2.35","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"react","old_version":"18.3.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"18.3.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"lucide-react","old_version":"0.330.0","new_version":"1.55.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"better-sqlite3","old_version":"12.4.1","new_version":"13.0.3","repository_url":"https://github.com/WiseLibs/better-sqlite3"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-production group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `13.3.0` | `17.2.1` |\n| [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.9.0` | `1.9.1` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.6` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `16.4.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.0` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.330.0` | `1.55.0` |\n| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.4.1` | `13.0.3` |\n\n\nUpdates `@stellar/stellar-sdk` from 13.3.0 to 17.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/releases\"\u003e@​stellar/stellar-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/devtechedge\"\u003e\u003ccode\u003e@​devtechedge\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1725\"\u003estellar/js-stellar-sdk#1725\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leocagli\"\u003e\u003ccode\u003e@​leocagli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003estellar/js-stellar-sdk#1679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yigitcangokmen\"\u003e\u003ccode\u003e@​yigitcangokmen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1670\"\u003estellar/js-stellar-sdk#1670\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md\"\u003e@​stellar/stellar-sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.0...v17.0.1\"\u003ev17.0.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEvery v16 XDR-acronym method spelling works again as a deprecated alias of its v17 name, easing migration. \u003ccode\u003etoXDR()\u003c/code\u003e / \u003ccode\u003efromXDR()\u003c/code\u003e come back on \u003ccode\u003exdr.*\u003c/code\u003e values (plus the static \u003ccode\u003evalidateXDR()\u003c/code\u003e) and on \u003ccode\u003eTransaction\u003c/code\u003e / \u003ccode\u003eFeeBumpTransaction\u003c/code\u003e, \u003ccode\u003eTransactionBuilder\u003c/code\u003e, \u003ccode\u003econtract.AssembledTransaction\u003c/code\u003e, \u003ccode\u003eClaimant\u003c/code\u003e, and \u003ccode\u003eSorobanDataBuilder\u003c/code\u003e; \u003ccode\u003etoXDRObject()\u003c/code\u003e / \u003ccode\u003efromXDRObject()\u003c/code\u003e come back on \u003ccode\u003eAsset\u003c/code\u003e (including \u003ccode\u003etoChangeTrustXDRObject()\u003c/code\u003e / \u003ccode\u003etoTrustLineXDRObject()\u003c/code\u003e), \u003ccode\u003eMemo\u003c/code\u003e, \u003ccode\u003eOperation\u003c/code\u003e, \u003ccode\u003eClaimant\u003c/code\u003e, \u003ccode\u003eMuxedAccount\u003c/code\u003e, \u003ccode\u003eLiquidityPoolAsset\u003c/code\u003e, and \u003ccode\u003eLiquidityPoolId\u003c/code\u003e. The aliases delegate to the v17 methods and keep their semantics: on \u003ccode\u003exdr.*\u003c/code\u003e values, \u003ccode\u003etoXDR()\u003c/code\u003e returns a \u003ccode\u003eUint8Array\u003c/code\u003e (not a \u003ccode\u003eBuffer\u003c/code\u003e) and \u003ccode\u003efromXDR()\u003c/code\u003e requires a format for string input; the wrapper-class aliases behave as they did in v16. \u003ccode\u003etoXdrObject()\u003c/code\u003e / \u003ccode\u003efromXdrObject()\u003c/code\u003e on \u003ccode\u003exdr.*\u003c/code\u003e values are net-new methods with no legacy spelling, so they get no alias (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1690\"\u003e#1690\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe type-generic \u003ccode\u003exdr\u003c/code\u003e helpers — \u003ccode\u003eencodeArray\u003c/code\u003e, \u003ccode\u003edecodeArray\u003c/code\u003e, \u003ccode\u003edecodeStream\u003c/code\u003e and the \u003ccode\u003efromXdr\u003c/code\u003e / \u003ccode\u003evalidateXdr\u003c/code\u003e / \u003ccode\u003efromJson\u003c/code\u003e statics — now throw a \u003ccode\u003eTypeError\u003c/code\u003e naming the helper and the argument when it has no static schema, such as an \u003ccode\u003eInt64\u003c/code\u003e/\u003ccode\u003eUint32\u003c/code\u003e shim or an abstract base (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1682\"\u003e#1682\u003c/a\u003e). \u003ccode\u003exdr.encodeArray(xdr.Uint32, [1])\u003c/code\u003e previously threw \u003ccode\u003eTypeError: v.toXdrObject is not a function\u003c/code\u003e, and on an empty list returned a valid-looking 4-byte count. The four decode paths also name a missing \u003ccode\u003estatic fromXdrObject\u003c/code\u003e, which only they need. Valid types are unaffected.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003exdr.Int32\u003c/code\u003e, \u003ccode\u003exdr.Uint32\u003c/code\u003e, \u003ccode\u003exdr.Int64\u003c/code\u003e and \u003ccode\u003exdr.Uint64\u003c/code\u003e report their XDR type name from \u003ccode\u003e.name\u003c/code\u003e, instead of the internal \u003ccode\u003e\u0026quot;Shim\u0026quot;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1682\"\u003e#1682\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eBytesValue#toString()\u003c/code\u003e on the named byte aliases (\u003ccode\u003eHash\u003c/code\u003e, \u003ccode\u003eSignature\u003c/code\u003e, \u003ccode\u003eAssetCode4\u003c/code\u003e, \u003ccode\u003eAssetCode12\u003c/code\u003e, \u003ccode\u003ePoolId\u003c/code\u003e, \u003ccode\u003eContractId\u003c/code\u003e, …) now returns the class's declared encoding instead of base64 for every wrapper: \u003ccode\u003enew xdr.AssetCode4(\u0026quot;KHL1\u0026quot;).toString()\u003c/code\u003e is now \u003ccode\u003e\u0026quot;KHL1\u0026quot;\u003c/code\u003e, was \u003ccode\u003e\u0026quot;S0hMMQ==\u0026quot;\u003c/code\u003e. Use \u003ccode\u003e.toXdr(\u0026quot;base64\u0026quot;)\u003c/code\u003e for the wire form (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1689\"\u003e#1689\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v16.2.0...v17.0.0\"\u003ev17.0.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eengines.node\u003c/code\u003e is now \u003ccode\u003e\u0026gt;=22.12.0\u003c/code\u003e, up from \u003ccode\u003e\u0026gt;=22.0.0\u003c/code\u003e. The CommonJS build \u003ccode\u003erequire()\u003c/code\u003es ESM-only dependencies, and \u003ccode\u003erequire(esm)\u003c/code\u003e is only unflagged from Node 22.12.0, so on Node 22.0–22.11 \u003ccode\u003erequire(\u0026quot;@stellar/stellar-sdk\u0026quot;)\u003c/code\u003e fails with \u003ccode\u003eERR_REQUIRE_ESM\u003c/code\u003e. Installing on one of those versions now produces an \u003ccode\u003eEBADENGINE\u003c/code\u003e warning instead of a package that cannot be required. Nothing changes for ESM consumers, or on Node 22.12 and later (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1667\"\u003e#1667\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/b4893496f69116d9db2a4a90214a7236831b6656\"\u003e\u003ccode\u003eb489349\u003c/code\u003e\u003c/a\u003e chore(release): prepare v17.2.1 (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1767\"\u003e#1767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/c103c9b3e7dc9ea1e47abc01b3a07011ce62af88\"\u003e\u003ccode\u003ec103c9b\u003c/code\u003e\u003c/a\u003e fix: order asset issuers and ScVal map keys the way the network does (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1766\"\u003e#1766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/53435c3ed9979cfee36b31f2fd48676d4fa2ff46\"\u003e\u003ccode\u003e53435c3\u003c/code\u003e\u003c/a\u003e docs: add release/support policy and security policy (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1729\"\u003e#1729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/7cfd51a98bc9f12bd56abee48c13b7b99f8be4fb\"\u003e\u003ccode\u003e7cfd51a\u003c/code\u003e\u003c/a\u003e chore(release): prepare v17.2.0 (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1760\"\u003e#1760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/40a8376444d7032ba843d66cf1a3c9364a677804\"\u003e\u003ccode\u003e40a8376\u003c/code\u003e\u003c/a\u003e fix(contract): walk delegate trees in needsNonInvokerSigningBy (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1747\"\u003e#1747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/284f4d18a8563b737cb3992013446de5c98a10fe\"\u003e\u003ccode\u003e284f4d1\u003c/code\u003e\u003c/a\u003e docs(contract): explain what needsNonInvokerSigningBy can and cannot see (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1745\"\u003e#1745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/791e4cf78541e10e5c3217a631f274adcf712df5\"\u003e\u003ccode\u003e791e4cf\u003c/code\u003e\u003c/a\u003e fix(contract): forward wallet signerAddress to default authorizer (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1744\"\u003e#1744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/a6ba91a61f9b42fe65ff7027a5adc200223e2043\"\u003e\u003ccode\u003ea6ba91a\u003c/code\u003e\u003c/a\u003e fix(contract): report when signAuthEntries signs no auth entry (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1743\"\u003e#1743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/7b6469e65b98f74a00cd653ac2bc0869e8599161\"\u003e\u003ccode\u003e7b6469e\u003c/code\u003e\u003c/a\u003e fix(auth): verify bare signature callbacks against forAddress (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/74ac0c6ad5f7e62df8930eb7504e34edf9ae410b\"\u003e\u003ccode\u003e74ac0c6\u003c/code\u003e\u003c/a\u003e docs: regroup the Migration Guide and fix the guides-local race (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1740\"\u003e#1740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v13.3.0...v17.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​stellar/stellar-sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 12.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `smol-toml` from 1.9.0 to 1.9.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/squirrelchat/smol-toml/releases\"\u003esmol-toml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.9.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: reject invalid extra exponent sign by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/69aa050fef018b71799519bb2cbb54f158a0c5f9\"\u003e\u003ccode\u003e69aa050\u003c/code\u003e\u003c/a\u003e fix: actually properly fix exponent issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/7be7084d24c85909cec84ecaafe39737ef4e4472\"\u003e\u003ccode\u003e7be7084\u003c/code\u003e\u003c/a\u003e chore: version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/be3290da3309502447e020ce106bb8a11d99e580\"\u003e\u003ccode\u003ebe3290d\u003c/code\u003e\u003c/a\u003e chore: upgrade deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/86c76134ad7a50e8e101ef7fd82cb0f155b278d8\"\u003e\u003ccode\u003e86c7613\u003c/code\u003e\u003c/a\u003e fix: reject invalid extra exponent sign\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eSix malicious commits pushed to \u003ccode\u003emain\u003c/code\u003e on September 21 with a compromised git credential were reverted the same day in \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6620\"\u003e#6620\u003c/a\u003e and have since been removed from the history of \u003ccode\u003emain\u003c/code\u003e. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini\u003c/li\u003e\n\u003cli\u003e9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales\u003c/li\u003e\n\u003cli\u003e34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003e74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003ebacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003ec42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6638\"\u003e#6638\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6645\"\u003e#6645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6\u003c/li\u003e\n\u003cli\u003e9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.2\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.1\"\u003e4.6.1\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9446b5cc\"\u003e\u003ccode\u003e9446b5cc\u003c/code\u003e\u003c/a\u003e fix: preserve undefined prefault outputs and object keys (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6587\"\u003e#6587\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0c483c58\"\u003e\u003ccode\u003e0c483c58\u003c/code\u003e\u003c/a\u003e docs: the \u003ca href=\"https://zod.dev/blog/zod-4-6\"\u003eZod 4.6 announcement post\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6546\"\u003e#6546\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1\"\u003e\u003ccode\u003e9c21983\u003c/code\u003e\u003c/a\u003e ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7\"\u003e\u003ccode\u003e529f78d\u003c/code\u003e\u003c/a\u003e 4.6.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd\"\u003e\u003ccode\u003ea0ebf97\u003c/code\u003e\u003c/a\u003e fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67\"\u003e\u003ccode\u003ea2ba4a6\u003c/code\u003e\u003c/a\u003e fix(types): declare record output and input as members, not base type argumen...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10\"\u003e\u003ccode\u003ec42596b\u003c/code\u003e\u003c/a\u003e release: hold the run on the release-approval environment until the staged ve...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290\"\u003e\u003ccode\u003ebacad51\u003c/code\u003e\u003c/a\u003e docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462\"\u003e\u003ccode\u003e8fb2faf\u003c/code\u003e\u003c/a\u003e docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa\"\u003e\u003ccode\u003eb2ef983\u003c/code\u003e\u003c/a\u003e docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df\"\u003e\u003ccode\u003e74304ce\u003c/code\u003e\u003c/a\u003e release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/34a626f307871ecbb0123947559328dc52ed5e3e\"\u003e\u003ccode\u003e34a626f\u003c/code\u003e\u003c/a\u003e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"...\n\n_Description has been truncated_","html_url":"https://github.com/Evergreen-production/evergreen/pull/32","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Evergreen-production%2Fevergreen/issues/32","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/32/packages"},{"uuid":"5841576148","node_id":"PR_kwDOMdwYLM8AAAABIT2qcQ","number":1048,"state":"open","title":"build(deps): bump commander from 11.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T03:47:11.000Z","updated_at":"2026-10-14T03:47:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"11.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 11.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v11.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=11.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/zypher-game/zytron-optimism/pull/1048","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/zypher-game%2Fzytron-optimism/issues/1048","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1048/packages"},{"uuid":"5830743626","node_id":"PR_kwDOHWAAMc8AAAABILNdNQ","number":185,"state":"closed","title":"E: Bump the production group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-16T01:27:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T12:58:49.000Z","updated_at":"2026-10-16T01:27:59.000Z","time_to_close":217748,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"E: Bump","group_name":"production","update_count":6,"packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"comment-json","old_version":"4.2.5","new_version":"5.0.0","repository_url":"https://github.com/kaelzhang/node-comment-json"},{"name":"typescript","old_version":"5.7.3","new_version":"5.9.3","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"cjs-module-lexer","old_version":"2.2.1","new_version":"2.3.0","repository_url":"https://github.com/nodejs/cjs-module-lexer"},{"name":"resolve.exports","old_version":"2.0.2","new_version":"2.0.3","repository_url":"https://github.com/lukeed/resolve.exports"},{"name":"memfs","old_version":"4.17.0","new_version":"4.80.0","repository_url":"https://github.com/streamich/memfs"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [comment-json](https://github.com/kaelzhang/node-comment-json) | `4.2.5` | `5.0.0` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.7.3` | `5.9.3` |\n| [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.1` | `2.3.0` |\n| [resolve.exports](https://github.com/lukeed/resolve.exports) | `2.0.2` | `2.0.3` |\n| [memfs](https://github.com/streamich/memfs) | `4.17.0` | `4.80.0` |\n\n\nUpdates `commander` from 13.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `comment-json` from 4.2.5 to 5.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kaelzhang/node-comment-json/releases\"\u003ecomment-json's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.0.0\u003c/h2\u003e\n\u003cp\u003eMAJOR: blank lines are now modeled explicitly instead of being inferred from \u003ccode\u003eloc\u003c/code\u003e and historical line-break logic.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce explicit \u003ccode\u003eBlankLine\u003c/code\u003e comment tokens and use them during \u003ccode\u003eparse()\u003c/code\u003e / \u003ccode\u003estringify()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eparse(code, reviver, { no_comments, no_blank_lines })\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eremoveBlankLines()\u003c/code\u003e for removing blank lines globally or at a specific comment location.\u003c/li\u003e\n\u003cli\u003eImprove round-trip behavior for JSON files that rely on preserved blank lines, including a Bun-derived regression fixture.\u003c/li\u003e\n\u003cli\u003eUpdate TypeScript definitions and documentation for the new blank-line model.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePotential breaking changes\u003c/h3\u003e\n\u003cp\u003eThis release may introduce breaking changes for consumers who directly inspect or mutate comment tokens:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eCommentToken\u003c/code\u003e is now a union type. A token may be \u003ccode\u003e{ type: 'BlankLine', inline: false }\u003c/code\u003e, so \u003ccode\u003evalue\u003c/code\u003e and \u003ccode\u003eloc\u003c/code\u003e are no longer guaranteed on every token.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estringify()\u003c/code\u003e no longer uses \u003ccode\u003eloc\u003c/code\u003e or the old internal blank-line history to infer empty lines. Blank lines are rendered only from explicit \u003ccode\u003eBlankLine\u003c/code\u003e tokens.\u003c/li\u003e\n\u003cli\u003eCustom logic that manually creates or rewrites comment token arrays may need to be updated to preserve blank lines correctly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBehavior differences\u003c/h3\u003e\n\u003cp\u003eIf your existing usage includes business logic related to blank lines, you may notice behavior differences:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCode that previously relied on \u003ccode\u003eloc\u003c/code\u003e-based blank-line rendering may now produce different output unless it preserves \u003ccode\u003eBlankLine\u003c/code\u003e tokens explicitly.\u003c/li\u003e\n\u003cli\u003eCode that assumed every comment token was a line/block comment may need an extra type check for \u003ccode\u003eBlankLine\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eParsing with \u003ccode\u003e{ no_blank_lines: true }\u003c/code\u003e now provides an explicit way to drop blank lines, while default parsing preserves them as first-class tokens.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAn upgrade review is recommended for dependents that have custom comment-token processing or formatting logic around blank lines.\u003c/p\u003e\n\u003ch2\u003e4.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMINOR\u003c/strong\u003e: the new \u003ca href=\"https://github.com/kaelzhang/node-comment-json?tab=readme-ov-file#movecommentssource-object-target-object-from-object-to-object-override-boolean\"\u003e\u003ccode\u003emoveComments\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/kaelzhang/node-comment-json?tab=readme-ov-file#removecommentstarget-object-location-object\"\u003e\u003ccode\u003eremoveComments\u003c/code\u003e\u003c/a\u003e to help you to manipulate comments\u003c/li\u003e\n\u003cli\u003eImprove typescript definitions\u003c/li\u003e\n\u003cli\u003eFixes README.md\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAn upgrade is recommended for all dependents\u003c/p\u003e\n\u003ch2\u003e4.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMINOR\u003c/strong\u003e: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/39\"\u003e#39\u003c/a\u003e, implemented the tc39 proposal of \u003ca href=\"https://github.com/tc39/proposal-json-parse-with-source\"\u003ehttps://github.com/tc39/proposal-json-parse-with-source\u003c/a\u003e (only the \u003ccode\u003econtext.source\u003c/code\u003e), so that it is possible to handle \u003ccode\u003eBigInt\u003c/code\u003es.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst {parse, stringify} = require('comment-json')\r\n\u003cp\u003econst parsed = parse(\n\u003ccode\u003e{\u0026amp;quot;foo\u0026amp;quot;: 9007199254740993}\u003c/code\u003e,\n// The reviver function now has a 3rd param that contains the string source.\n(key, value, {source}) =\u0026gt;\n/^[0-9]+$/.test(source) ? BigInt(source) : value\n)\u003c/p\u003e\n\u003cp\u003econsole.log(parsed)\n// {\n//   \u0026quot;foo\u0026quot;: 9007199254740993n\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/7032c691b4f94a2107144fc6deee008c819c5c82\"\u003e\u003ccode\u003e7032c69\u003c/code\u003e\u003c/a\u003e bump version 5.0.0: potential breaking changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/f54170f611a646623614ccbfac2ae88ec3820d83\"\u003e\u003ccode\u003ef54170f\u003c/code\u003e\u003c/a\u003e test/docs: add bun-derived regression fixture and docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/2f8b9eb05344eeedec96f13d0f992701cb4a8ab3\"\u003e\u003ccode\u003e2f8b9eb\u003c/code\u003e\u003c/a\u003e api: add parse options overload and removeBlankLines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/2b83d0314a155dc7f1083697ab832ab125bf3b84\"\u003e\u003ccode\u003e2b83d03\u003c/code\u003e\u003c/a\u003e core: introduce explicit BlankLine tokens for parse/stringify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/9bac144e213f75bf600204e3e542b0dc013e2f7e\"\u003e\u003ccode\u003e9bac144\u003c/code\u003e\u003c/a\u003e codestyle: \u0026lt; 80 cols\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/29eba14c195a5d68effdc4871c6c9baba0ee45b7\"\u003e\u003ccode\u003e29eba14\u003c/code\u003e\u003c/a\u003e 4.6.2: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/e8e07c2678b5d0c9c19066804113c6dbc5229fef\"\u003e\u003ccode\u003ee8e07c2\u003c/code\u003e\u003c/a\u003e common: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e, resolve conflicts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/822e18ba64325bce38b21a8c608654733aa95e3f\"\u003e\u003ccode\u003e822e18b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e from nikeee/core-utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/4880e8a2b5417cc5c49bb363f6c06fddbfb68a47\"\u003e\u003ccode\u003e4880e8a\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into core-utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/fe34aedca8079b8e4b5dad6d1b8b0ea951bf8942\"\u003e\u003ccode\u003efe34aed\u003c/code\u003e\u003c/a\u003e test: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/29\"\u003e#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kaelzhang/node-comment-json/compare/4.2.5...5.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `typescript` from 5.7.3 to 5.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/TypeScript/releases\"\u003etypescript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTypeScript 5.9.3\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eNo specific changes for TypeScript 5.9.2 (Stable)\u003c/em\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.3%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.3 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eNo specific changes for TypeScript 5.9.2 (Stable)\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9 RC\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9-rc/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9 Beta\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9-beta/\"\u003erelease announcement\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.8.3\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/c63de15a992d37f0d6cec03ac7631872838602cb\"\u003e\u003ccode\u003ec63de15\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.3 and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/8428ca4cc8a7ecc9ac18dd0258016228814f5eaf\"\u003e\u003ccode\u003e8428ca4\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62438\"\u003e#62438\u003c/a\u003e (Fix incorrectly ignored dts file fr...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/a131cac6831aa6532ea963d0cb3131b957cad980\"\u003e\u003ccode\u003ea131cac\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62351\"\u003e#62351\u003c/a\u003e (Add missing Float16Array constructo...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/04243333584a5bfaeb3434c0982c6280fe87b8d5\"\u003e\u003ccode\u003e0424333\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62423\"\u003e#62423\u003c/a\u003e (Revert PR 61928) into release-5.9 (\u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62425\"\u003e#62425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/bdb641a4347af822916fb8cdb9894c9c2d2421dd\"\u003e\u003ccode\u003ebdb641a\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62311\"\u003e#62311\u003c/a\u003e (Fix parenthesizer rules for manuall...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/0d9b9b92e2aca2f75c979a801abbc21bff473748\"\u003e\u003ccode\u003e0d9b9b9\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/61978\"\u003e#61978\u003c/a\u003e (Restructure CI to prepare for requi...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/2dce0c58af51cf9a9068365dc2f756c61b82b597\"\u003e\u003ccode\u003e2dce0c5\u003c/code\u003e\u003c/a\u003e Intentionally regress one buggy declaration output to an older version (\u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62163\"\u003e#62163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/5be33469d551655d878876faa9e30aa3b49f8ee9\"\u003e\u003ccode\u003e5be3346\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.2 and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ad825f2bee3362886d642c48cb97c82df82b3ddb\"\u003e\u003ccode\u003ead825f2\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.1-rc and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/463a5bf92c3597dc14f252517c10a1bef7ac2f4c\"\u003e\u003ccode\u003e463a5bf\u003c/code\u003e\u003c/a\u003e Update LKG\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cjs-module-lexer` from 2.2.1 to 2.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/releases\"\u003ecjs-module-lexer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: initialize Wasm automatically before parsing by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/120\"\u003enodejs/cjs-module-lexer#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: speed up UTF-16 source copies by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/122\"\u003enodejs/cjs-module-lexer#122\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip identifier and number runs by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/124\"\u003enodejs/cjs-module-lexer#124\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip class checks for unrelated identifiers by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/123\"\u003enodejs/cjs-module-lexer#123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: guard parser stack bounds by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/125\"\u003enodejs/cjs-module-lexer#125\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/120\"\u003enodejs/cjs-module-lexer#120\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\"\u003ehttps://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/70d33c7a332a31fa1542de9b8737f2d23acfc184\"\u003e\u003ccode\u003e70d33c7\u003c/code\u003e\u003c/a\u003e 2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/9b39cd24261b567f4d65aecc06af3c2b29abb416\"\u003e\u003ccode\u003e9b39cd2\u003c/code\u003e\u003c/a\u003e fix: guard parser stack bounds (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/125\"\u003e#125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/20f83436af4068554595af5e46ae4b55ed750e5c\"\u003e\u003ccode\u003e20f8343\u003c/code\u003e\u003c/a\u003e perf: skip class checks for unrelated identifiers (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/123\"\u003e#123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/8c63bbc00e7ad6a5c532fd7633a74d88677712cb\"\u003e\u003ccode\u003e8c63bbc\u003c/code\u003e\u003c/a\u003e perf: skip identifier and number runs (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/124\"\u003e#124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/66e5b9af640a23ca351bd77296b41245592f4b32\"\u003e\u003ccode\u003e66e5b9a\u003c/code\u003e\u003c/a\u003e perf: speed up UTF-16 source copies (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/0bd046155301545cdd3799e235e42d5b0d838d1b\"\u003e\u003ccode\u003e0bd0461\u003c/code\u003e\u003c/a\u003e fix: initialize Wasm automatically before parsing (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `resolve.exports` from 2.0.2 to 2.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lukeed/resolve.exports/releases\"\u003eresolve.exports's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.0.3\u003c/h2\u003e\n\u003ch2\u003ePatches\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMatch full subpath pattern (\u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/34\"\u003e#34\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/37\"\u003e#37\u003c/a\u003e): c9b413e\n\u003cem\u003eThank you \u003ca href=\"https://github.com/sosoba\"\u003e\u003ccode\u003e@​sosoba\u003c/code\u003e\u003c/a\u003e\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e(ci): skip nyc for Node \u0026lt; 18: cb577d9\u003c/li\u003e\n\u003cli\u003eAdd \u003ca href=\"https://licenses.dev\"\u003elicenses.dev\u003c/a\u003e badge\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\"\u003ehttps://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/6613167c0b4fc1511fc52171f4f52cb030c928c3\"\u003e\u003ccode\u003e6613167\u003c/code\u003e\u003c/a\u003e 2.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/c9b413ef7ce32bdb435f0cc285df3023a9c9ba71\"\u003e\u003ccode\u003ec9b413e\u003c/code\u003e\u003c/a\u003e fix: avoid lazy regexp matching (\u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/cb577d9f3a6edd8ee480e52c0296a8041bcb1cf4\"\u003e\u003ccode\u003ecb577d9\u003c/code\u003e\u003c/a\u003e chore(ci): skip nyc for Node \u0026lt; 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/294192309b7276bc0913f65a7ee73721611ae383\"\u003e\u003ccode\u003e2941923\u003c/code\u003e\u003c/a\u003e chore: add licenses badge\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `memfs` from 4.17.0 to 4.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/streamich/memfs/releases\"\u003ememfs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v4.80.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow configuring the synchronous FSA worker timeout by \u003ca href=\"https://github.com/Firatakti\"\u003e\u003ccode\u003e@​Firatakti\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1298\"\u003estreamich/memfs#1298\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Firatakti\"\u003e\u003ccode\u003e@​Firatakti\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1298\"\u003estreamich/memfs#1298\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.79.0...v4.80.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.79.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 improve FS(A) error handling by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1297\"\u003estreamich/memfs#1297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.78.1...v4.79.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.78.1...v4.79.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.78.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: 🐛 return correct shape from \u003ccode\u003e.queryPermission()\u003c/code\u003e by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1295\"\u003estreamich/memfs#1295\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.78.0...v4.78.1\"\u003ehttps://github.com/streamich/memfs/compare/v4.78.0...v4.78.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.78.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 implement Node-compatible \u003ccode\u003ecp\u003c/code\u003e module by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1294\"\u003estreamich/memfs#1294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.77.0...v4.78.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.77.0...v4.78.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.77.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGlob by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1293\"\u003estreamich/memfs#1293\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.76.0...v4.77.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.76.0...v4.77.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.76.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e.opendir()\u003c/code\u003e and \u003ccode\u003eDir\u003c/code\u003e improvements by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1292\"\u003estreamich/memfs#1292\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.75.0...v4.76.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.75.0...v4.76.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.75.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 improve error formatting and normalization, dedupe validators by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1291\"\u003estreamich/memfs#1291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.74.0...v4.75.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.74.0...v4.75.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/streamich/memfs/blob/master/CHANGELOG.md\"\u003ememfs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.53.0...v4.54.0\"\u003e4.54.0\u003c/a\u003e (2026-01-18)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 add locking for FSA writable handles (\u003ca href=\"https://github.com/streamich/memfs/commit/35d3519d90f018905df61396af9325d992a65768\"\u003e35d3519\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.52.0...v4.53.0\"\u003e4.53.0\u003c/a\u003e (2026-01-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimplement Result type and improve error handling for exists methods (\u003ca href=\"https://github.com/streamich/memfs/commit/f95531fb3382d5aa23e8dc9c233d7b47dd7fbbc1\"\u003ef95531f\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1218\"\u003e#1218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.51.1...v4.52.0\"\u003e4.52.0\u003c/a\u003e (2026-01-15)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 add deprecated \u003ccode\u003eDirent.path\u003c/code\u003e with deprecation notice (\u003ca href=\"https://github.com/streamich/memfs/commit/ebf8ea917e8248ff29ad5f975137f89004404d6b\"\u003eebf8ea9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 add \u003cem\u003edisposable\u003c/em\u003e methods to \u003ccode\u003eDir\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/d237aa9db26b027887963a935098f17466109669\"\u003ed237aa9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e🎸 add \u003ccode\u003eDirent.parentPath\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/f72f9fe00bf11b622894335e1e0a0a981636cad4\"\u003ef72f9fe\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.51.0...v4.51.1\"\u003e4.51.1\u003c/a\u003e (2025-11-30)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd glob functions to API lists (\u003ca href=\"https://github.com/streamich/memfs/commit/445f33729e6123b52268e92a9d2785d47f7ab2aa\"\u003e445f337\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.50.0...v4.51.0\"\u003e4.51.0\u003c/a\u003e (2025-11-12)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esort files and folder when using \u003ccode\u003etoTreeSync()\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/673cb7a98b2ae7b97a57a0693d8d2dbfc745338c\"\u003e673cb7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1214\"\u003e#1214\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.49.0...v4.50.0\"\u003e4.50.0\u003c/a\u003e (2025-10-28)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 improve Node buffer allocation strategy (\u003ca href=\"https://github.com/streamich/memfs/commit/d1edb3fa70f119642fb7fdd603e7e89f752afa11\"\u003ed1edb3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eoptimize Node buffer management to prevent O(n^2) overhead (\u003ca href=\"https://github.com/streamich/memfs/commit/95d6f091fef065abb60b5515754b2c8081117e4f\"\u003e95d6f09\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.48.1...v4.49.0\"\u003e4.49.0\u003c/a\u003e (2025-10-06)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/adae41a54ff34c89db4e0d0708ec7c166e8998c6\"\u003e\u003ccode\u003eadae41a\u003c/code\u003e\u003c/a\u003e chore: release v4.80.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/d9cfa1874f8189140b9d99908026031b2fe21f29\"\u003e\u003ccode\u003ed9cfa18\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1298\"\u003e#1298\u003c/a\u003e from Firatakti/codex/fsa-sync-timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/fe75fbc40e0d344b33d813b2dd8f449269307ba2\"\u003e\u003ccode\u003efe75fbc\u003c/code\u003e\u003c/a\u003e feat: allow configuring the synchronous FSA worker timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/02dc8141395201d3ba4d7ddada3538403e59ce5c\"\u003e\u003ccode\u003e02dc814\u003c/code\u003e\u003c/a\u003e chore: release v4.79.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/bfebfdd2f35a2e2dd2c9ffef1d1ea9b684baedcc\"\u003e\u003ccode\u003ebfebfdd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1297\"\u003e#1297\u003c/a\u003e from streamich/fix-improve-fsa-error-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/55bc7901dccea50a43a95cc51962c173f7bebe23\"\u003e\u003ccode\u003e55bc790\u003c/code\u003e\u003c/a\u003e fix: 🐛 harden stream close behavior\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/b82f6b36c1cfb6926c76449bc2138197a425ad5b\"\u003e\u003ccode\u003eb82f6b3\u003c/code\u003e\u003c/a\u003e feat: 🎸 improve FS(A) error handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/bbcea1835921cadc7edeeccbfa922cce5688ac0c\"\u003e\u003ccode\u003ebbcea18\u003c/code\u003e\u003c/a\u003e chore: release v4.78.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/8eb78226b4cf072a5f4150ed612ff20aaf7ef358\"\u003e\u003ccode\u003e8eb7822\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1295\"\u003e#1295\u003c/a\u003e from streamich/fix-fsa-permission-return\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/0f9bbaed4ec998a5554a696430325781aaf3afec\"\u003e\u003ccode\u003e0f9bbae\u003c/code\u003e\u003c/a\u003e fix: 🐛 return correct shape from \u003ccode\u003e.queryPermission()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/streamich/memfs/compare/v4.17.0...v4.80.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for memfs since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/quatico-solutions/websmith/pull/185","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/quatico-solutions%2Fwebsmith/issues/185","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/185/packages"},{"uuid":"5808679079","node_id":"PR_kwDOQlpgks8AAAABH5pboQ","number":326,"state":"open","title":"deps: bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":9,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T05:08:46.000Z","updated_at":"2026-10-18T17:04:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"## Release readiness review — 2026-10-18\n\nHold: existing CI fails CLI declaration builds with TS1479 because Commander 15 is ESM-only while @kortyx/cli currently builds CommonJS. It also raises the Node minimum to 22.12.0 and changes paired positive/negative option defaults. Preserve Commander 14 for this release; migrate module/runtime contracts and test CLI options and clean consumers before upgrading.\n\nThis PR remains open and is excluded from the upcoming release. It has not been rebased or revalidated during this review; no CI gates or audit exclusions were changed.\n\n---\n\n\n\nBumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/kortyx-io/kortyx/pull/326","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kortyx-io%2Fkortyx/issues/326","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/326/packages"},{"uuid":"5799803438","node_id":"PR_kwDOP-rhr88AAAABHy2gwQ","number":1090,"state":"closed","title":"chore(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-12T06:00:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T09:27:15.000Z","updated_at":"2026-10-12T06:00:18.000Z","time_to_close":73970,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/Zahara-Nour/ubumaths/pull/1090","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zahara-Nour%2Fubumaths/issues/1090","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1090/packages"},{"uuid":"5798738071","node_id":"PR_kwDOVEgIRc8AAAABHyB-WA","number":36,"state":"open","title":"Bump commander from 12.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T06:49:41.000Z","updated_at":"2026-10-11T06:49:44.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aether-bench/keycloak__keycloak__aether-v19__PR32918__20261010/pull/36","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aether-bench%2Fkeycloak__keycloak__aether-v19__PR32918__20261010/issues/36","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/36/packages"},{"uuid":"5797985235","node_id":"PR_kwDOVEaWUc8AAAABHxdT-g","number":5,"state":"closed","title":"build(deps): bump commander from 12.1.0 to 15.0.0 in /cli","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-15T05:26:23.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T04:33:09.000Z","updated_at":"2026-10-15T05:26:32.000Z","time_to_close":348794,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/cli","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mohamedzajith/anti-kit/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mohamedzajith%2Fanti-kit/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"5796882617","node_id":"PR_kwDOQ9ECn88AAAABHwnqBA","number":1145,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 16 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T01:15:53.000Z","updated_at":"2026-10-11T01:15:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":16,"packages":[{"name":"@aws-sdk/client-secrets-manager","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@aws-sdk/client-sns","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@aws-sdk/credential-providers","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@opentelemetry/exporter-trace-otlp-proto","old_version":"0.221.0","new_version":"0.223.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.11.0","new_version":"2.12.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.11.0","new_version":"2.12.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@stellar/stellar-sdk","old_version":"16.3.0","new_version":"17.2.1","repository_url":"https://github.com/stellar/js-stellar-sdk"},{"name":"better-sqlite3","old_version":"12.11.1","new_version":"13.0.3","repository_url":"https://github.com/WiseLibs/better-sqlite3"},{"name":"chalk","old_version":"5.6.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"},{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"hono","old_version":"4.13.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"nodemailer","old_version":"10.0.12","new_version":"10.0.16","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"yaml","old_version":"2.9.0","new_version":"2.9.1","repository_url":"https://github.com/eemeli/yaml"},{"name":"zod","old_version":"4.5.4","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1127.0` | `3.1147.0` |\n| [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1127.0` | `3.1147.0` |\n| [@aws-sdk/credential-providers](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-providers) | `3.1127.0` | `3.1147.0` |\n| [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.223.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |\n| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `16.3.0` | `17.2.1` |\n| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.11.1` | `13.0.3` |\n| [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.1` |\n| [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.13` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.12` | `10.0.16` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |\n| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |\n\n\nUpdates `@aws-sdk/client-secrets-manager` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-secrets-manager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md\"\u003e@​aws-sdk/client-secrets-manager's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-secrets-manager\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@aws-sdk/client-sns` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-sns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md\"\u003e@​aws-sdk/client-sns's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-sns\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@aws-sdk/credential-providers` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/credential-providers's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-providers/CHANGELOG.md\"\u003e@​aws-sdk/credential-providers's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/packages/credential-providers\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/exporter-trace-otlp-proto` from 0.221.0 to 0.223.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/exporter-trace-otlp-proto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eexperimental/v0.223.0\u003c/h2\u003e\n\u003ch2\u003e0.223.0\u003c/h2\u003e\n\u003ch3\u003e:boom: Breaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(web-common)!: clean up and deprecate network span utils \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7114\"\u003e#7114\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThese utilities were long planned for removal. They were moved from the \u003ccode\u003esdk-trace-web\u003c/code\u003e package and are currently only used by the (deprecated) \u003ccode\u003einstrumentation-fetch\u003c/code\u003e and \u003ccode\u003einstrumentation-xml-http-request\u003c/code\u003e packages.\u003c/li\u003e\n\u003cli\u003eDrop the \u003ccode\u003eskipOldSemconvContentLengthAttrs\u003c/code\u003e vestigial option from \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from \u003ccode\u003e@opentelemetry/sdk-trace-web\u003c/code\u003e\ninto \u003ccode\u003e@opentelemetry/web-common\u003c/code\u003e and use them in \u003ccode\u003e@opentelemetry/instrumentation-fetch\u003c/code\u003e and \u003ccode\u003e@opentelemetry/instrumentation-xml-http-request\u003c/code\u003e.\nWith this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eexperimental/v0.222.0\u003c/h2\u003e\n\u003ch2\u003e0.222.0\u003c/h2\u003e\n\u003ch3\u003e:boom: Breaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on Propagator creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6930\"\u003e#6930\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on MeterProvider creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6954\"\u003e#6954\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on TracerProvider creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6962\"\u003e#6962\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on Resource creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6989\"\u003e#6989\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eThis also breaks some usage of \u003ccode\u003estartNodeSDK()\u003c/code\u003e for \u003cem\u003eenvironment-based\u003c/em\u003e config, i.e. when \u003cem\u003enot\u003c/em\u003e using a config file. For example with \u003ccode\u003eOTEL_NODE_RESOURCE_DETECTORS=all\u003c/code\u003e, it results in an error message and a no-op SDK.\n(This does not impact users of \u003ccode\u003enew NodeSDK()\u003c/code\u003e -- the currently recommended mechanism to start an SDK using this package.)\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003eCould not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: \u0026quot;container\u0026quot;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): deprecate \u003ccode\u003eSdkLogRecord\u003c/code\u003e in favor of \u003ccode\u003eReadWriteLogRecord\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6939\"\u003e#6939\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add \u003ccode\u003eredactedQueryParamsServer\u003c/code\u003e config option \u003ca href=\"https://github.com/dyladan\"\u003e\u003ccode\u003e@​dyladan\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node): support \u003ccode\u003eheaders_list\u003c/code\u003e when creating OTLP exporters from declarative configuration \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6953\"\u003e#6953\u003c/a\u003e \u003ca href=\"https://github.com/JacksonWeber\"\u003e\u003ccode\u003e@​JacksonWeber\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:books: Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs(sdk-logs): mark logger configuration as experimental \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6996\"\u003e#6996\u003c/a\u003e \u003ca href=\"https://github.com/LarryHu0217\"\u003e\u003ccode\u003e@​LarryHu0217\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(configuration): document the \u003ccode\u003eConfigModel\u003c/code\u003e suffix naming convention for exported types \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6612\"\u003e#6612\u003c/a\u003e \u003ca href=\"https://github.com/vedantchalke36\"\u003e\u003ccode\u003e@​vedantchalke36\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(sampler-jaeger-remote): remove \u003ccode\u003eaxios\u003c/code\u003e dependency and use \u003ccode\u003efetch\u003c/code\u003e to get the sampler configuration from Jaeger API \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6963\"\u003e#6963\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/0b72a81636fa476e8f1f1afd2ae0c90a1362194c\"\u003e\u003ccode\u003e0b72a81\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7044\"\u003e#7044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a9c5338a9f485f1433df9308f24bd7397a4a0321\"\u003e\u003ccode\u003ea9c5338\u003c/code\u003e\u003c/a\u003e ci: roll prerelease changelog into one final release changelog (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7045\"\u003e#7045\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/f41805e769ba10fb6dae72a4b7a5a3dc67cca82e\"\u003e\u003ccode\u003ef41805e\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7042\"\u003e#7042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/experimental/v0.221.0...experimental/v0.223.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/resources` from 2.11.0 to 2.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/resources's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md\"\u003e@​opentelemetry/resources's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.11.0...v2.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/sdk-trace-base` from 2.11.0 to 2.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/sdk-trace-base's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md\"\u003e@​opentelemetry/sdk-trace-base's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.11.0...v2.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stellar/stellar-sdk` from 16.3.0 to 17.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/releases\"\u003e@​stellar/stellar-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/devtechedge\"\u003e\u003ccode\u003e@​devtechedge\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1725\"\u003estellar/js-stellar-sdk#1725\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leocagli\"\u003e\u003ccode\u003e@​leocagli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003estellar/js-stellar-sdk#1679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yigitcangokmen\"\u003e\u003ccode\u003e@​yigitcangokmen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1670\"\u003estellar/js-stellar-sdk#1670\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md\"\u003e@​stellar/stellar-sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-characte...\n\n_Description has been truncated_","html_url":"https://github.com/TegoLabs/sorokeep/pull/1145","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TegoLabs%2Fsorokeep/issues/1145","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1145/packages"},{"uuid":"5741642563","node_id":"PR_kwDOU_Mbes8AAAABHE3LaQ","number":29,"state":"closed","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-07T16:13:38.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-07T08:10:21.000Z","updated_at":"2026-10-07T16:13:49.000Z","time_to_close":28997,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aether-bench/keycloak__keycloak__aether-r1__PR36880__20261007/pull/29","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aether-bench%2Fkeycloak__keycloak__aether-r1__PR36880__20261007/issues/29","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/29/packages"},{"uuid":"5715946605","node_id":"PR_kwDOTxMs-s8AAAABGwTRZg","number":68,"state":"open","title":"chore(deps): bump the dependencies group with 6 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-05T16:57:36.000Z","updated_at":"2026-10-05T16:57:58.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"dependencies","update_count":6,"packages":[{"name":"@nestjs/common","old_version":"10.4.22","new_version":"12.1.2","repository_url":"https://github.com/nestjs/nest"},{"name":"bullmq","old_version":"5.81.5","new_version":"6.3.11","repository_url":"https://github.com/taskforcesh/bullmq"},{"name":"ioredis","old_version":"5.11.1","new_version":"6.0.0","repository_url":"https://github.com/redis/ioredis"},{"name":"next","old_version":"15.5.25","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.22` | `12.1.2` |\n| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.5` | `6.3.11` |\n| [ioredis](https://github.com/redis/ioredis) | `5.11.1` | `6.0.0` |\n| [next](https://github.com/vercel/next.js) | `15.5.25` | `16.3.8` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.5` |\n| [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` |\n\nUpdates `@nestjs/common` from 10.4.22 to 12.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nestjs/nest/releases\"\u003e@​nestjs/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.1.1 (2026-09-28)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e, \u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003emicroservices\u003c/code\u003e, \u003ccode\u003etesting\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17893\"\u003e#17893\u003c/a\u003e fix(common): logger bugs in json output, level changes, fatal and buffered logs (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17891\"\u003e#17891\u003c/a\u003e fix(microservices): let the mqtt client retry after a failed connect (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17888\"\u003e#17888\u003c/a\u003e fix(microservices): keep tcp event listeners across reconnects (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17887\"\u003e#17887\u003c/a\u003e fix(microservices): ignore events from a replaced tcp client socket (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17878\"\u003e#17878\u003c/a\u003e fix(microservices): keep a newer nats connection when a stale one fails (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17869\"\u003e#17869\u003c/a\u003e fix(microservices): keep a newer kafka connection when a stale one fails (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17865\"\u003e#17865\u003c/a\u003e fix(microservices): let the rmq client retry after a failed connect (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17866\"\u003e#17866\u003c/a\u003e fix(microservices): reply on the request channel when redis wildcards are enabled (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17861\"\u003e#17861\u003c/a\u003e fix(microservices): recover the nats client after it gives up reconnecting (\u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17884\"\u003e#17884\u003c/a\u003e fix(common): preserve string enum values matching numeric member names (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17871\"\u003e#17871\u003c/a\u003e fix(core): detect circular dependencies across more than two providers (\u003ca href=\"https://github.com/erezcor\"\u003e\u003ccode\u003e@​erezcor\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform-fastify\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17867\"\u003e#17867\u003c/a\u003e fix(fastify): treat a JSON content type with parameters as JSON in reply() (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003etesting\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17860\"\u003e#17860\u003c/a\u003e fix(core): honor class and factory overrides of value providers (\u003ca href=\"https://github.com/lehafari\"\u003e\u003ccode\u003e@​lehafari\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eEnhancements\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17876\"\u003e#17876\u003c/a\u003e fix(common): reject non-numeric items in ParseArrayPipe with items Number (\u003ca href=\"https://github.com/SulimanAbdulrazzaq\"\u003e\u003ccode\u003e@​SulimanAbdulrazzaq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17863\"\u003e#17863\u003c/a\u003e feat(microservices): export deserializers from the package root (\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 13\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAbdellatif Anaflous (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlejandro (\u003ca href=\"https://github.com/lehafari\"\u003e\u003ccode\u003e@​lehafari\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDaniel Pinto (\u003ca href=\"https://github.com/Cayan\"\u003e\u003ccode\u003e@​Cayan\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDharmik Sondagar (\u003ca href=\"https://github.com/DharmikSondagar\"\u003e\u003ccode\u003e@​DharmikSondagar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKamil Mysliwiec (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLazizbek Ergashev (\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLuke Son (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMicael Levi L. Cavalcante (\u003ca href=\"https://github.com/micalevisk\"\u003e\u003ccode\u003e@​micalevisk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRoman Khegay (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSuliman Abdulrazzaq (\u003ca href=\"https://github.com/SulimanAbdulrazzaq\"\u003e\u003ccode\u003e@​SulimanAbdulrazzaq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXia Chao (\u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/erezcor\"\u003e\u003ccode\u003e@​erezcor\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efadi romdhan (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.1.0 (2026-09-23)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17838\"\u003e#17838\u003c/a\u003e fix(core): inherit optional ctor params when the ctor is not redeclared (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17819\"\u003e#17819\u003c/a\u003e fix(core): name the module when metadata entries are invalid (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/8ab60aa1b2927fbe0e23135ffc65d610c623236a\"\u003e\u003ccode\u003e8ab60aa\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/ab3fb3d5ca7d51d078835e44a8db1b354f8b651b\"\u003e\u003ccode\u003eab3fb3d\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/50fb72246d0de71afff4a0add2dc292daf9f1618\"\u003e\u003ccode\u003e50fb722\u003c/code\u003e\u003c/a\u003e docs(core): fix resolve() \u003ca href=\"https://github.com/returns\"\u003e\u003ccode\u003e@​returns\u003c/code\u003e\u003c/a\u003e tags to match their Promise signatures (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/4ea29ccfd446ea898d00a344029433316e16e446\"\u003e\u003ccode\u003e4ea29cc\u003c/code\u003e\u003c/a\u003e feat(common): export UUIDVersion and support 'all' and numeric versions in Pa...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/a054312a51ba7182f0d1cf9e5a57a2dfd1739c75\"\u003e\u003ccode\u003ea054312\u003c/code\u003e\u003c/a\u003e fix(common): keep \u003ccode\u003eStreamableFile\u003c/code\u003e from mutating the caller options (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17925\"\u003e#17925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/41a3a547af8eec68b8fc2754eb81c05decb44fb3\"\u003e\u003ccode\u003e41a3a54\u003c/code\u003e\u003c/a\u003e feat(common): support uuid v1, v2, v6 and v8 in \u003ccode\u003eParseUUIDPipe\u003c/code\u003e (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17904\"\u003e#17904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/9feedffde8ef8c86f0cd521153740575dc579d88\"\u003e\u003ccode\u003e9feedff\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/daf68839d2cdc71cda92fbb8e21afa7cec13fdeb\"\u003e\u003ccode\u003edaf6883\u003c/code\u003e\u003c/a\u003e fix(common): logger bugs in json output, level changes, fatal and buffered lo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/34c996588fd009ae6da49b4a615a64cfc540c7b2\"\u003e\u003ccode\u003e34c9965\u003c/code\u003e\u003c/a\u003e fix(common): preserve string enum values matching numeric member names (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17884\"\u003e#17884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/1fbe1c53323cd2edbcba2883b2ad51ba41ebe7a8\"\u003e\u003ccode\u003e1fbe1c5\u003c/code\u003e\u003c/a\u003e fix(common): reject non-numeric items in ParseArrayPipe with items Number (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nestjs/nest/commits/v12.1.2/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bullmq` from 5.81.5 to 6.3.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/taskforcesh/bullmq/releases\"\u003ebullmq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.3.11\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.10...v6.3.11\"\u003e6.3.11\u003c/a\u003e (2026-10-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eworker:\u003c/strong\u003e detach stalled checker from telemetry context to prevent trace leak (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4812\"\u003e#4812\u003c/a\u003e) fixes \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4731\"\u003e#4731\u003c/a\u003e (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/01b8b14a973984845dc0bbcefccf35b3ed30782d\"\u003e01b8b14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.10\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.9...v6.3.10\"\u003e6.3.10\u003c/a\u003e (2026-09-29)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eworker:\u003c/strong\u003e stop infinite connection-error retries during shutdown (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4833\"\u003e#4833\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/96e0a96b9f0be7d16eba9c2b6823ba9488101121\"\u003e96e0a96\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.8...v6.3.9\"\u003e6.3.9\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003econnection:\u003c/strong\u003e infer backend-specific connection options instead of hiding mismatches with casts (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4796\"\u003e#4796\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/10dc93c59790cfffb117624311ca3983172955a8\"\u003e10dc93c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.7...v6.3.8\"\u003e6.3.8\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e retry the LISTEN connection after a failed connect (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4781\"\u003e#4781\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/48a550b39ce29f69e398dde6e3ce3c62c873b723\"\u003e48a550b\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4729\"\u003e#4729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.6...v6.3.7\"\u003e6.3.7\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ededuplication:\u003c/strong\u003e remove deduplication key if job key does not longer exist (python) (elixir) (php) (rust) (dotnet) (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4768\"\u003e#4768\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/75bb3a059ff214b419553822d41d3e8eaff7e888\"\u003e75bb3a0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.5...v6.3.6\"\u003e6.3.6\u003c/a\u003e (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebun:\u003c/strong\u003e allow nested duplicate() on lazy Bun adapter (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4723\"\u003e#4723\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/438a1d83ef3b6c2c28d1901c038223f1ab7a0a27\"\u003e438a1d8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.4...v6.3.5\"\u003e6.3.5\u003c/a\u003e (2026-09-14)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/01b8b14a973984845dc0bbcefccf35b3ed30782d\"\u003e\u003ccode\u003e01b8b14\u003c/code\u003e\u003c/a\u003e fix(worker): detach stalled checker from telemetry context to prevent trace l...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/80c8ff6073876766aa38447b74f3d72613a875a6\"\u003e\u003ccode\u003e80c8ff6\u003c/code\u003e\u003c/a\u003e chore(deps): lock file maintenance (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4837\"\u003e#4837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/69512795c9f52563a96092e537137b3691abe02d\"\u003e\u003ccode\u003e6951279\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency eslint-plugin-tsdoc to v0.5.4 [security] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/98c5ad8e20214dc71ceceeb2f5b117fe9c7d3eaf\"\u003e\u003ccode\u003e98c5ad8\u003c/code\u003e\u003c/a\u003e chore(release): vpy3.3.0 (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4849\"\u003e#4849\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/38c5bd7892e0d112b6d8c38218d6cd27f831f016\"\u003e\u003ccode\u003e38c5bd7\u003c/code\u003e\u003c/a\u003e feat(queue): support getJob method [python] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4848\"\u003e#4848\u003c/a\u003e) ref \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4840\"\u003e#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/abf9e15a9e2ea317ef3b004431158c6714e3ed43\"\u003e\u003ccode\u003eabf9e15\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency virtualenv to v21.14.1 [python] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4847\"\u003e#4847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/b2f26ba844d6d6995143c7173c069ba31a800d79\"\u003e\u003ccode\u003eb2f26ba\u003c/code\u003e\u003c/a\u003e chore(release): 6.3.10 (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4845\"\u003e#4845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/96e0a96b9f0be7d16eba9c2b6823ba9488101121\"\u003e\u003ccode\u003e96e0a96\u003c/code\u003e\u003c/a\u003e fix(worker): stop infinite connection-error retries during shutdown (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4833\"\u003e#4833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/4409c02ddd05115da43d5db29b1f26a6ee4d71c1\"\u003e\u003ccode\u003e4409c02\u003c/code\u003e\u003c/a\u003e chore(deps): update security dev patches to v8.71.0 [security] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4841\"\u003e#4841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/14b7d90f9105a9bccdecefe510b5b1b62bbf7041\"\u003e\u003ccode\u003e14b7d90\u003c/code\u003e\u003c/a\u003e chore(deps): lock file maintenance [rust] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4844\"\u003e#4844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v5.81.5...v6.3.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ioredis` from 5.11.1 to 6.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/ioredis/releases\"\u003eioredis's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003e6.0.0\u003c/a\u003e (2026-07-31)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003ecf3bf71\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd LMOVEM and BLMOVEM command support (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2144\"\u003e#2144\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97\"\u003ec26af46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Redis 8.10 set cardinality commands (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2143\"\u003e#2143\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84\"\u003e301099b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehimport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e729f174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimprove default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e6d0716e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MAXCOUNT and MAXSIZE for stream reads (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2142\"\u003e#2142\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec\"\u003eae5e41b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eioredis now requires Node.js 20 or newer and uses RESP3 by default. Set \u003ccode\u003eprotocol: 2\u003c/code\u003e to retain the v5 wire protocol.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.0-beta.1\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0-beta.1\"\u003e6.0.0-beta.1\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/ioredis/blob/main/CHANGELOG.md\"\u003eioredis's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003e6.0.0\u003c/a\u003e (2026-07-31)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003ecf3bf71\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd LMOVEM and BLMOVEM command support (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2144\"\u003e#2144\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97\"\u003ec26af46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Redis 8.10 set cardinality commands (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2143\"\u003e#2143\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84\"\u003e301099b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehimport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e729f174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimprove default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e6d0716e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MAXCOUNT and MAXSIZE for stream reads (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2142\"\u003e#2142\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec\"\u003eae5e41b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eioredis now requires Node.js 20 or newer and uses RESP3 by default. Set \u003ccode\u003eprotocol: 2\u003c/code\u003e to retain the v5 wire protocol.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/8ed2946504a36ae9b1e186b9dccc56afcd046d78\"\u003e\u003ccode\u003e8ed2946\u003c/code\u003e\u003c/a\u003e chore(release): 6.0.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/3b410f80681d006ebef160493b85ce575aea0d8c\"\u003e\u003ccode\u003e3b410f8\u003c/code\u003e\u003c/a\u003e docs: clarify managed HIMPORT fieldset behavior (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2161\"\u003e#2161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e\u003ccode\u003e729f174\u003c/code\u003e\u003c/a\u003e feat: himport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e\u003ccode\u003e6d0716e\u003c/code\u003e\u003c/a\u003e feat: improve default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003e\u003ccode\u003ecf3bf71\u003c/code\u003e\u003c/a\u003e fix(types): export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/aac171b02ee0fd0b959087e379eda97024b41ac6\"\u003e\u003ccode\u003eaac171b\u003c/code\u003e\u003c/a\u003e ci: update Redis test image (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2156\"\u003e#2156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/807bb1c8660fd47d27a2f19a9a5c08aabec1ca43\"\u003e\u003ccode\u003e807bb1c\u003c/code\u003e\u003c/a\u003e chore(release): update repository URL (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2154\"\u003e#2154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6c889e75df8488246dcc234ff8b0e83dc9f78f75\"\u003e\u003ccode\u003e6c889e7\u003c/code\u003e\u003c/a\u003e docs: add security policy (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2153\"\u003e#2153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e\u003ccode\u003e6455dbe\u003c/code\u003e\u003c/a\u003e fix: clear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e\u003ccode\u003e9618206\u003c/code\u003e\u003c/a\u003e fix(cluster): validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 15.5.25 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v15.5.25...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.2\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.1\"\u003e4.6.1\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9446b5cc\"\u003e\u003ccode\u003e9446b5cc\u003c/code\u003e\u003c/a\u003e fix: preserve undefined prefault outputs and object keys (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6587\"\u003e#6587\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0c483c58\"\u003e\u003ccode\u003e0c483c58\u003c/code\u003e\u003c/a\u003e docs: the \u003ca href=\"https://zod.dev/blog/zod-4-6\"\u003eZod 4.6 announcement post\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6546\"\u003e#6546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a00c3f34\"\u003e\u003ccode\u003ea00c3f34\u003c/code\u003e\u003c/a\u003e docs: use Trigger.dev's brand-kit lockups for the platinum card\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.1\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.0\"\u003e4.6.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b12aa523\"\u003e\u003ccode\u003eb12aa523\u003c/code\u003e\u003c/a\u003e fix: preserve unique tags with defaulted discriminators (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6582\"\u003e#6582\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6577\"\u003e#6577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/dd9c36fa\"\u003e\u003ccode\u003edd9c36fa\u003c/code\u003e\u003c/a\u003e fix(v4): defer recursive object index inference (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6580\"\u003e#6580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/3b154992\"\u003e\u003ccode\u003e3b154992\u003c/code\u003e\u003c/a\u003e feat(lang): add Tajik (\u003ccode\u003etg\u003c/code\u003e) locale (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6581\"\u003e#6581\u003c/a\u003e) by \u003ca href=\"https://github.com/ismoil77\"\u003e\u003ccode\u003e@​ismoil77\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2efa8b80\"\u003e\u003ccode\u003e2efa8b80\u003c/code\u003e\u003c/a\u003e ci: give the npm wait a real budget and drop the back-publish path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6583\"\u003e#6583\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.0\u003c/h2\u003e\n\u003cp\u003eZod 4.6 is now available.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install zod@latest\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eAt a glance:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/59bbc03e10c636b9eb3c393dfeb552819774ec21\"\u003e\u003ccode\u003e59bbc03\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee\"\u003e\u003ccode\u003e0f3f5ee\u003c/code\u003e\u003c/a\u003e 4.6.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9\"\u003e\u003ccode\u003ecc4cd4e\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, ref...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ca0229a404818290e6cdcfefcd7eb2d04bcbb543\"\u003e\u003ccode\u003eca0229a\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/56222cd1532c07bcb91b67df529cab4c0a215330\"\u003e\u003ccode\u003e56222cd\u003c/code\u003e\u003c/a\u003e feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/de65a5cb39ed22a507fac935788f718fa88d104f\"\u003e\u003ccode\u003ede65a5c\u003c/code\u003e\u003c/a\u003e docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1\"\u003e\u003ccode\u003ef1448f7\u003c/code\u003e\u003c/a\u003e docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d2b135cfb7a3582b9eb515756b9166bcb9521f4a\"\u003e\u003ccode\u003ed2b135c\u003c/code\u003e\u003c/a\u003e docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb087170f22114b060f1e283bab09fd07963076\"\u003e\u003ccode\u003e2bb0871\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/743aedbba79e98ab8e32f2ce8a9f27b0910f0054\"\u003e\u003ccode\u003e743aedb\u003c/code\u003e\u003c/a\u003e 4.6.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 12.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/sjsreehari/zerra/pull/68","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sjsreehari%2Fzerra/issues/68","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/68/packages"},{"uuid":"5705948146","node_id":"PR_kwDOU7-Bcs8AAAABGoM0mA","number":3,"state":"closed","title":"build(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-24T10:10:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-05T03:22:50.000Z","updated_at":"2026-10-24T10:10:28.000Z","time_to_close":1666049,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=14.0.3\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aniruddhaadak80/loadcurve-analyze/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aniruddhaadak80%2Floadcurve-analyze/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5705575941","node_id":"PR_kwDOPz0YV88AAAABGn6QUQ","number":652,"state":"open","title":"chore(deps): bump the major group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-05T02:30:33.000Z","updated_at":"2026-10-05T02:31:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"major","update_count":6,"packages":[{"name":"chalk","old_version":"4.1.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"},{"name":"commander","old_version":"11.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"inquirer","old_version":"8.2.7","new_version":"14.2.2","repository_url":"https://github.com/SBoudrias/Inquirer.js"},{"name":"ora","old_version":"5.4.1","new_version":"9.4.1","repository_url":"https://github.com/sindresorhus/ora"},{"name":"vitest","old_version":"4.1.11","new_version":"5.0.3","repository_url":"https://github.com/vitest-dev/vitest"}],"path":null,"ecosystem":"npm"},"body":"Updates the requirements on [chalk](https://github.com/chalk/chalk), [commander](https://github.com/tj/commander.js), [inquirer](https://github.com/SBoudrias/Inquirer.js), [ora](https://github.com/sindresorhus/ora), [@types/inquirer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/inquirer) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) to permit the latest version.\nUpdates `chalk` from 4.1.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/chalk/chalk/releases\"\u003echalk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix inconsistent coercion of two arguments  9c93a04\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v6.0.0...v6.0.1\"\u003ehttps://github.com/chalk/chalk/compare/v6.0.0...v6.0.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 22  8a94e0e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd underline styles and underline colors (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/689\"\u003e#689\u003c/a\u003e)  4c304dd\u003c/li\u003e\n\u003cli\u003eImprove performance  5729845 fa5cff2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat a numeric \u003ccode\u003eFORCE_COLOR\u003c/code\u003e as an exact level (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/688\"\u003e#688\u003c/a\u003e)  e912931\u003c/li\u003e\n\u003cli\u003eDownsample \u003ccode\u003eansi256()\u003c/code\u003e and \u003ccode\u003ebgAnsi256()\u003c/code\u003e to 16 colors at level 1 (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/687\"\u003e#687\u003c/a\u003e)  ff549c5\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.6.2...v6.0.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.6.2...v6.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix vulnerability in 5.6.1, see: \u003ca href=\"https://redirect.github.com/chalk/chalk/issues/656\"\u003echalk/chalk#656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake WezTerm terminal use true color  a8f5bf7\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.5.0...v5.6.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.5.0...v5.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake Ghostty terminal use true color (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/653\"\u003e#653\u003c/a\u003e)  79ee2d3\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.4.1...v5.5.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.4.1...v5.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003enavigator\u003c/code\u003e not defined \u003ccode\u003eReferenceError\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/642\"\u003e#642\u003c/a\u003e)  4ebb62d\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.4.0...v5.4.1\"\u003ehttps://github.com/chalk/chalk/compare/v5.4.0...v5.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eCIRCLECI\u003c/code\u003e environments to return level 3 color support  f838120\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/47fc05abd46171b235e24174cd2dba83d25bf037\"\u003e\u003ccode\u003e47fc05a\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/9c93a04eae27fb1801764fbd60eb0811e2068b83\"\u003e\u003ccode\u003e9c93a04\u003c/code\u003e\u003c/a\u003e Fix inconsistent coercion of two arguments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/8960ada92ca0f9220c8863495bae78dcc0c323ee\"\u003e\u003ccode\u003e8960ada\u003c/code\u003e\u003c/a\u003e Meta tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/661317e6f91fe7c90306c2c48ea9354562ee9146\"\u003e\u003ccode\u003e661317e\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/5729845f33d357e0c21b29b2b16849b72fb8cec4\"\u003e\u003ccode\u003e5729845\u003c/code\u003e\u003c/a\u003e Improve performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/4c304dd72cce5a036c02e5dd8af52996ae98501f\"\u003e\u003ccode\u003e4c304dd\u003c/code\u003e\u003c/a\u003e Add extended underline styles and underline colors (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/e91293130c7d642c7b91152c3c942743a3b910a7\"\u003e\u003ccode\u003ee912931\u003c/code\u003e\u003c/a\u003e Fix: Treat a numeric \u003ccode\u003eFORCE_COLOR\u003c/code\u003e as an exact level (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/8a94e0ebfc495dda27f7090fb1a012790b15a76d\"\u003e\u003ccode\u003e8a94e0e\u003c/code\u003e\u003c/a\u003e Require Node.js 22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/fa5cff280e821c928dab716a03beff06529ffaf3\"\u003e\u003ccode\u003efa5cff2\u003c/code\u003e\u003c/a\u003e Optimize 2-argument calls (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/ff549c534c413a9225322c1ff4e5fc0d97ae5610\"\u003e\u003ccode\u003eff549c5\u003c/code\u003e\u003c/a\u003e Fix: Downsample \u003ccode\u003eansi256()\u003c/code\u003e and \u003ccode\u003ebgAnsi256()\u003c/code\u003e to 16 colors at level 1 (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/chalk/chalk/compare/v4.1.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 11.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v11.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `inquirer` from 8.2.7 to 14.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/SBoudrias/Inquirer.js/releases\"\u003einquirer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003einquirer@14.2.2\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (\u003ccode\u003e@inquirer/core\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2255\"\u003e#2255\u003c/a\u003e, closes \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/1816\"\u003e#1816\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003econfirm()\u003c/code\u003e now trims surrounding whitespace from answers before matching yes/no keywords (\u003ccode\u003e@inquirer/confirm\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2254\"\u003e#2254\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.3\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.2\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.2.1\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePublished manifests now pin \u003ccode\u003e@inquirer/type\u003c/code\u003e to an exact version. Since these type definitions leak into consumers' \u003ccode\u003etsc\u003c/code\u003e runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2247\"\u003e#2247\u003c/a\u003e, fixes \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2244\"\u003e#2244\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/type@4.1.1\u003c/code\u003e (pinned exactly)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/ansi@^2.0.8\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.2.0\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated to \u003ccode\u003e@inquirer/prompts@^8.7.0\u003c/code\u003e and \u003ccode\u003e@inquirer/core@^12.0.1\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eIncludes the new \u003ccode\u003etoggleMask\u003c/code\u003e option for \u003ccode\u003epassword\u003c/code\u003e (ctrl+t to reveal), localized yes/no parsing for \u003ccode\u003econfirm\u003c/code\u003e, and prettified prompt/theme types for better IDE display.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/type@^4.1.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/ansi@^2.0.7\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.1.0\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/cbdb34bfc6c245941d80ef88493c50b3d6dbfce6\"\u003e\u003ccode\u003ecbdb34b\u003c/code\u003e\u003c/a\u003e chore: Publish new release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/8340d2dd764d4b11d4e200412b614f9964ae0691\"\u003e\u003ccode\u003e8340d2d\u003c/code\u003e\u003c/a\u003e fix(\u003ccode\u003e@​inquirer/core\u003c/code\u003e): clear hook effects before settling prompts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/2475e07186d824d52504095c71c2272d9e7338fe\"\u003e\u003ccode\u003e2475e07\u003c/code\u003e\u003c/a\u003e test(\u003ccode\u003e@​inquirer/core\u003c/code\u003e): cover hook cleanup error semantics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/15cd8d3b53bfc270633072073c24d6be6ce3d83b\"\u003e\u003ccode\u003e15cd8d3\u003c/code\u003e\u003c/a\u003e fix(confirm): ignore surrounding whitespace in answers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/9cb0da6c187346c955ab0b788fa1a88c897f16da\"\u003e\u003ccode\u003e9cb0da6\u003c/code\u003e\u003c/a\u003e chore(deps): Bump github/codeql-action/analyze from 4.37.7 to 4.37.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/1c750bc55ab4fac310d70db84a7a6ada76c0e854\"\u003e\u003ccode\u003e1c750bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump the build group with 3 updates (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2251\"\u003e#2251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/81f1525110990603e9796d48eecde0f8c2d2fc98\"\u003e\u003ccode\u003e81f1525\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump \u003ccode\u003e@​types/node\u003c/code\u003e in the types group (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2252\"\u003e#2252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/7c27f26606a16b6e8f55b51e4431c72658c674c5\"\u003e\u003ccode\u003e7c27f26\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump oxfmt in the formatting group (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2249\"\u003e#2249\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/6119088a4e07ec59460c3cd44d06817de97bfdac\"\u003e\u003ccode\u003e6119088\u003c/code\u003e\u003c/a\u003e chore(deps): Bump github/codeql-action/init from 4.37.7 to 4.37.9 (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/0d167c0aface3f5cf95132ada9bfec7946dd5b74\"\u003e\u003ccode\u003e0d167c0\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump the linting group with 4 updates (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2248\"\u003e#2248\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.7...inquirer@14.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for inquirer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ora` from 5.4.1 to 9.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/ora/releases\"\u003eora's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix type definitions (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/257\"\u003e#257\u003c/a\u003e)  431ebc4\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003efailText\u003c/code\u003e type to accept \u003ccode\u003eunknown\u003c/code\u003e instead of \u003ccode\u003eError\u003c/code\u003e, matching the actual promise rejection value  bc3a283\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.4.0...v9.4.1\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.4.0...v9.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003esuccessSymbol\u003c/code\u003e and \u003ccode\u003efailSymbol\u003c/code\u003e options to \u003ccode\u003eoraPromise\u003c/code\u003e  3d2e0a9\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.3.0...v9.4.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.3.0...v9.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduce flicker in rendering  2ab4f76\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.2.0...v9.3.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.2.0...v9.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003estdin-discarder\u003c/code\u003e dependency (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/251\"\u003e#251\u003c/a\u003e)  020eaba\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.1.0...v9.2.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.1.0...v9.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport external writes to stream (\u003ccode\u003econsole.log\u003c/code\u003e) while spinning  d2b543a\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003estrip-ansi\u003c/code\u003e dependency with native \u003ccode\u003estripVTControlCharacters\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/249\"\u003e#249\u003c/a\u003e)  68d50e5\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.0.0...v9.1.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.0.0...v9.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 20  7aca06d\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix clearing in some cases  aa51538\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eframe()\u003c/code\u003e not displaying dynamic \u003ccode\u003eprefixText\u003c/code\u003e/\u003ccode\u003esuffixText\u003c/code\u003e from functions  0f19f57\u003c/li\u003e\n\u003cli\u003eFix multiline text exceeding console height leaving garbage when scrolling  45d30ad\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/79cd8c15ac34572cffb3ab53e3d4b6bab6d59ea8\"\u003e\u003ccode\u003e79cd8c1\u003c/code\u003e\u003c/a\u003e 9.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/bc3a28363a9873304ffb56420cb55fe83a7f41e8\"\u003e\u003ccode\u003ebc3a283\u003c/code\u003e\u003c/a\u003e Minor tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/431ebc40dceb1f700f3b60821f139541dbd7c93d\"\u003e\u003ccode\u003e431ebc4\u003c/code\u003e\u003c/a\u003e Fix type definitions (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/46a670390249718af7c66452afdc5d78ceb579e9\"\u003e\u003ccode\u003e46a6703\u003c/code\u003e\u003c/a\u003e 9.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/3d2e0a907e1141a121e5ed3348d9ea0981ca8a9c\"\u003e\u003ccode\u003e3d2e0a9\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003esuccessSymbol\u003c/code\u003e and \u003ccode\u003efailSymbol\u003c/code\u003e options to \u003ccode\u003eoraPromise\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/f70f613d72f0afb0f4cb0a7fe56268f8abd1a170\"\u003e\u003ccode\u003ef70f613\u003c/code\u003e\u003c/a\u003e Test tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/7cf29a75e64409205a6606dada9780ccf5acf6a8\"\u003e\u003ccode\u003e7cf29a7\u003c/code\u003e\u003c/a\u003e Validate some options better\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/4496362714e1edd414e5347e8d4b337f103f0e15\"\u003e\u003ccode\u003e4496362\u003c/code\u003e\u003c/a\u003e 9.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/2ab4f7613879515e29039888115831422f49e1af\"\u003e\u003ccode\u003e2ab4f76\u003c/code\u003e\u003c/a\u003e Reduce flicker in rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/8d17b13a8b3330af16cfa24c6e3b8a99f678c5c4\"\u003e\u003ccode\u003e8d17b13\u003c/code\u003e\u003c/a\u003e Add FAQ item\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sindresorhus/ora/compare/v5.4.1...v9.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/inquirer` to 9.0.10\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/inquirer\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 4.1.11 to 5.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIsolate \u003ccode\u003eresult.status\u003c/code\u003e between \u003ccode\u003erepeats\u003c/code\u003e runs  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11218\"\u003evitest-dev/vitest#11218\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5dbebe9e3\"\u003e\u003c!-- raw HTML omitted --\u003e(5dbeb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't print an interceptor warning in browser mode  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11377\"\u003evitest-dev/vitest#11377\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa\"\u003e\u003c!-- raw HTML omitted --\u003e(15cc0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't retry when \u003ccode\u003etest.fails\u003c/code\u003e expectedly failed  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11219\"\u003evitest-dev/vitest#11219\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b24585f08\"\u003e\u003c!-- raw HTML omitted --\u003e(b2458)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eScope cache key generators to projects  -  by \u003ca href=\"https://github.com/ecoyoung\"\u003e\u003ccode\u003e@​ecoyoung\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11281\"\u003evitest-dev/vitest#11281\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11301\"\u003evitest-dev/vitest#11301\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/92ba7fc1d\"\u003e\u003c!-- raw HTML omitted --\u003e(92ba7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDelay server \u003ccode\u003elisten\u003c/code\u003e until tests start running  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11366\"\u003evitest-dev/vitest#11366\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7d8ed3e9b\"\u003e\u003c!-- raw HTML omitted --\u003e(7d8ed)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCheck mock path boundaries  -  by \u003ca href=\"https://github.com/saryn17\"\u003e\u003ccode\u003e@​saryn17\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eRyosei Sato\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11361\"\u003evitest-dev/vitest#11361\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11362\"\u003evitest-dev/vitest#11362\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1c3888bce\"\u003e\u003c!-- raw HTML omitted --\u003e(1c388)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep config of browser-consumed environments  -  by \u003ca href=\"https://github.com/kasperpeulen\"\u003e\u003ccode\u003e@​kasperpeulen\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11378\"\u003evitest-dev/vitest#11378\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/aafc0996f\"\u003e\u003c!-- raw HTML omitted --\u003e(aafc0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIgnore page crash while cancelling  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11386\"\u003evitest-dev/vitest#11386\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c36748fa\"\u003e\u003c!-- raw HTML omitted --\u003e(7c367)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etoMatchScreenshot\u003c/code\u003e uses wrong reference on retried tests  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11393\"\u003evitest-dev/vitest#11393\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c22aba992\"\u003e\u003c!-- raw HTML omitted --\u003e(c22ab)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecache\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eRevalidate imports of cached modules  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11381\"\u003evitest-dev/vitest#11381\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/38f98855f\"\u003e\u003c!-- raw HTML omitted --\u003e(38f98)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePin \u003ccode\u003ewhy-is-node-running\u003c/code\u003e to \u003ccode\u003e3.2.1\u003c/code\u003e to avoid users running into \u003ccode\u003eERR_PNPM_TRUST_DOWNGRADE\u003c/code\u003e  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11403\"\u003evitest-dev/vitest#11403\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f6c9a4977\"\u003e\u003c!-- raw HTML omitted --\u003e(f6c9a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpect\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePass current equality testers to \u003ccode\u003eexpect.extend\u003c/code\u003e asymmetric matchers  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11401\"\u003evitest-dev/vitest#11401\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3e794a96b\"\u003e\u003c!-- raw HTML omitted --\u003e(3e794)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejsdom\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport Blob on jsdom 30.1  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11379\"\u003evitest-dev/vitest#11379\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c49b7197\"\u003e\u003c!-- raw HTML omitted --\u003e(6c49b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePreserve unique pool ids when \u003ccode\u003egroupOrder\u003c/code\u003e is set  -  by \u003ca href=\"https://github.com/mtorp\"\u003e\u003ccode\u003e@​mtorp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11392\"\u003evitest-dev/vitest#11392\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/50312ebb4\"\u003e\u003c!-- raw HTML omitted --\u003e(50312)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSplit-pane handle overlapping iframe  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11221\"\u003evitest-dev/vitest#11221\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f91db0dfd\"\u003e\u003c!-- raw HTML omitted --\u003e(f91db)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evitest\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eRemove root temp dir on close  -  by \u003ca href=\"https://github.com/abhinav-phi\"\u003e\u003ccode\u003e@​abhinav-phi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11248\"\u003evitest-dev/vitest#11248\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c7119cf7\"\u003e\u003c!-- raw HTML omitted --\u003e(7c711)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evm\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDo not optimize deps from index.html  -  by \u003ca href=\"https://github.com/ezefernandezyf\"\u003e\u003ccode\u003e@​ezefernandezyf\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11329\"\u003evitest-dev/vitest#11329\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11360\"\u003evitest-dev/vitest#11360\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caf2887de\"\u003e\u003c!-- raw HTML omitted --\u003e(caf28)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't reuse scripts across vite environments  -  by \u003ca href=\"https://github.com/MO2k4\"\u003e\u003ccode\u003e@​MO2k4\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eMartin Oehlert\u003c/strong\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11395\"\u003evitest-dev/vitest#11395\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/346d3896b\"\u003e\u003c!-- raw HTML omitted --\u003e(346d3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBind \u003ccode\u003eprocess\u003c/code\u003e in case global is overwritten  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11343\"\u003evitest-dev/vitest#11343\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0b79231ad\"\u003e\u003c!-- raw HTML omitted --\u003e(0b792)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edetect-async-leaks\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore \u003ccode\u003eprocess.stdio\u003c/code\u003e handles  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11333\"\u003evitest-dev/vitest#11333\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0fd6b9790\"\u003e\u003c!-- raw HTML omitted --\u003e(0fd6b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpect\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003etoMatchObject\u003c/code\u003e with asymmetric matchers  -  by \u003ca href=\"https://github.com/ShreeBohara\"\u003e\u003ccode\u003e@​ShreeBohara\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eClaude Opus 5\u003c/strong\u003e, \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-5)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11100\"\u003evitest-dev/vitest#11100\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/42523289e\"\u003e\u003c!-- raw HTML omitted --\u003e(42523)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejsdom\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eRequest\u003c/code\u003e with \u003ccode\u003eBlob\u003c/code\u003e body on jsdom 28+  -  by \u003ca href=\"https://github.com/harshit-d3v\"\u003e\u003ccode\u003e@​harshit-d3v\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11295\"\u003evitest-dev/vitest#11295\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d1c3ecc93\"\u003e\u003c!-- raw HTML omitted --\u003e(d1c3e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eagent\u003c/code\u003e to respect \u003ccode\u003e--silent\u003c/code\u003e  -  by \u003ca href=\"https://github.com/Raj4478\"\u003e\u003ccode\u003e@​Raj4478\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11271\"\u003evitest-dev/vitest#11271\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5b95efb6d\"\u003e\u003c!-- raw HTML omitted --\u003e(5b95e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporters\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHandle concurrent \u003ccode\u003ecreateReport\u003c/code\u003e calls  -  by \u003ca href=\"https://github.com/7rulnik\"\u003e\u003ccode\u003e@​7rulnik\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11278\"\u003evitest-dev/vitest#11278\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e8e556ff7\"\u003e\u003c!-- raw HTML omitted --\u003e(e8e55)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehanging-process\u003c/code\u003e to use ESM entrypoint  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11316\"\u003evitest-dev/vitest#11316\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4e91e5668\"\u003e\u003c!-- raw HTML omitted --\u003e(4e91e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003espy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix stack overflow when spying \u003ccode\u003eSet.prototype.add\u003c/code\u003e  -  by \u003ca href=\"https://github.com/fengmk2\"\u003e\u003ccode\u003e@​fengmk2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11299\"\u003evitest-dev/vitest#11299\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a0a939653\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/346d3896b65c3c907174447a035807342799f346\"\u003e\u003ccode\u003e346d389\u003c/code\u003e\u003c/a\u003e fix(vm): don't reuse scripts across vite environments (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11395\"\u003e#11395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/f6c9a4977ad3363f796a737834572e54c6ad5c18\"\u003e\u003ccode\u003ef6c9a49\u003c/code\u003e\u003c/a\u003e fix(deps): pin \u003ccode\u003ewhy-is-node-running\u003c/code\u003e to \u003ccode\u003e3.2.1\u003c/code\u003e to avoid users running into `...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/062c75d8b63519211d951d8293ea81b5a9e3c124\"\u003e\u003ccode\u003e062c75d\u003c/code\u003e\u003c/a\u003e chore: fix standalone docs build, update exports maps (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11394\"\u003e#11394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/caf2887dee8987a60118d53933f6e9cabd6b3e2a\"\u003e\u003ccode\u003ecaf2887\u003c/code\u003e\u003c/a\u003e fix(vm): do not optimize deps from index.html (fix \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11329\"\u003e#11329\u003c/a\u003e) (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11360\"\u003e#11360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/50312ebb4eca6a98f6d0b2b61d5d9d38cbbabcef\"\u003e\u003ccode\u003e50312eb\u003c/code\u003e\u003c/a\u003e fix(pool): preserve unique pool ids when \u003ccode\u003egroupOrder\u003c/code\u003e is set (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11392\"\u003e#11392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c36748fad1eae9687312f2f7ceadce6ec88b5df\"\u003e\u003ccode\u003e7c36748\u003c/code\u003e\u003c/a\u003e fix(browser): ignore page crash while cancelling (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11386\"\u003e#11386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/92ba7fc1df16a4fa5bbee3f198c582fbd56689d8\"\u003e\u003ccode\u003e92ba7fc\u003c/code\u003e\u003c/a\u003e fix: scope cache key generators to projects (fix \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11281\"\u003e#11281\u003c/a\u003e) (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11301\"\u003e#11301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/38f98855fa9cd7fd376afb84094eba0fda256a74\"\u003e\u003ccode\u003e38f9885\u003c/code\u003e\u003c/a\u003e fix(cache): revalidate imports of cached modules (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11381\"\u003e#11381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b24585f08f2ea267746a2d6ca0e43edcbb29726f\"\u003e\u003ccode\u003eb24585f\u003c/code\u003e\u003c/a\u003e fix: don't retry when \u003ccode\u003etest.fails\u003c/code\u003e expectedly failed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11219\"\u003e#11219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/slimatic/zakapp/pull/652","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/slimatic%2Fzakapp/issues/652","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/652/packages"},{"uuid":"5675365635","node_id":"PR_kwDOTLn0ac8AAAABGQUcpw","number":513,"state":"open","title":"chore(deps): bump the npm-dependencies group across 1 directory with 55 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-02T09:13:47.000Z","updated_at":"2026-10-02T09:14:04.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-dependencies","update_count":55,"packages":[{"name":"@prisma/client","old_version":"6.19.3","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma"},{"name":"eslint","old_version":"9.39.5","new_version":"10.11.0","repository_url":"https://github.com/eslint/eslint"},{"name":"lint-staged","old_version":"17.4.1","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"tsx","old_version":"4.23.1","new_version":"4.23.15","repository_url":"https://github.com/privatenumber/tsx"},{"name":"turbo","old_version":"2.10.11","new_version":"2.11.5","repository_url":"https://github.com/vercel/turborepo"},{"name":"typescript","old_version":"5.9.3","new_version":"7.0.2","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"@apollo/server","old_version":"4.13.0","new_version":"5.5.1","repository_url":"https://github.com/apollographql/apollo-server"},{"name":"@fastify/swagger","old_version":"9.8.1","new_version":"9.9.0","repository_url":"https://github.com/fastify/fastify-swagger"},{"name":"@grpc/grpc-js","old_version":"1.14.4","new_version":"1.14.5","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@grpc/proto-loader","old_version":"0.7.15","new_version":"0.8.1","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@opentelemetry/exporter-trace-otlp-http","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"1.30.1","new_version":"2.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-node","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@prisma/adapter-pg","old_version":"7.9.0","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma"},{"name":"bullmq","old_version":"5.81.3","new_version":"6.3.9","repository_url":"https://github.com/taskforcesh/bullmq"},{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"dotenv","old_version":"17.4.2","new_version":"18.0.4","repository_url":"https://github.com/motdotla/dotenv"},{"name":"fastify","old_version":"5.10.0","new_version":"5.12.5","repository_url":"https://github.com/fastify/fastify"},{"name":"graphql","old_version":"16.14.2","new_version":"17.0.2","repository_url":"https://github.com/graphql/graphql-js"},{"name":"graphql-subscriptions","old_version":"2.0.0","new_version":"3.0.0","repository_url":"https://github.com/apollographql/graphql-subscriptions"},{"name":"ink","old_version":"5.2.1","new_version":"7.1.1","repository_url":"https://github.com/vadimdemedes/ink"},{"name":"otplib","old_version":"12.0.1","new_version":"13.5.0","repository_url":"https://github.com/yeojz/otplib"},{"name":"pdfkit","old_version":"0.20.1","new_version":"0.20.2","repository_url":"https://github.com/foliojs/pdfkit"},{"name":"pg","old_version":"8.22.0","new_version":"8.23.0","repository_url":"https://github.com/brianc/node-postgres"},{"name":"@types/pg","old_version":"8.20.0","new_version":"8.23.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"react","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react","old_version":"19.2.17","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"resend","old_version":"3.5.0","new_version":"6.30.0","repository_url":"https://github.com/resend/resend-node"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"@types/node","old_version":"20.19.43","new_version":"26.6.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/pg","old_version":"8.20.0","new_version":"8.23.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react","old_version":"19.2.17","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/ws","old_version":"8.18.1","new_version":"8.18.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"fast-check","old_version":"3.23.2","new_version":"4.10.2","repository_url":"https://github.com/dubzzz/fast-check"},{"name":"pkg-types","old_version":"2.3.1","new_version":"2.3.3","repository_url":"https://github.com/unjs/pkg-types"},{"name":"prisma","old_version":"7.9.0","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma-cli"},{"name":"@react-three/fiber","old_version":"9.7.0","new_version":"9.8.1","repository_url":"https://github.com/pmndrs/react-three-fiber"},{"name":"next","old_version":"16.2.10","new_version":"16.3.7","repository_url":"https://github.com/vercel/next.js"},{"name":"next-auth","old_version":"4.24.14","new_version":"4.24.15","repository_url":"https://github.com/nextauthjs/next-auth"},{"name":"react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react-dom","old_version":"19.2.3","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"three","old_version":"0.171.0","new_version":"0.186.1","repository_url":"https://github.com/mrdoob/three.js"},{"name":"y-websocket","old_version":"2.1.0","new_version":"3.1.0","repository_url":"https://github.com/yjs/y-websocket"},{"name":"yjs","old_version":"13.6.32","new_version":"13.6.33","repository_url":"https://github.com/yjs/yjs"},{"name":"@tailwindcss/postcss","old_version":"4.3.2","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"@testing-library/dom","old_version":"10.4.1","new_version":"10.4.2","repository_url":"https://github.com/testing-library/dom-testing-library"},{"name":"@testing-library/jest-dom","old_version":"6.9.1","new_version":"7.0.1","repository_url":"https://github.com/testing-library/jest-dom"},{"name":"@testing-library/react","old_version":"16.3.2","new_version":"16.3.3","repository_url":"https://github.com/testing-library/react-testing-library"},{"name":"@testing-library/user-event","old_version":"14.6.6","new_version":"14.6.7","repository_url":"https://github.com/testing-library/user-event"},{"name":"@types/react-dom","old_version":"19.2.3","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/three","old_version":"0.171.0","new_version":"0.186.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitejs/plugin-react","old_version":"4.7.0","new_version":"6.1.1","repository_url":"https://github.com/vitejs/vite-plugin-react"},{"name":"eslint-config-next","old_version":"16.2.10","new_version":"16.3.7","repository_url":"https://github.com/vercel/next.js"},{"name":"jsdom","old_version":"25.0.1","new_version":"30.1.1","repository_url":"https://github.com/jsdom/jsdom"},{"name":"tailwindcss","old_version":"4.3.2","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"chalk","old_version":"5.6.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 55 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `6.19.3` | `7.10.0` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.11.0` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |\n| [turbo](https://github.com/vercel/turborepo) | `2.10.11` | `2.11.5` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |\n| [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `4.13.0` | `5.5.1` |\n| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.8.1` | `9.9.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.4` | `1.14.5` |\n| [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.7.15` | `0.8.1` |\n| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.11.0` |\n| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.0` | `7.10.0` |\n| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.3` | `6.3.9` |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.4` |\n| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.5` |\n| [graphql](https://github.com/graphql/graphql-js) | `16.14.2` | `17.0.2` |\n| [graphql-subscriptions](https://github.com/apollographql/graphql-subscriptions) | `2.0.0` | `3.0.0` |\n| [ink](https://github.com/vadimdemedes/ink) | `5.2.1` | `7.1.1` |\n| [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib) | `12.0.1` | `13.5.0` |\n| [pdfkit](https://github.com/foliojs/pdfkit) | `0.20.1` | `0.20.2` |\n| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |\n| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |\n| [resend](https://github.com/resend/resend-node) | `3.5.0` | `6.30.0` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.5` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.43` | `26.6.3` |\n| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |\n| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `3.23.2` | `4.10.2` |\n| [pkg-types](https://github.com/unjs/pkg-types) | `2.3.1` | `2.3.3` |\n| [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.0` | `7.10.0` |\n| [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.7.0` | `9.8.1` |\n| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.3.7` |\n| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.14` | `4.24.15` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |\n| [three](https://github.com/mrdoob/three.js) | `0.171.0` | `0.186.1` |\n| [y-websocket](https://github.com/yjs/y-websocket) | `2.1.0` | `3.1.0` |\n| [yjs](https://github.com/yjs/yjs) | `13.6.32` | `13.6.33` |\n| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` |\n| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |\n| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.1` |\n| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |\n| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.6` | `14.6.7` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |\n| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.171.0` | `0.186.0` |\n| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.1.1` |\n| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.10` | `16.3.7` |\n| [jsdom](https://github.com/jsdom/jsdom) | `25.0.1` | `30.1.1` |\n| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |\n| [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.1` |\n\n\nUpdates `@prisma/client` from 6.19.3 to 7.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prisma/prisma/releases\"\u003e@​prisma/client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.10.0\u003c/h2\u003e\n\u003ch1\u003ePrisma ORM 7.10.0\u003c/h1\u003e\n\u003cp\u003ePrisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.\u003c/p\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003eRun Prisma 7 alongside Prisma 8\u003c/h3\u003e\n\u003cp\u003eThis release introduces \u003ccode\u003e@prisma/prisma7\u003c/code\u003e, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.\u003c/p\u003e\n\u003cp\u003eOnce 7.10.0 is released, a side-by-side installation can use:\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install --save-dev prisma@8 @prisma/prisma7@7.10.0\r\nnpm install @prisma/client@7.10.0\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eUse \u003ccode\u003eprisma\u003c/code\u003e for the directly installed Prisma 8 CLI and \u003ccode\u003eprisma7\u003c/code\u003e for Prisma 7:\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpx prisma --version\r\nnpx prisma7 --version\r\n\u003cp\u003enpx prisma7 generate\u003cbr /\u003e\nnpx prisma7 migrate dev\u003cbr /\u003e\nnpx prisma7 db push\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003ePrisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's \u003ccode\u003eprisma.config.*\u003c/code\u003e files:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// prisma7.config.ts\r\nimport { defineConfig } from '@prisma/prisma7/config'\r\n\u003cp\u003eexport default defineConfig({\u003cbr /\u003e\nschema: 'prisma/schema.prisma',\u003cbr /\u003e\nmigrations: {\u003cbr /\u003e\npath: 'prisma/migrations',\u003cbr /\u003e\n},\u003cbr /\u003e\n})\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eWithout an explicit \u003ccode\u003e--config\u003c/code\u003e option, Prisma 7 searches for:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eRoot-level \u003ccode\u003eprisma7.config.*\u003c/code\u003e files.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e.config/prisma7.*\u003c/code\u003e files.\u003c/li\u003e\n\u003cli\u003eExisting \u003ccode\u003eprisma.config.*\u003c/code\u003e files as a backwards-compatible fallback.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eThe supported extensions are \u003ccode\u003e.js\u003c/code\u003e, \u003ccode\u003e.ts\u003c/code\u003e, \u003ccode\u003e.mjs\u003c/code\u003e, \u003ccode\u003e.cjs\u003c/code\u003e, \u003ccode\u003e.mts\u003c/code\u003e, and \u003ccode\u003e.cts\u003c/code\u003e. An explicit config path always takes precedence:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/05c1b8870678db5efc787b95172e4155f0712c7d\"\u003e\u003ccode\u003e05c1b88\u003c/code\u003e\u003c/a\u003e Teach Prisma 7 to prefer versioned config files (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/30020\"\u003e#30020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/cf2bc1f4b2d781330d09c7b425272734e3a2e9d2\"\u003e\u003ccode\u003ecf2bc1f\u003c/code\u003e\u003c/a\u003e Rename prisma7 package to \u003ccode\u003e@​prisma/prisma7\u003c/code\u003e (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/30002\"\u003e#30002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/ce5a34cbe0d77228b1dbebb020b72460e883f2b9\"\u003e\u003ccode\u003ece5a34c\u003c/code\u003e\u003c/a\u003e Complete downstream actionable Prisma 7 guidance propagation (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29994\"\u003e#29994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/3f13ec60f8506fa882556bc257cbeff28eb6e392\"\u003e\u003ccode\u003e3f13ec6\u003c/code\u003e\u003c/a\u003e Complete CLI-owned prisma7 distribution identity (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29969\"\u003e#29969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/179ba0c56b80b77e0708e5b07373135592d93f5e\"\u003e\u003ccode\u003e179ba0c\u003c/code\u003e\u003c/a\u003e feat(prisma7): add side-by-side CLI wrapper (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29949\"\u003e#29949\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/3fa65ac134696ca8eb3d1f869b1ab894ce5c93eb\"\u003e\u003ccode\u003e3fa65ac\u003c/code\u003e\u003c/a\u003e fix(p2002): correct modelName in nested create unique constraint errors \u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/2959\"\u003e#2959\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/6b6d9e90b002b4bf29e3f0d642a16629fae21a6b\"\u003e\u003ccode\u003e6b6d9e9\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-4.0edf323efd1d98336f3f0a68684b56f689b90...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/b64e33c9c21e23e83b5fedb3786ae25125394114\"\u003e\u003ccode\u003eb64e33c\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-3.9d90ce2c89d5c95a1148aef15e5561ab6c490...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/2046f9b74bc68d283c586e7c8e83da192e448d9b\"\u003e\u003ccode\u003e2046f9b\u003c/code\u003e\u003c/a\u003e feat(client): expose ModelName to compute function in Result extensions (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29782\"\u003e#29782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/f2b3abd550657bf80f2cfdeafdbb5a2f10dc256b\"\u003e\u003ccode\u003ef2b3abd\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-1.6d040c802892de6d56c7e0061b7a10b3e6a0c...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prisma/prisma/commits/7.10.0/packages/client\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint` from 9.39.5 to 10.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/eslint/eslint/releases\"\u003eeslint's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.11.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127\"\u003e\u003ccode\u003ed136fa4\u003c/code\u003e\u003c/a\u003e feat: object-shorthand handle quoted properties for \u003ccode\u003eignoreConstructors\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21271\"\u003e#21271\u003c/a\u003e) (Pavel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/397b3b8134b8ce1a61cbf414d4c29c945ba25690\"\u003e\u003ccode\u003e397b3b8\u003c/code\u003e\u003c/a\u003e feat: report unsafe labeled \u003ccode\u003econtinue\u003c/code\u003e in \u003ccode\u003eno-unsafe-finally\u003c/code\u003e rule (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21316\"\u003e#21316\u003c/a\u003e) (electrohyun)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d3dd47f42e4cb5f9da27e3a2e741aa21e02ea1a4\"\u003e\u003ccode\u003ed3dd47f\u003c/code\u003e\u003c/a\u003e feat: only exempt \u003ccode\u003enew-cap\u003c/code\u003e built-ins that reference the global (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21290\"\u003e#21290\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476\"\u003e\u003ccode\u003e22b09f5\u003c/code\u003e\u003c/a\u003e fix: ignore \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eprefer-object-spread\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21311\"\u003e#21311\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b684bb1cd7e6be03ad1b7a951baead936d9c2166\"\u003e\u003ccode\u003eb684bb1\u003c/code\u003e\u003c/a\u003e fix: make TimePass.parse optional in types and docs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21313\"\u003e#21313\u003c/a\u003e) (ntnyq)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/26d11bce3e0e21f223613d4bb4be3423839b229e\"\u003e\u003ccode\u003e26d11bc\u003c/code\u003e\u003c/a\u003e fix: don't report \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eobject-shorthand\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21310\"\u003e#21310\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa\"\u003e\u003ccode\u003e9ecfdc5\u003c/code\u003e\u003c/a\u003e docs: note that --cache can serve stale results for cross-file rules (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21312\"\u003e#21312\u003c/a\u003e) (bytedoe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6c789ff39bc5420e94e8dafeb328bf2b7e3d35ab\"\u003e\u003ccode\u003e6c789ff\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5997825635dc9c4e81434894607ef2e3887e0ea3\"\u003e\u003ccode\u003e5997825\u003c/code\u003e\u003c/a\u003e docs: clarify preserve-caught-error known limitation (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21294\"\u003e#21294\u003c/a\u003e) (Akinyemi Toluwalase)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68\"\u003e\u003ccode\u003e520dd77\u003c/code\u003e\u003c/a\u003e perf: Implement fast paths in critical areas (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21210\"\u003e#21210\u003c/a\u003e) (Nicholas C. Zakas)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a\"\u003e\u003ccode\u003e92086c8\u003c/code\u003e\u003c/a\u003e test: update \u003ccode\u003eEMFILE\u003c/code\u003e error generation for Node.js 26.9.0 compatibility (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21330\"\u003e#21330\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e\"\u003e\u003ccode\u003e9ac7eb6\u003c/code\u003e\u003c/a\u003e chore: update github/codeql-action action to v4.38.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21331\"\u003e#21331\u003c/a\u003e) (renovate[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd\"\u003e\u003ccode\u003e24310e3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21324\"\u003e#21324\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651\"\u003e\u003ccode\u003e45ad79e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21318\"\u003e#21318\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/ac74e37322ebf122ada676f153dc55c81f3caab0\"\u003e\u003ccode\u003eac74e37\u003c/code\u003e\u003c/a\u003e chore: Add AGENTS.md with AI disclosure requirements (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21221\"\u003e#21221\u003c/a\u003e) (Nicholas C. Zakas)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c8326608e710e670beaf982501aed80ea104919a\"\u003e\u003ccode\u003ec832660\u003c/code\u003e\u003c/a\u003e chore: Upgrade Stylelint to the latest version in docs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21245\"\u003e#21245\u003c/a\u003e) (Jung Hyeon Jun)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f9f88fcccd965fdc162b89c4615dd4018e3cabdf\"\u003e\u003ccode\u003ef9f88fc\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21308\"\u003e#21308\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/fc81076a5b8145360654d81cbc130cf7d25dca77\"\u003e\u003ccode\u003efc81076\u003c/code\u003e\u003c/a\u003e ci: add more types integration tests (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20395\"\u003e#20395\u003c/a\u003e) (Nitin Kumar)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.10.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/264b4346d1963701df0c398b4aeb2f6e8b2af93e\"\u003e\u003ccode\u003e264b434\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ed\u003c/code\u003e and \u003ccode\u003ev\u003c/code\u003e flags to \u003ccode\u003eno-unexpected-multiline\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21305\"\u003e#21305\u003c/a\u003e) (Gihyeon Jeong / 정기현)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c6cc6c592f30901345d94ef75e0d42c1894fae6c\"\u003e\u003ccode\u003ec6cc6c5\u003c/code\u003e\u003c/a\u003e feat: check \u003ccode\u003eObject.prototype\u003c/code\u003e property names in \u003ccode\u003enew-cap\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21269\"\u003e#21269\u003c/a\u003e) (crimsonjay0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5661fa65fde9fd4c14f0b730e3cee6a42fc657c1\"\u003e\u003ccode\u003e5661fa6\u003c/code\u003e\u003c/a\u003e feat: no-extra-bind false negatives with class fields and static blocks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21260\"\u003e#21260\u003c/a\u003e) (synthex-byte)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb47dc6da2399a8f76c0c0c3273e6bc314c480e5\"\u003e\u003ccode\u003ebb47dc6\u003c/code\u003e\u003c/a\u003e fix: update dependency file-entry-cache to v11 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20801\"\u003e#20801\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/427ac0a014066c36aa57fa8fa9af20fd9fb591e1\"\u003e\u003ccode\u003e427ac0a\u003c/code\u003e\u003c/a\u003e fix: use format strings in debug calls (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21247\"\u003e#21247\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9d8153223dbf47b9aecdc1474202aaee4845f146\"\u003e\u003ccode\u003e9d81532\u003c/code\u003e\u003c/a\u003e fix: support \u003ccode\u003e__proto__\u003c/code\u003e in \u003ccode\u003e/* exported */\u003c/code\u003e comments (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21261\"\u003e#21261\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/87e0a082438264ad90b87fd74165ab4fd90f63ef\"\u003e\u003ccode\u003e87e0a08\u003c/code\u003e\u003c/a\u003e fix: prefer-object-has-own autofix breaks when Object is shadowed (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21282\"\u003e#21282\u003c/a\u003e) (김채영)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8e2cb142217f2efee1d10dcc02bfb75145ae775d\"\u003e\u003ccode\u003e8e2cb14\u003c/code\u003e\u003c/a\u003e fix: \u003ccode\u003enew-cap\u003c/code\u003e false positive for \u003ccode\u003eUTC\u003c/code\u003e calls with \u003ccode\u003eproperties: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21275\"\u003e#21275\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9f4a364ab0ade048dfce1f37792b1d461d866e55\"\u003e\u003ccode\u003e9f4a364\u003c/code\u003e\u003c/a\u003e fix: Ignore static imports in no-unreachable (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21276\"\u003e#21276\u003c/a\u003e) (Taha Kotil)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/2417cad57d7d1bc4cf3ecf0f0575cfb10ff2011c\"\u003e\u003ccode\u003e2417cad\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9cecb8a0a2348070abf72321965d41919c7cc626\"\u003e\u003ccode\u003e9cecb8a\u003c/code\u003e\u003c/a\u003e docs: document \u003ccode\u003e\\c\u003c/code\u003e control letter escapes in no-control-regex (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21286\"\u003e#21286\u003c/a\u003e) (한국)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8724829f69f8ed80c876e3a5a017da199ce78739\"\u003e\u003ccode\u003e8724829\u003c/code\u003e\u003c/a\u003e docs: update compat table links (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21263\"\u003e#21263\u003c/a\u003e) (fnx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5634542be580750ffb1a5766470f9e9c72719696\"\u003e\u003ccode\u003e5634542\u003c/code\u003e\u003c/a\u003e docs: Clarify eqeqeq suggestion behavior (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21256\"\u003e#21256\u003c/a\u003e) (Müslüm Yılmaz)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b3d876b46083d67899eb1d9613118c1c583632a2\"\u003e\u003ccode\u003eb3d876b\u003c/code\u003e\u003c/a\u003e chore: disable npm audit in ecosystem tests (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21306\"\u003e#21306\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/1696682791661c13167eb905da2f38d1b8f4a3bf\"\u003e\u003ccode\u003e1696682\u003c/code\u003e\u003c/a\u003e ci: restore EMFILE test on Node.js 26 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21297\"\u003e#21297\u003c/a\u003e) (Marry (Subin Yang))\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3c0b7c6e1fe2dec778b97a996018126f22d437ae\"\u003e\u003ccode\u003e3c0b7c6\u003c/code\u003e\u003c/a\u003e 10.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/321f0a70dd908ed461b11142e17fbdc0c0f1f198\"\u003e\u003ccode\u003e321f0a7\u003c/code\u003e\u003c/a\u003e Build: changelog update for 10.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68\"\u003e\u003ccode\u003e520dd77\u003c/code\u003e\u003c/a\u003e perf: Implement fast paths in critical areas (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21210\"\u003e#21210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa\"\u003e\u003ccode\u003e9ecfdc5\u003c/code\u003e\u003c/a\u003e docs: note that --cache can serve stale results for cross-file rules (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21312\"\u003e#21312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a\"\u003e\u003ccode\u003e92086c8\u003c/code\u003e\u003c/a\u003e test: update \u003ccode\u003eEMFILE\u003c/code\u003e error generation for Node.js 26.9.0 compatibility (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21330\"\u003e#21330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e\"\u003e\u003ccode\u003e9ac7eb6\u003c/code\u003e\u003c/a\u003e chore: update github/codeql-action action to v4.38.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21331\"\u003e#21331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476\"\u003e\u003ccode\u003e22b09f5\u003c/code\u003e\u003c/a\u003e fix: ignore \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eprefer-object-spread\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21311\"\u003e#21311\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd\"\u003e\u003ccode\u003e24310e3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21324\"\u003e#21324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127\"\u003e\u003ccode\u003ed136fa4\u003c/code\u003e\u003c/a\u003e feat: object-shorthand handle quoted properties for \u003ccode\u003eignoreConstructors\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651\"\u003e\u003ccode\u003e45ad79e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21318\"\u003e#21318\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/eslint/eslint/compare/v9.39.5...v10.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lint-staged` from 17.4.1 to 17.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lint-staged/lint-staged/releases\"\u003elint-staged's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.6.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1850\"\u003e#1850\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180\"\u003e\u003ccode\u003e938d3f4\u003c/code\u003e\u003c/a\u003e - Task functions like \u003ccode\u003e{ title, task }\u003c/code\u003e can now use a logger function \u003ccode\u003elog()\u003c/code\u003e to emit output while the task runs. By default, the output will only be visible if the task fails, unless the \u003ccode\u003e--verbose\u003c/code\u003e option was used. Additionally, when the task rejects, the error will be shown in the output.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*': {\ntitle: 'Fail if PDF files are committed',\ntask: async (filepaths, { log }) =\u0026gt; {\nconst pdfFiles = filepaths.filter((f) =\u0026gt; f.toLowerCase().endsWith('.pdf'))\nif (pdfFiles.length \u0026gt; 0) {\nlog('PDF files should not be committed: %s', pdfFiles)\nthrow new Error('Failed')\n}\n},\n},\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1854\"\u003e#1854\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3\"\u003e\u003ccode\u003e30562bc\u003c/code\u003e\u003c/a\u003e - \u003cem\u003elint-staged\u003c/em\u003e now stages changes to \u003cstrong\u003eall tracked files modified by tasks\u003c/strong\u003e, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like \u003ccode\u003e() =\u0026gt; \u0026quot;prettier --write .\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIf you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use \u003ccode\u003e--hide-unstaged\u003c/code\u003e to hide your changes while tasks run.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1860\"\u003e#1860\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98\"\u003e\u003ccode\u003e4296532\u003c/code\u003e\u003c/a\u003e - The assignment of staged files to \u003cem\u003elint-staged\u003c/em\u003e configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1861\"\u003e#1861\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a\"\u003e\u003ccode\u003ec45f28a\u003c/code\u003e\u003c/a\u003e - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example \u003ccode\u003eeslint\u003c/code\u003e and \u003ccode\u003eprettier\u003c/code\u003e will run in parallel (for all files, when any JS files are staged):\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*.js': () =\u0026gt; [['eslint --max-warnings=0 .', 'prettier --list-different .']],\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1859\"\u003e#1859\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d\"\u003e\u003ccode\u003ef0ea69d\u003c/code\u003e\u003c/a\u003e - Various performance improvements from skipping redundant internal Git calls.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1856\"\u003e#1856\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821\"\u003e\u003ccode\u003e69d7d17\u003c/code\u003e\u003c/a\u003e - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of \u003cem\u003elint-staged\u003c/em\u003e overwriting it. This makes it safer to run \u003cem\u003elint-staged\u003c/em\u003e in multiple worktrees at the same time.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev17.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1852\"\u003e#1852\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/bfcca94e61aef7078a7a0ec8165c0cc2c9baca99\"\u003e\u003ccode\u003ebfcca94\u003c/code\u003e\u003c/a\u003e - Fix TypeScript issue \u003ccode\u003eTS1254\u003c/code\u003e from \u003ccode\u003edefineConfig()\u003c/code\u003e by changing the signature from \u003ccode\u003econst\u003c/code\u003e to a \u003ccode\u003efunction\u003c/code\u003e:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eA 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md\"\u003elint-staged's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e17.6.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1850\"\u003e#1850\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180\"\u003e\u003ccode\u003e938d3f4\u003c/code\u003e\u003c/a\u003e - Task functions like \u003ccode\u003e{ title, task }\u003c/code\u003e can now use a logger function \u003ccode\u003elog()\u003c/code\u003e to emit output while the task runs. By default, the output will only be visible if the task fails, unless the \u003ccode\u003e--verbose\u003c/code\u003e option was used. Additionally, when the task rejects, the error will be shown in the output.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*': {\ntitle: 'Fail if PDF files are committed',\ntask: async (filepaths, { log }) =\u0026gt; {\nconst pdfFiles = filepaths.filter((f) =\u0026gt; f.toLowerCase().endsWith('.pdf'))\nif (pdfFiles.length \u0026gt; 0) {\nlog('PDF files should not be committed: %s', pdfFiles)\nthrow new Error('Failed')\n}\n},\n},\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1854\"\u003e#1854\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3\"\u003e\u003ccode\u003e30562bc\u003c/code\u003e\u003c/a\u003e - \u003cem\u003elint-staged\u003c/em\u003e now stages changes to \u003cstrong\u003eall tracked files modified by tasks\u003c/strong\u003e, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like \u003ccode\u003e() =\u0026gt; \u0026quot;prettier --write .\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIf you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use \u003ccode\u003e--hide-unstaged\u003c/code\u003e to hide your changes while tasks run.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1860\"\u003e#1860\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98\"\u003e\u003ccode\u003e4296532\u003c/code\u003e\u003c/a\u003e - The assignment of staged files to \u003cem\u003elint-staged\u003c/em\u003e configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1861\"\u003e#1861\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a\"\u003e\u003ccode\u003ec45f28a\u003c/code\u003e\u003c/a\u003e - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example \u003ccode\u003eeslint\u003c/code\u003e and \u003ccode\u003eprettier\u003c/code\u003e will run in parallel (for all files, when any JS files are staged):\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*.js': () =\u0026gt; [['eslint --max-warnings=0 .', 'prettier --list-different .']],\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1859\"\u003e#1859\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d\"\u003e\u003ccode\u003ef0ea69d\u003c/code\u003e\u003c/a\u003e - Various performance improvements from skipping redundant internal Git calls.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1856\"\u003e#1856\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821\"\u003e\u003ccode\u003e69d7d17\u003c/code\u003e\u003c/a\u003e - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of \u003cem\u003elint-staged\u003c/em\u003e overwriting it. This makes it safer to run \u003cem\u003elint-staged\u003c/em\u003e in multiple worktrees at the same time.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e17.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1852\"\u003e#1852\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/bfcca94e61aef7078a7a0ec8165c0cc2c9baca99\"\u003e\u003ccode\u003ebfcca94\u003c/code\u003e\u003c/a\u003e - Fix TypeScript issue \u003ccode\u003eTS1254\u003c/code\u003e from \u003ccode\u003edefineConfig()\u003c/code\u003e by changing the signature from \u003ccode\u003econst\u003c/code\u003e to a \u003ccode\u003efunction\u003c/code\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/48f9f4ea4b88eb605de3546e4599083de7a394b2\"\u003e\u003ccode\u003e48f9f4e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/issues/1857\"\u003e#1857\u003c/a\u003e from lint-staged/changeset-release/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/16b2e213efeec330f7e1576a8d35776822bf698a\"\u003e\u003ccode\u003e16b2e21\u003c/code\u003e\u003c/a\u003e chore(changeset): release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/195f15677da877431b63dfd001e1ed9369bb1479\"\u003e\u003ccode\u003e195f156\u003c/code\u003e\u003c/a\u003e docs: improve changeset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/0ba6261cabfdade60e487385ebec4fc2b4b44309\"\u003e\u003ccode\u003e0ba6261\u003c/code\u003e\u003c/a\u003e fix: create hidden directory only when required\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/66ac2de6f71d19256cc5d11026d37e653af11549\"\u003e\u003ccode\u003e66ac2de\u003c/code\u003e\u003c/a\u003e docs: fixes to changesets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/80af8d7f8246c4246cdf8b53229bd1bf7763f959\"\u003e\u003ccode\u003e80af8d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/issues/1863\"\u003e#1863\u003c/a\u003e from lint-staged/fix-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/e4334881d49d94669bc2b2fb5a73705d822c69bb\"\u003e\u003ccode\u003ee433488\u003c/code\u003e\u003c/a\u003e fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/e5019b32138e301c777c683f95e4a1e17362845f\"\u003e\u003ccode\u003ee5019b3\u003c/code\u003e\u003c/a\u003e fix: handle trailing newlines when detecting changed files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/74efec85fa276618837d3c4602062ef30d16abf1\"\u003e\u003ccode\u003e74efec8\u003c/code\u003e\u003c/a\u003e ci: run Cygwin and MSYS2 tests on Node.js 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/655b7dcd9f7eb57a6f574f03be371190afeb9f5c\"\u003e\u003ccode\u003e655b7dc\u003c/code\u003e\u003c/a\u003e fix: use TypeScript types instead of JSDoc\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lint-staged/lint-staged/compare/v17.4.1...v17.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tsx` from 4.23.1 to 4.23.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/privatenumber/tsx/releases\"\u003etsx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.23.15\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.14...v4.23.15\"\u003e4.23.15\u003c/a\u003e (2026-09-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexclude bare builtins from namespace inheritance (\u003ca href=\"https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a\"\u003e38e1588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eexpose require.cache and require.extensions to tsImport CommonJS modules (\u003ca href=\"https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a\"\u003e2da3407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emake namespaced register() overloads portable for declaration emit (\u003ca href=\"https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15\"\u003e562c434\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.15\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.14\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.14\"\u003e4.23.14\u003c/a\u003e (2026-09-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erestore the CJS bridge namespace for Node 24 require(esm) under tsImport() (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/802\"\u003e#802\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f\"\u003e6e5236b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.14\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.13\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.12...v4.23.13\"\u003e4.23.13\u003c/a\u003e (2026-08-30)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecache:\u003c/strong\u003e bound shared transform cache memory (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/835\"\u003e#835\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e\"\u003e28e1f12\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.13\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.12\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.11...v4.23.12\"\u003e4.23.12\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshim \u003ccode\u003eimport.meta\u003c/code\u003e when tokens are split by comments or newlines (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/ed9d33046a135de13a35fdfce12368b79d1b1518\"\u003eed9d330\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/828\"\u003e#828\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.12\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/ca66105a17a2a4c6503fe3a12b5b9ec408286011\"\u003e\u003ccode\u003eca66105\u003c/code\u003e\u003c/a\u003e test: fix drive-less file URLs in ESM resolver fixtures\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a\"\u003e\u003ccode\u003e2da3407\u003c/code\u003e\u003c/a\u003e fix: expose require.cache and require.extensions to tsImport CommonJS modules\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a\"\u003e\u003ccode\u003e38e1588\u003c/code\u003e\u003c/a\u003e fix: exclude bare builtins from namespace inheritance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15\"\u003e\u003ccode\u003e562c434\u003c/code\u003e\u003c/a\u003e fix: make namespaced register() overloads portable for declaration emit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/edfb1f05a3f40b879a41a03a0801c2abd3a3ecf9\"\u003e\u003ccode\u003eedfb1f0\u003c/code\u003e\u003c/a\u003e build: upgrade pkgroll and externalize CJS loader reference\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/70e78284837c859f09b96cd10cd71d007aa4b795\"\u003e\u003ccode\u003e70e7828\u003c/code\u003e\u003c/a\u003e test: upgrade tinyspy for disposable API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/9ed2022dfa9ea1be9511fe6abcde8110c25055a7\"\u003e\u003ccode\u003e9ed2022\u003c/code\u003e\u003c/a\u003e ci: avoid duplicate release notifications\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/872e77ffc5e96ca5c4727e74c0694debcb26219b\"\u003e\u003ccode\u003e872e77f\u003c/code\u003e\u003c/a\u003e refactor: use disposables for cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f\"\u003e\u003ccode\u003e6e5236b\u003c/code\u003e\u003c/a\u003e fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e\"\u003e\u003ccode\u003e28e1f12\u003c/code\u003e\u003c/a\u003e fix(cache): bound shared transform cache memory (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `turbo` from 2.10.11 to 2.11.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/turborepo/releases\"\u003eturbo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTurborepo v2.11.5\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: Release Turborepo 2.11.4 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14231\"\u003evercel/turborepo#14231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Python opt-in hint into filter contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14228\"\u003evercel/turborepo#14228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output summary assertion into contract by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14230\"\u003evercel/turborepo#14230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output selection and validation cases to engine contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14232\"\u003evercel/turborepo#14232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo exclude-only scope coverage by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14238\"\u003evercel/turborepo#14238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo cache-authority cases to contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14240\"\u003evercel/turborepo#14240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move JIT dependency graph scenario into engine contract by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14235\"\u003evercel/turborepo#14235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output hash cases into task-hash contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14233\"\u003evercel/turborepo#14233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo task-filter cases into crate contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14239\"\u003evercel/turborepo#14239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move JIT input hash timing cases into task-hash contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14234\"\u003evercel/turborepo#14234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move package input normalization cases into engine contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14236\"\u003evercel/turborepo#14236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move structured startup and JIT input cases into contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14237\"\u003evercel/turborepo#14237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Back off remote artifact requests during outages by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14222\"\u003evercel/turborepo#14222\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Release Turborepo 2.11.5-canary.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14245\"\u003evercel/turborepo#14245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Make new-package lockfile filter deterministic by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14241\"\u003evercel/turborepo#14241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Trim redundant Go cache builds by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14242\"\u003evercel/turborepo#14242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Reduce Go versioned-name test matrix by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14243\"\u003evercel/turborepo#14243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Go binary checks into contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14246\"\u003evercel/turborepo#14246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Consolidate Go format smokes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14244\"\u003evercel/turborepo#14244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Reuse Cargo build artifacts safely by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14247\"\u003evercel/turborepo#14247\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Separate prune planning matrix from buildability smoke by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14248\"\u003evercel/turborepo#14248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Bundle docs in \u003ccode\u003eturbo\u003c/code\u003e npm package by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14108\"\u003evercel/turborepo#14108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Release Turborepo 2.11.5-canary.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14249\"\u003evercel/turborepo#14249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Stabilize pnpm per-workspace lockfile hashes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14253\"\u003evercel/turborepo#14253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade factory Next.js to 16.3.3 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14254\"\u003evercel/turborepo#14254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Update js-yaml to address CVE-2026-84375 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14255\"\u003evercel/turborepo#14255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade Next.js in docs and factory for CVE-2026-94545 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14256\"\u003evercel/turborepo#14256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Remove unmaintained proc-macro-error2 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14257\"\u003evercel/turborepo#14257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Replace clap in production CLIs with usage-rs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14259\"\u003evercel/turborepo#14259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove tiny-gradient dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14260\"\u003evercel/turborepo#14260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Replace human-panic with local crash reporting by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14261\"\u003evercel/turborepo#14261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove unused struct_iterable dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14258\"\u003evercel/turborepo#14258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Sign complete on-disk artifacts after local cache writes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14265\"\u003evercel/turborepo#14265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove \u003ccode\u003ederive_setters\u003c/code\u003e dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14266\"\u003evercel/turborepo#14266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove port_scanner dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14267\"\u003evercel/turborepo#14267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove unused Rust dependency declarations by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14268\"\u003evercel/turborepo#14268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused public Rust APIs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14269\"\u003evercel/turborepo#14269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Use workspace Rust edition across crates by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14270\"\u003evercel/turborepo#14270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Clean up Rust Clippy exceptions by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14271\"\u003evercel/turborepo#14271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Group task-hash and uv generation context by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14279\"\u003evercel/turborepo#14279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused global hash wrapper by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14281\"\u003evercel/turborepo#14281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused file-hash telemetry argument by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14282\"\u003evercel/turborepo#14282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove dead CLI code and crate-wide allowance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14283\"\u003evercel/turborepo#14283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove dead Microfrontends config code by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14284\"\u003evercel/turborepo#14284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused UI task types and dead-code allowance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14286\"\u003evercel/turborepo#14286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8492b42667210270f4169f0df8c0edf725ff2f41\"\u003e\u003ccode\u003e8492b42\u003c/code\u003e\u003c/a\u003e publish 2.11.5 to registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/a50ee6536eac2f7f3168cc38087ee7d8397fc0e9\"\u003e\u003ccode\u003ea50ee65\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.5 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14328\"\u003e#14328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c9602f339008964f8dfaf6329491c374cf2f0a60\"\u003e\u003ccode\u003ec9602f3\u003c/code\u003e\u003c/a\u003e fix: Pass repository to release asset commands (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14327\"\u003e#14327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8cb67669e73cf73bde0a8a9e0a9a829ddd34993f\"\u003e\u003ccode\u003e8cb6766\u003c/code\u003e\u003c/a\u003e fix: Isolate installer test environment (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14326\"\u003e#14326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/5108f6c9fda7a7aeb2d2f31c46a44bbe966970c7\"\u003e\u003ccode\u003e5108f6c\u003c/code\u003e\u003c/a\u003e feat: Add standalone installers URLs for \u003ccode\u003ecurl | bash\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14325\"\u003e#14325\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/a46f82a2742ef0f8e1b5f9acebfbe2544c34c528\"\u003e\u003ccode\u003ea46f82a\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.4 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14324\"\u003e#14324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8427e6e5dd7efc7afdf5a332502551fc8f2eabc8\"\u003e\u003ccode\u003e8427e6e\u003c/code\u003e\u003c/a\u003e fix: Run standalone archive job on manual releases (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14323\"\u003e#14323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/7f57aa38406027a30a77d46489ebbdf9dd3ef0e5\"\u003e\u003ccode\u003e7f57aa3\u003c/code\u003e\u003c/a\u003e feat: Publish versioned standalone turbo archives (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14322\"\u003e#14322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/d6b852c53c8473ec88081e826b357feb35938e5e\"\u003e\u003ccode\u003ed6b852c\u003c/code\u003e\u003c/a\u003e docs: Update Turborepo schema URL example (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14321\"\u003e#14321\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c76ac66c4447bfe35301bee0a002d3c60e163342\"\u003e\u003ccode\u003ec76ac66\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.3 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14320\"\u003e#14320\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/turborepo/compare/v2.10.11...v2.11.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `typescript` from 5.9.3 to 7.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/TypeScript/releases\"\u003etypescript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTypeScript 7.0.2\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/\"\u003ehttps://devblogs.microsoft.com/typescript/announcing-typescript-7-0/\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis tag was originally released at: \u003ca href=\"https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2\"\u003ehttps://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eTypeScript 6.0.3\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.2%22\"\u003efixed issues query for TypeScript 6.0.2 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.3%22\"\u003efixed issues query for TypeScript 6.0.3 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.2%22\"\u003efixed issues query for TypeScript 6.0.2 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0.1 RC\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-rc/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0 Beta\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-beta/\"\u003erelease announcement\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/1e4744d68260a7cb91b62b12edc3f6a2187faaf1\"\u003e\u003ccode\u003e1e4744d\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into ts7-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/a5a219c3b5da0db4fa0ecf6c0b1f588c9af9c669\"\u003e\u003ccode\u003ea5a219c\u003c/code\u003e\u003c/a\u003e\u003ccode\u003emicrosoft/typescript-go#4558\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ecfe30dce91368d52c9a49b6095bb0b673a238f8\"\u003e\u003ccode\u003eecfe30d\u003c/code\u003e\u003c/a\u003e Update status localization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/5de25b5f8fec2ca35eadaed041f1f06d2e214895\"\u003e\u003ccode\u003e5de25b5\u003c/code\u003e\u003c/a\u003e Hide executable name in TypeScript status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/d7ce74a75da2b80e8201506a1599c06549432b93\"\u003e\u003ccode\u003ed7ce74a\u003c/code\u003e\u003c/a\u003e Show bundled TypeScript version for packaged servers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/29be66a607707f90d7a53103a4469bb3015a4d54\"\u003e\u003ccode\u003e29be66a\u003c/code\u003e\u003c/a\u003e Correct TS 7 release version to 7.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ed2bd1bfa4aac5211ce4bc58fcd1313c7eddc8ff\"\u003e\u003ccode\u003eed2bd1b\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into ts7-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/887307575c58ea640dbeba3b4e8fdb6347cd3044\"\u003e\u003ccode\u003e8873075\u003c/code\u003e\u003c/a\u003e Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/9427131ae2d4e230a90ee8a09daac4e75da3e311\"\u003e\u003ccode\u003e9427131\u003c/code\u003e\u003c/a\u003e Set up stable / nightly extension split, other prep (microsoft/typescript-go#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/d4eaca5460a1f5f02a829e62706794b0a6fb903e\"\u003e\u003ccode\u003ed4eaca5\u003c/code\u003e\u003c/a\u003e\u003ccode\u003emicrosoft/typescript-go#4549\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/TypeScript/compare/v5.9.3...v7.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~microsoft1es\"\u003emicrosoft1es\u003c/a\u003e, a new releaser for typescript since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@apollo/server` from 4.13.0 to 5.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apollographql/apollo-server/releases\"\u003e@​apollo/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server-integration-testsuite\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8201\"\u003e#8201\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mhassan1\"\u003e\u003ccode\u003e@​mhassan1\u003c/code\u003e\u003c/a\u003e! - Replace dependency \u003ccode\u003euuid\u003c/code\u003e with calls to \u003ccode\u003ecrypto.randomUUID\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server-integration-testsuite\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e - ⚠️ SECURITY \u003ccode\u003e@apollo/server/standalone\u003c/code\u003e:\u003c/p\u003e\n\u003cp\u003eApollo Server now rejects GraphQL \u003ccode\u003eGET\u003c/code\u003e requests which contain a \u003ccode\u003eContent-Type\u003c/code\u003e header other than \u003ccode\u003eapplication/json\u003c/code\u003e (with optional parameters such as \u003ccode\u003e; charset=utf-8\u003c/code\u003e). Any other value is now rejected with a 415 status code.\u003c/p\u003e\n\u003cp\u003e(GraphQL \u003ccode\u003eGET\u003c/code\u003e requests without a \u003ccode\u003eContent-Type\u003c/code\u003e header are still allowed, though they do still need to contain a non-empty \u003ccode\u003eX-Apollo-Operation-Name\u003c/code\u003e or \u003ccode\u003eApollo-Require-Preflight\u003c/code\u003e header to be processed if the default CSRF prevention feature is enabled.)\u003c/p\u003e\n\u003cp\u003eThis improvement makes Apollo Server's CSRF more resistant to browsers which implement CORS in non-spec-compliant ways. Apollo is aware of one browser which as of March 2026 has a bug which allows an attacker to circumvent Apollo Server's CSRF prevention feature to carry out read-only XS-Search-style CSRF attacks. The browser vendor is in the process of patching this vulnerability; upgrading Apollo Server to v5.5.0 mitigates this vulnerability.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIf your server uses cookies (or HTTP Basic Auth) for authentication, Apollo encourages you to upgrade to v5.5.0.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThis is technically a backwards-incompatible change. Apollo is not aware of any GraphQL clients which provide non-empty \u003ccode\u003eContent-Type\u003c/code\u003e headers with \u003ccode\u003eGET\u003c/code\u003e requests with types other than \u003ccode\u003eapplication/json\u003c/code\u003e. If your use case requires such requests, please \u003ca href=\"https://github.com/apollographql/apollo-server/issues\"\u003efile an issue\u003c/a\u003e and we may add more configurability in a follow-up release.\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/apollographql/apollo-server/security/advisories/GHSA-9q82-xgwf-vj6h\"\u003eadvisory GHSA-9q82-xgwf-vj6h\u003c/a\u003e for more details.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/glasser\"\u003e\u003ccode\u003e@​glasser\u003c/code\u003e\u003c/a\u003e! - ⚠️ SECURITY \u003ccode\u003e@apollo/server/standalone\u003c/code\u003e:\u003c/p\u003e\n\u003cp\u003eApollo Server now rejects GraphQL \u003ccode\u003eGET\u003c/code\u003e requests which contain a \u003ccode\u003eContent-Type\u003c/code\u003e header other than \u003ccode\u003eapplication/json\u003c/code\u003e (with optional parameters such as \u003ccode\u003e; charset=utf-8\u003c/code\u003e). Any other value is now rejected with a 415 status code.\u003c/p\u003e\n\u003cp\u003e(GraphQL \u003ccode\u003eGET\u003c/code\u003e requests without a \u003ccode\u003eContent-Type\u003c/code\u003e header are still allowed, though they do still need to contain a non-empty \u003ccode\u003eX-Apollo-Operation-Name\u003c/code\u003e or \u003ccode\u003eApollo-Require-Preflight\u003c/code\u003e header to be processed if the default CSRF prevention feature is enabled.)\u003c/p\u003e\n\u003cp\u003eThis improvement makes Apollo Server's CSRF more resistant to browsers which implement CORS in non-spec-compliant ways. Apollo is aware of one browser which as of March 2026 has a bug which allows an attacker to circumvent Apollo Server's CSRF prevention feature to carry out read-only XS-Search-style CSRF attacks. The browser vendor is in the process of patching this vulnerability; upgrading Apollo Server to v5.5.0 mitigates this vulnerability.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIf your server uses cookies (or HTTP Basic Auth) for authentication, Apollo encourages you to upgrade to v5.5.0.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThis is technically a backwards-incompatible change. Apollo is not aware of any GraphQL clients which provide non-empty \u003ccode\u003eContent-Type\u003c/code\u003e headers with \u003ccode\u003eGET\u003c/code\u003e requests with types other than \u003ccode\u003eapplication/json\u003c/code\u003e. If your use case requires such requests, please \u003ca href=\"https://github.com/apollographql/apollo-server/issues\"\u003efile an issue\u003c/a\u003e and we may add more configurability in a follow-up release.\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/apollographql/apollo-server/security/advisories/GHSA-9q82-xgwf-vj6h\"\u003eadvisory GHSA-9q82-xgwf-vj6h\u003c/a\u003e for more details.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md\"\u003e@​apollo/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8201\"\u003e#8201\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mhassan1\"\u003e\u003ccode\u003e@​mhassan1\u003c/code\u003e\u003c/a\u003e! - Replace dependency \u003ccode\u003euuid\u003c/code\u003e with calls to \u003ccode\u003ecrypto.randomUUID\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographq...\n\n_Description has been truncated_","html_url":"https://github.com/stellar-alerts-labs/stellar-alerts/pull/513","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/stellar-alerts-labs%2Fstellar-alerts/issues/513","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/513/packages"},{"uuid":"5650786042","node_id":"PR_kwDOUcGRT88AAAABF8q4Bw","number":6,"state":"open","title":"chore(deps): bump commander from 12.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T17:57:42.000Z","updated_at":"2026-09-30T17:57:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/poposnail61/minim-astryx/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/poposnail61%2Fminim-astryx/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"},{"uuid":"5646643410","node_id":"PR_kwDOU1FZ988AAAABF5VWzQ","number":68,"state":"open","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T12:45:19.000Z","updated_at":"2026-09-30T12:45:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/codereview-benchmark/zz-failed-keycloak-keycloak-tenki-v2-PR37429-20260930/pull/68","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/codereview-benchmark%2Fzz-failed-keycloak-keycloak-tenki-v2-PR37429-20260930/issues/68","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/68/packages"},{"uuid":"5641757924","node_id":"PR_kwDOUjd5W88AAAABF1ZHHg","number":5,"state":"closed","title":"chore(deps): Bump the production-dependencies group with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-30T06:43:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-30T06:00:22.000Z","updated_at":"2026-09-30T06:43:56.000Z","time_to_close":2606,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"production-dependencies","update_count":3,"packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"marked","old_version":"18.0.13","new_version":"18.0.14","repository_url":"https://github.com/markedjs/marked"},{"name":"react-devtools-core","old_version":"7.0.1","new_version":"8.0.0","repository_url":"https://github.com/react/react"}],"path":null,"ecosystem":"npm"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the production-dependencies group with 3 updates: [commander](https://github.com/tj/commander.js), [marked](https://github.com/markedjs/marked) and [react-devtools-core](https://github.com/react/react/tree/HEAD/packages/react-devtools-core).\n\nUpdates `commander` from 14.0.3 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `marked` from 18.0.13 to 18.0.14\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markedjs/marked/releases\"\u003emarked's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev18.0.14\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/markedjs/marked/compare/v18.0.13...v18.0.14\"\u003e18.0.14\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow indented lines in setext heading text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4095\"\u003e#4095\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/7d05530733fa3f3ec2ed912ff695d05af6d81b8a\"\u003e7d05530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edecode numeric character references in text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4076\"\u003e#4076\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/cead8de96f2ee32d79e1de187bd099929f7409a8\"\u003ecead8de\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ekeep text after empty nested blockquote (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4101\"\u003e#4101\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/1b89557177fe5a7d5d430fdc76e7c8a7c0adf6d7\"\u003e1b89557\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4098\"\u003e#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epreserve internal tabs in list item content (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4086\"\u003e#4086\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/e136da7c7dedcb58af046086005f89350020c416\"\u003ee136da7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estrip whitespace when normalizing link reference labels (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4091\"\u003e#4091\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/c7ee43abecd6a9e024f8bb6818be2da05e5793cb\"\u003ec7ee43a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport GFM protocol autolinks (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4067\"\u003e#4067\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/7f7a49670c14acc6f11efcb18ecc69d17962477a\"\u003e7f7a496\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/ef0704c58459e927c805b92a5cc7d0c629e6fe43\"\u003e\u003ccode\u003eef0704c\u003c/code\u003e\u003c/a\u003e chore(release): 18.0.14 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/23c82ad02bc8723d9a32c41dd23db155a472d37e\"\u003e\u003ccode\u003e23c82ad\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4108\"\u003e#4108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/1b89557177fe5a7d5d430fdc76e7c8a7c0adf6d7\"\u003e\u003ccode\u003e1b89557\u003c/code\u003e\u003c/a\u003e fix: keep text after empty nested blockquote (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4101\"\u003e#4101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/7f7a49670c14acc6f11efcb18ecc69d17962477a\"\u003e\u003ccode\u003e7f7a496\u003c/code\u003e\u003c/a\u003e fix: support GFM protocol autolinks (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4067\"\u003e#4067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/5196d98839463f17efa1bb104164d3bcf9cbcac2\"\u003e\u003ccode\u003e5196d98\u003c/code\u003e\u003c/a\u003e docs: add commonmark and gfm as versions in demo (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4094\"\u003e#4094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/de2320ac743ef752acb37c5ffe536ce1abc0d281\"\u003e\u003ccode\u003ede2320a\u003c/code\u003e\u003c/a\u003e docs: add marked-gitlab to known extensions (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4092\"\u003e#4092\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/7d05530733fa3f3ec2ed912ff695d05af6d81b8a\"\u003e\u003ccode\u003e7d05530\u003c/code\u003e\u003c/a\u003e fix: allow indented lines in setext heading text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4095\"\u003e#4095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/c7ee43abecd6a9e024f8bb6818be2da05e5793cb\"\u003e\u003ccode\u003ec7ee43a\u003c/code\u003e\u003c/a\u003e fix: strip whitespace when normalizing link reference labels (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4091\"\u003e#4091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/cead8de96f2ee32d79e1de187bd099929f7409a8\"\u003e\u003ccode\u003ecead8de\u003c/code\u003e\u003c/a\u003e fix: decode numeric character references in text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4076\"\u003e#4076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/e136da7c7dedcb58af046086005f89350020c416\"\u003e\u003ccode\u003ee136da7\u003c/code\u003e\u003c/a\u003e fix: preserve internal tabs in list item content (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4086\"\u003e#4086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markedjs/marked/compare/v18.0.13...v18.0.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-devtools-core` from 7.0.1 to 8.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/releases\"\u003ereact-devtools-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eeslint-plugin-react-hooks@7.1.1 (April 17, 2026)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e 7.1.0 accidentally removed the \u003ccode\u003ecomponent-hook-factories\u003c/code\u003e rule, causing errors for users who referenced it in their ESLint config. This is now fixed.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd deprecated no-op \u003ccode\u003ecomponent-hook-factories\u003c/code\u003e rule for backwards compatibility. (\u003ca href=\"https://github.com/mofeiZ\"\u003e\u003ccode\u003e@​mofeiZ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/36307\"\u003e#36307\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eeslint-plugin-react-hooks@7.1.0 (April 16, 2026)\u003c/h2\u003e\n\u003cp\u003eThis release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better \u003ccode\u003eset-state-in-effect\u003c/code\u003e detection, improved ref validation, and more helpful error reporting.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ESLint v10 support. (\u003ca href=\"https://github.com/azat-io\"\u003e\u003ccode\u003e@​azat-io\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip compilation for non-React files to improve performance. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35589\"\u003e#35589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exhaustive deps bug with Flow type casting. (\u003ca href=\"https://github.com/jorge-cab\"\u003e\u003ccode\u003e@​jorge-cab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euseEffectEvent\u003c/code\u003e checks in component syntax. (\u003ca href=\"https://github.com/jbrown215\"\u003e\u003ccode\u003e@​jbrown215\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35041\"\u003e#35041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved \u003ccode\u003eset-state-in-effect\u003c/code\u003e validation with fewer false negatives. (\u003ca href=\"https://github.com/jorge-cab\"\u003e\u003ccode\u003e@​jorge-cab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35134\"\u003e#35134\u003c/a\u003e, \u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35147\"\u003e#35147\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35214\"\u003e#35214\u003c/a\u003e, \u003ca href=\"https://github.com/chesnokov-tony\"\u003e\u003ccode\u003e@​chesnokov-tony\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35419\"\u003e#35419\u003c/a\u003e, \u003ca href=\"https://github.com/jsleitor\"\u003e\u003ccode\u003e@​jsleitor\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/36107\"\u003e#36107\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved ref validation for non-mutating functions and event handler props. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35893\"\u003e#35893\u003c/a\u003e, \u003ca href=\"https://github.com/kolvian\"\u003e\u003ccode\u003e@​kolvian\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCompiler now reports all errors instead of stopping at the first. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35873\"\u003e#35873\u003c/a\u003e–\u003ca href=\"https://redirect.github.com/facebook/react/pull/35884\"\u003e#35884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved source locations and error display in compiler diagnostics. (\u003ca href=\"https://github.com/nathanmarks\"\u003e\u003ccode\u003e@​nathanmarks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35348\"\u003e#35348\u003c/a\u003e, \u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/34963\"\u003e#34963\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/blob/main/CHANGELOG.md\"\u003ereact-devtools-core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e18.0.0 (March 29, 2022)\u003c/h2\u003e\n\u003cp\u003eBelow is a list of all new features, APIs, deprecations, and breaking changes.\nRead \u003ca href=\"https://reactjs.org/blog/2022/03/29/react-v18.html\"\u003eReact 18 release post\u003c/a\u003e and \u003ca href=\"https://reactjs.org/blog/2022/03/08/react-18-upgrade-guide.html\"\u003eReact 18 upgrade guide\u003c/a\u003e for more information.\u003c/p\u003e\n\u003ch3\u003eNew Features\u003c/h3\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003euseId\u003c/code\u003e is a new hook for generating unique IDs on both the client and server, while avoiding hydration mismatches. It is primarily useful for component libraries integrating with accessibility APIs that require unique IDs. This solves an issue that already exists in React 17 and below, but it’s even more important in React 18 because of how the new streaming server renderer delivers HTML out-of-order.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estartTransition\u003c/code\u003e and \u003ccode\u003euseTransition\u003c/code\u003e let you mark some state updates as not urgent. Other state updates are considered urgent by default. React will allow urgent state updates (for example, updating a text input) to interrupt non-urgent state updates (for example, rendering a list of search results).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseDeferredValue\u003c/code\u003e lets you defer re-rendering a non-urgent part of the tree. It is similar to debouncing, but has a few advantages compared to it. There is no fixed time delay, so React will attempt the deferred render right after the first render is reflected on the screen. The deferred render is interruptible and doesn't block user input.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseSyncExternalStore\u003c/code\u003e is a new hook that allows external stores to support concurrent reads by forcing updates to the store to be synchronous. It removes the need for \u003ccode\u003euseEffect\u003c/code\u003e when implementing subscriptions to external data sources, and is recommended for any library that integrates with state external to React.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseInsertionEffect\u003c/code\u003e is a new hook that allows CSS-in-JS libraries to address performance issues of injecting styles in render. Unless you’ve already built a CSS-in-JS library we don’t expect you to ever use this. This hook will run after the DOM is mutated, but before layout effects read the new layout. This solves an issue that already exists in React 17 and below, but is even more important in React 18 because React yields to the browser during concurrent rendering, giving it a chance to recalculate layout.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReact DOM Client\u003c/h3\u003e\n\u003cp\u003eThese new APIs are now exported from \u003ccode\u003ereact-dom/client\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecreateRoot\u003c/code\u003e: New method to create a root to \u003ccode\u003erender\u003c/code\u003e or \u003ccode\u003eunmount\u003c/code\u003e. Use it instead of \u003ccode\u003eReactDOM.render\u003c/code\u003e. New features in React 18 don't work without it.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehydrateRoot\u003c/code\u003e: New method to hydrate a server rendered application. Use it instead of \u003ccode\u003eReactDOM.hydrate\u003c/code\u003e in conjunction with the new React DOM Server APIs. New features in React 18 don't work without it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth \u003ccode\u003ecreateRoot\u003c/code\u003e and \u003ccode\u003ehydrateRoot\u003c/code\u003e accept a new option called \u003ccode\u003eonRecoverableError\u003c/code\u003e in case you want to be notified when React recovers from errors during rendering or hydration for logging. By default, React will use \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/API/reportError\"\u003e\u003ccode\u003ereportError\u003c/code\u003e\u003c/a\u003e, or \u003ccode\u003econsole.error\u003c/code\u003e in the older browsers.\u003c/p\u003e\n\u003ch3\u003eReact DOM Server\u003c/h3\u003e\n\u003cp\u003eThese new APIs are now exported from \u003ccode\u003ereact-dom/server\u003c/code\u003e and have full support for streaming Suspense on the server:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003erenderToPipeableStream\u003c/code\u003e: for streaming in Node environments.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erenderToReadableStream\u003c/code\u003e: for modern edge runtime environments, such as Deno and Cloudflare workers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe existing \u003ccode\u003erenderToString\u003c/code\u003e method keeps working but is discouraged.\u003c/p\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.render\u003c/code\u003e has been deprecated. Using it will warn and run your app in React 17 mode.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.hydrate\u003c/code\u003e has been deprecated. Using it will warn and run your app in React 17 mode.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.unmountComponentAtNode\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.renderSubtreeIntoContainer\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom/server\u003c/code\u003e: \u003ccode\u003eReactDOMServer.renderToNodeStream\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAutomatic batching:\u003c/strong\u003e This release introduces a performance improvement that changes to the way React batches updates to do more batching automatically. See \u003ca href=\"https://github.com/reactwg/react-18/discussions/21\"\u003eAutomatic batching for fewer renders in React 18\u003c/a\u003e for more info. In the rare case that you need to opt out, wrap the state update in \u003ccode\u003eflushSync\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStricter Strict Mode\u003c/strong\u003e: In the future, React will provide a feature that lets components preserve state between unmounts. To prepare for it, React 18 introduces a new development-only check to Strict Mode. React will automatically unmount and remount every component, whenever a component mounts for the first time, restoring the previous state on the second mount. If this breaks your app, consider removing Strict Mode until you can fix the components to be resilient to remounting with existing state.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eConsistent useEffect timing\u003c/strong\u003e: React now always synchronously flushes effect functions if the update was triggered during a discrete user input event such as a click or a keydown event. Previously, the behavior wasn't always predictable or consistent.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStricter hydration errors\u003c/strong\u003e: Hydration mismatches due to missing or extra text content are now treated like errors instead of warnings. React will no longer attempt to \u0026quot;patch up\u0026quot; individual nodes by inserting or deleting a node on the client in an attempt to match the server markup, and will revert to client rendering up to the closest \u003ccode\u003e\u0026lt;Suspense\u0026gt;\u003c/code\u003e boundary in the tree. This ensures the hydrated tree is consistent and avoids potential privacy and security holes that can be caused by hydration mismatches.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSuspense trees are always consistent:\u003c/strong\u003e If a component suspends before it's fully added to the tree, React will not add it to the tree in an incomplete state or fire its effects. Instead, React will throw away the new tree completely, wait for the asynchronous operation to finish, and then retry rendering again from scratch. React will render the retry attempt concurrently, and without blocking the browser.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/react/react/commits/HEAD/packages/react-devtools-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/shazhou-ww/silvermoon/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/shazhou-ww%2Fsilvermoon/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"5639512030","node_id":"PR_kwDOU0E-Mc8AAAABFznMDw","number":65,"state":"open","title":"Bump commander from 14.0.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T01:38:52.000Z","updated_at":"2026-09-30T01:38:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"14.0.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=14.0.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Hewline-Ai/keycloak__keycloak-greptile__hew__PR1__20260930/pull/65","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hewline-Ai%2Fkeycloak__keycloak-greptile__hew__PR1__20260930/issues/65","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/65/packages"},{"uuid":"5587322846","node_id":"PR_kwDOUrxF-M8AAAABFKsGlg","number":3,"state":"open","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-25T19:09:00.000Z","updated_at":"2026-09-25T19:09:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/vetoo-benchmark/keycloak__keycloak__vetoo__PR37634__20260925/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vetoo-benchmark%2Fkeycloak__keycloak__vetoo__PR37634__20260925/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}],"issue_packages":[{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-17T10:14:13.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5897311912","node_id":"PR_kwDOUhE1P88AAAABJARYPA","number":84,"state":"closed","title":"build(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-10-17T18:13:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T10:14:13.000Z","updated_at":"2026-10-17T18:13:29.000Z","time_to_close":28746,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/ashlrai/lexicon/pull/84","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ashlrai%2Flexicon/issues/84","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/84/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-16T07:46:58.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5880383346","node_id":"PR_kwDOSSJsEs8AAAABIy4ANg","number":328,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T07:46:58.000Z","updated_at":"2026-10-16T07:59:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":20,"packages":[{"name":"@heycatch/sdk","old_version":"0.7.0","new_version":"0.8.3","repository_url":"https://github.com/White-Digital-Company/heycatch"},{"name":"@sentry/nextjs","old_version":"10.68.0","new_version":"11.7.0","repository_url":"https://github.com/getsentry/sentry-javascript"},{"name":"@simplewebauthn/browser","old_version":"13.3.0","new_version":"14.0.0","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"@simplewebauthn/server","old_version":"13.3.2","new_version":"14.0.3","repository_url":"https://github.com/MasterKale/SimpleWebAuthn"},{"name":"drizzle-orm","old_version":"0.45.2","new_version":"0.45.4","repository_url":"https://github.com/drizzle-team/drizzle-orm"},{"name":"jose","old_version":"6.2.3","new_version":"6.2.12","repository_url":"https://github.com/panva/jose"},{"name":"mongoose","old_version":"9.8.0","new_version":"9.11.2","repository_url":"https://github.com/Automattic/mongoose"},{"name":"next","old_version":"16.3.8","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"next-intl","old_version":"4.13.0","new_version":"4.14.9","repository_url":"https://github.com/amannn/next-intl"},{"name":"nodemailer","old_version":"10.0.12","new_version":"10.1.0","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"otpauth","old_version":"9.4.1","new_version":"9.5.2","repository_url":"https://github.com/hectorm/otpauth"},{"name":"react","old_version":"19.2.5","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"19.2.5","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"stripe","old_version":"22.1.1","new_version":"23.0.0","repository_url":"https://github.com/stripe/stripe-node"},{"name":"dotenv","old_version":"16.6.1","new_version":"18.0.7","repository_url":"https://github.com/motdotla/dotenv"},{"name":"twitter-api-v2","old_version":"1.29.0","new_version":"1.29.1","repository_url":"https://github.com/plhery/node-twitter-api-v2"},{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"@actions/core","old_version":"2.0.3","new_version":"3.0.1","repository_url":"https://github.com/actions/toolkit"},{"name":"smol-toml","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"yaml","old_version":"2.9.0","new_version":"2.9.1","repository_url":"https://github.com/eemeli/yaml"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 20 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@heycatch/sdk](https://github.com/White-Digital-Company/heycatch/tree/HEAD/packages/sdk) | `0.7.0` | `0.8.3` |\n| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `10.68.0` | `11.7.0` |\n| [@simplewebauthn/browser](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser) | `13.3.0` | `14.0.0` |\n| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.2` | `14.0.3` |\n| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |\n| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.12` |\n| [mongoose](https://github.com/Automattic/mongoose) | `9.8.0` | `9.11.2` |\n| [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.0` |\n| [next-intl](https://github.com/amannn/next-intl) | `4.13.0` | `4.14.9` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.12` | `10.1.0` |\n| [otpauth](https://github.com/hectorm/otpauth) | `9.4.1` | `9.5.2` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.5` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.3.0` |\n| [stripe](https://github.com/stripe/stripe-node) | `22.1.1` | `23.0.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `18.0.7` |\n| [twitter-api-v2](https://github.com/plhery/node-twitter-api-v2) | `1.29.0` | `1.29.1` |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.3` | `3.0.1` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.9.0` | `1.9.1` |\n| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |\n\n\nUpdates `@heycatch/sdk` from 0.7.0 to 0.8.3\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/White-Digital-Company/heycatch/commits/HEAD/packages/sdk\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@sentry/nextjs` from 10.68.0 to 11.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/releases\"\u003e@​sentry/nextjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e11.7.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(cloudflare): Add opt-in cron monitoring for Cron Triggers (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25014\"\u003e#25014\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003ecronTriggersIntegration\u003c/code\u003e sends check-ins for Cron Triggers. Each check-in includes the schedule from \u003ccode\u003econtroller.cron\u003c/code\u003e, so Sentry creates the monitor on the first run. The integration is opt-in, because monitors are billed.\u003c/p\u003e\n\u003cp\u003eCron Triggers have no names, so map each cron expression of your wrangler config to a monitor slug. With the Sentry Cloudflare Vite plugin, add the integration to \u003ccode\u003esrc/instrument.server.ts\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// src/monitorSlugs.ts\nexport const monitorSlugs: Record\u0026lt;string, string\u0026gt; = {\n  '30 9 * * MON-FRI': 'daily-report',\n};\n\u003cp\u003e// src/instrument.server.ts\nimport * as Sentry from '\u003ccode\u003e@​sentry/cloudflare\u003c/code\u003e';\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default Sentry.defineCloudflareOptions(env =\u0026gt; ({\ndsn: env.SENTRY_DSN,\nintegrations: [Sentry.cronTriggersIntegration({ monitorSlug: cron =\u0026gt; monitorSlugs[cron] })],\n}));\u003c/p\u003e\n\u003cp\u003e// src/index.ts\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default {\nasync scheduled(controller, env) {\nswitch (monitorSlugs[controller.cron]) {\ncase 'daily-report':\n// Your daily report job\nbreak;\n}\n},\n};\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003emonitorSlug\u003c/code\u003e function can also return monitor settings, for example \u003ccode\u003e{ monitorSlug: 'daily-report', maxRuntime: 30 }\u003c/code\u003e, or \u003ccode\u003eundefined\u003c/code\u003e to send no check-ins for a trigger. Without \u003ccode\u003emonitorSlug\u003c/code\u003e, the SDK derives the slug from the cron expression. If you deploy with \u003ccode\u003ewrangler\u003c/code\u003e directly, pass the same integration to \u003ccode\u003eSentry.withSentry\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Add neonIntegration for \u003ccode\u003e@​neondatabase/serverless\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25164\"\u003e#25164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25176\"\u003e#25176\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003eneonIntegration\u003c/code\u003e creates \u003ccode\u003edb\u003c/code\u003e spans for queries of the \u003ccode\u003e@neondatabase/serverless\u003c/code\u003e driver: for the WebSocket \u003ccode\u003eClient\u003c/code\u003e and \u003ccode\u003ePool\u003c/code\u003e, and for the HTTP \u003ccode\u003eneon()\u003c/code\u003e function. This includes the \u003ccode\u003eneon-http\u003c/code\u003e and \u003ccode\u003eneon-serverless\u003c/code\u003e adapters of Drizzle. The integration is on by default when tracing is enabled.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Stop sending the process session once request sessions are tracked (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/24915\"\u003e#24915\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eNode servers sent release health data two times: as request session aggregates, and as the process session of \u003ccode\u003eprocessSessionIntegration\u003c/code\u003e. An error in a request also marked the process session as errored, so the SDK counted the error two times. Now the SDK drops the process session when it tracks the first request session. Scripts, CLIs and workers that do not serve requests keep the process session, and so do servers with \u003ccode\u003ehttpServerIntegration({ sessions: false })\u003c/code\u003e. This changes the release health numbers of Node servers, because they no longer send the errored or crashed update of the process session.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(server-utils): Record decide calls as \u003ccode\u003egen_ai.decide\u003c/code\u003e spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25270\"\u003e#25270\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25272\"\u003e#25272\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25274\"\u003e#25274\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25281\"\u003e#25281\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md\"\u003e@​sentry/nextjs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e11.7.0\u003c/h2\u003e\n\u003ch3\u003eImportant Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(cloudflare): Add opt-in cron monitoring for Cron Triggers (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25014\"\u003e#25014\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003ecronTriggersIntegration\u003c/code\u003e sends check-ins for Cron Triggers. Each check-in includes the schedule from \u003ccode\u003econtroller.cron\u003c/code\u003e, so Sentry creates the monitor on the first run. The integration is opt-in, because monitors are billed.\u003c/p\u003e\n\u003cp\u003eCron Triggers have no names, so map each cron expression of your wrangler config to a monitor slug. With the Sentry Cloudflare Vite plugin, add the integration to \u003ccode\u003esrc/instrument.server.ts\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// src/monitorSlugs.ts\nexport const monitorSlugs: Record\u0026lt;string, string\u0026gt; = {\n  '30 9 * * MON-FRI': 'daily-report',\n};\n\u003cp\u003e// src/instrument.server.ts\nimport * as Sentry from '\u003ccode\u003e@​sentry/cloudflare\u003c/code\u003e';\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default Sentry.defineCloudflareOptions(env =\u0026gt; ({\ndsn: env.SENTRY_DSN,\nintegrations: [Sentry.cronTriggersIntegration({ monitorSlug: cron =\u0026gt; monitorSlugs[cron] })],\n}));\u003c/p\u003e\n\u003cp\u003e// src/index.ts\nimport { monitorSlugs } from './monitorSlugs';\u003c/p\u003e\n\u003cp\u003eexport default {\nasync scheduled(controller, env) {\nswitch (monitorSlugs[controller.cron]) {\ncase 'daily-report':\n// Your daily report job\nbreak;\n}\n},\n};\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003emonitorSlug\u003c/code\u003e function can also return monitor settings, for example \u003ccode\u003e{ monitorSlug: 'daily-report', maxRuntime: 30 }\u003c/code\u003e, or \u003ccode\u003eundefined\u003c/code\u003e to send no check-ins for a trigger. Without \u003ccode\u003emonitorSlug\u003c/code\u003e, the SDK derives the slug from the cron expression. If you deploy with \u003ccode\u003ewrangler\u003c/code\u003e directly, pass the same integration to \u003ccode\u003eSentry.withSentry\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Add neonIntegration for \u003ccode\u003e@​neondatabase/serverless\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25164\"\u003e#25164\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25176\"\u003e#25176\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003eneonIntegration\u003c/code\u003e creates \u003ccode\u003edb\u003c/code\u003e spans for queries of the \u003ccode\u003e@neondatabase/serverless\u003c/code\u003e driver: for the WebSocket \u003ccode\u003eClient\u003c/code\u003e and \u003ccode\u003ePool\u003c/code\u003e, and for the HTTP \u003ccode\u003eneon()\u003c/code\u003e function. This includes the \u003ccode\u003eneon-http\u003c/code\u003e and \u003ccode\u003eneon-serverless\u003c/code\u003e adapters of Drizzle. The integration is on by default when tracing is enabled.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(node): Stop sending the process session once request sessions are tracked (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/24915\"\u003e#24915\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eNode servers sent release health data two times: as request session aggregates, and as the process session of \u003ccode\u003eprocessSessionIntegration\u003c/code\u003e. An error in a request also marked the process session as errored, so the SDK counted the error two times. Now the SDK drops the process session when it tracks the first request session. Scripts, CLIs and workers that do not serve requests keep the process session, and so do servers with \u003ccode\u003ehttpServerIntegration({ sessions: false })\u003c/code\u003e. This changes the release health numbers of Node servers, because they no longer send the errored or crashed update of the process session.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003efeat(server-utils): Record decide calls as \u003ccode\u003egen_ai.decide\u003c/code\u003e spans (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25270\"\u003e#25270\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25272\"\u003e#25272\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25274\"\u003e#25274\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/pull/25281\"\u003e#25281\u003c/a\u003e)\u003c/strong\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/47dff7de2de5e24e18d7f43003e55dd497bd9a8d\"\u003e\u003ccode\u003e47dff7d\u003c/code\u003e\u003c/a\u003e release: 11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/72588e6b35e6d3b988ecb7fd2bffe4cafb5b1d48\"\u003e\u003ccode\u003e72588e6\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/25296\"\u003e#25296\u003c/a\u003e from getsentry/prepare-release/11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/323307a0ca407ac8cdae9ff3e2d3b2f60f4636d6\"\u003e\u003ccode\u003e323307a\u003c/code\u003e\u003c/a\u003e meta(changelog): Update changelog for 11.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/87bdc84665943aaabade21a1bdc1ba46a6b2d2e6\"\u003e\u003ccode\u003e87bdc84\u003c/code\u003e\u003c/a\u003e fix(bundler-plugins): Escape JSON in generated injection code (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/25265\"\u003e#25265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/b80300bd1c05538cda5ae39296a12499a1ac4af7\"\u003e\u003ccode\u003eb80300b\u003c/code\u003e\u003c/a\u003e fix(server-utils): Stop treating previous_response_id as the OpenAI conversat...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/236c0ceb2eb8ff362e664e810b0ae284bd632689\"\u003e\u003ccode\u003e236c0ce\u003c/code\u003e\u003c/a\u003e fix(browser): Apply \u003ccode\u003eurlQueryParams\u003c/code\u003e to breadcrumb and element timing URLs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/ee046613aa4eb59b456abd90718a340e9eb010ae\"\u003e\u003ccode\u003eee04661\u003c/code\u003e\u003c/a\u003e fix(browser): Apply \u003ccode\u003eurlQueryParams\u003c/code\u003e to event URLs, static span names and LCP...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/1e861780b1afd311d87461d1a93c0834ccbc62c4\"\u003e\u003ccode\u003e1e86178\u003c/code\u003e\u003c/a\u003e fix(nuxt): Keep \u003ccode\u003e@sentry/server-runtime-injection\u003c/code\u003e external on Nitro v3 (\u003ca href=\"https://redirect.github.com/getsentry/sentry-javascript/issues/24901\"\u003e#24901\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/8a6b9cae09670ff92ddc096a9190191ad6361f05\"\u003e\u003ccode\u003e8a6b9ca\u003c/code\u003e\u003c/a\u003e test(node-integration): Stop exporting \u003ccode\u003eNODE_VERSION\u003c/code\u003e and \u003ccode\u003eRUNTIME\u003c/code\u003e from the ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/getsentry/sentry-javascript/commit/9f7cbad3bb6129f446e3b1ecfa414395d8364b12\"\u003e\u003ccode\u003e9f7cbad\u003c/code\u003e\u003c/a\u003e feat(server-utils): Map Mastra classifier evaluations to gen_ai.decide spans ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/getsentry/sentry-javascript/compare/10.68.0...11.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/browser` from 13.3.0 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/browser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method as a single method to call all of the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x and higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on \u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno minor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public key algorithm during registration. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's \u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument that supports cross-origin authentication verification. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e, h/t \u003ca href=\"https://github.com/agektmr\"\u003e\u003ccode\u003e@​agektmr\u003c/code\u003e\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be used to capture MetadataService status output in a project-specific manner. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/765\"\u003e#765\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The typing of \u003ccode\u003etransports\u003c/code\u003e in \u003ccode\u003eexcludeCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e, and \u003ccode\u003eallowCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateAuthenticationOptions()\u003c/code\u003e, has been updated to \u003ccode\u003estring[]\u003c/code\u003e to make it easier to call these methods (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/776\"\u003e#776\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003e\u0026quot;tpm\u0026quot;\u003c/code\u003e attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/772\"\u003e#772\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e and \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e now use the same default list of allowed public key algorithms for \u003ccode\u003esupportedAlgorithmIDs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/791\"\u003e#791\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The \u003ccode\u003evalidateCertificatePath()\u003c/code\u003e helper now supports x5c arrays containing cross-signed certificates (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/796\"\u003e#796\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[browser] [server]\u003c/strong\u003e The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Updated MDS blob signature verification to support more algorithms (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/788\"\u003e#788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Updated \u003ccode\u003eMetadataService\u003c/code\u003e to know about the new FIDO MDS blob trust anchor certificate (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/789\"\u003e#789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v4 Low (2.0) security vulnerability identified in \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Fixed an issue with \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e allowing a maliciously-crafted attestation statement's \u003ccode\u003ex5c\u003c/code\u003e to contain a self-signed \u0026quot;root certificate\u0026quot; instead of chaining back to an RP-specified trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-6hxq-p678-4hr2\"\u003eGHSA-6hxq-p678-4hr2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/browser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys\nusing the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those\nsame supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44\npasskeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers\nstart coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for\nmore info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method\nas a single method to call all of the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x\nand higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim\nto support Node LTS releases through their Active and Maintenance windows as tracked on\n\u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno\nminor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as\npasskey public key algorithms when the runtime supports them. In runtimes that support these PQC\nalgorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public\nkey algorithm during registration. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e,\n\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn\nsupport detection by also checking for typical passkey-related WebAuthn features. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's\n\u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument\nthat supports cross-origin authentication verification. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be\nused to capture MetadataService status output in a project-specific manner. See\n\u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/3e2dc0c4505b1a381cf7f2da5495825f1f43661e\"\u003e\u003ccode\u003e3e2dc0c\u003c/code\u003e\u003c/a\u003e Update version to v14.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/618c0e9611f08d7f9f6d43ba5b100e21cb957fd4\"\u003e\u003ccode\u003e618c0e9\u003c/code\u003e\u003c/a\u003e Merge v14.0.0 milestone to master (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/browser/issues/792\"\u003e#792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.0/packages/browser\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@simplewebauthn/server` from 13.3.2 to 14.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/releases\"\u003e@​simplewebauthn/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings from when the Node process starts to when a method is called that checks for PQC support (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v3 Moderate (5.4) security vulnerability identified in \u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e. See the security advisory linked below for more information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Revamped certificate revocation logic to only cryptographically verify and process CRLs from certificates that chained back to an RP-chosen trust anchor (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-2g3p-m8c9-hhwh\"\u003eGHSA-2g3p-m8c9-hhwh\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Attestation statements using PQC algorithms can now be verified (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44 passkeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers start coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method as a single method to call all of the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x and higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim to support Node LTS releases through their Active and Maintenance windows as tracked on \u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno minor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The PQC ML-DSA-44, ML-DSA-65, and ML-DSA-87 signature algorithms are now supported as passkey public key algorithms when the runtime supports them. In runtimes that support these PQC algorithms, \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e will include ML-DSA-44 as the most preferred public key algorithm during registration. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/785\"\u003e#785\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/794\"\u003e#794\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003esendSignal()\u003c/code\u003e method offers a simple way to invoke the \u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/778\"\u003e#778\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003ebrowserSupportsPasskeys()\u003c/code\u003e helper method performs more robust WebAuthn support detection by also checking for typical passkey-related WebAuthn features. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#browsersupportspasskeys\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[browser]\u003c/strong\u003e The new \u003ccode\u003egetBrowserCapabilities()\u003c/code\u003e helper method wraps WebAuthn's \u003ccode\u003egetClientCapabilities()\u003c/code\u003e with additional feature detection checks when possible. See \u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#getbrowsercapabilities\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/761\"\u003e#761\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003everifyAuthenticationResponse()\u003c/code\u003e accepts an optional new \u003ccode\u003eexpectedTopOrigin\u003c/code\u003e argument that supports cross-origin authentication verification. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/cross-origin-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/cross-origin-support\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/773\"\u003e#773\u003c/a\u003e, h/t \u003ca href=\"https://github.com/agektmr\"\u003e\u003ccode\u003e@​agektmr\u003c/code\u003e\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003eMetadataService.initialize()\u003c/code\u003e accepts an optional new \u003ccode\u003elogger\u003c/code\u003e argument that can be used to capture MetadataService status output in a project-specific manner. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/metadata-service#logging\u003c/a\u003e for more info (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/765\"\u003e#765\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The typing of \u003ccode\u003etransports\u003c/code\u003e in \u003ccode\u003eexcludeCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e, and \u003ccode\u003eallowCredentials\u003c/code\u003e when calling \u003ccode\u003egenerateAuthenticationOptions()\u003c/code\u003e, has been updated to \u003ccode\u003estring[]\u003c/code\u003e to make it easier to call these methods (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/776\"\u003e#776\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003e\u0026quot;tpm\u0026quot;\u003c/code\u003e attestation verification is now more tolerant of variable casing in the TPM manufacturer IDs (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/772\"\u003e#772\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e \u003ccode\u003egenerateRegistrationOptions()\u003c/code\u003e and \u003ccode\u003everifyRegistrationResponse()\u003c/code\u003e now use the same default list of allowed public key algorithms for \u003ccode\u003esupportedAlgorithmIDs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/791\"\u003e#791\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e[server]\u003c/strong\u003e The \u003ccode\u003evalidateCertificatePath()\u003c/code\u003e helper now supports x5c arrays containing cross-signed certificates (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/796\"\u003e#796\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[browser] [server]\u003c/strong\u003e The minimum supported runtime versions have been increased to Node LTS 22.x and higher, and Deno v2.4.x and higher (\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/763\"\u003e#763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md\"\u003e@​simplewebauthn/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.3\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings\nfrom when the Node process starts to when a method is called that checks for PQC support\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.2\u003c/h2\u003e\n\u003cp\u003eThis update fixes a CVSS v3 Moderate (5.4 / 10) and a CVSS v3 Moderate (6.3 / 10) security\nvulnerabilities identified in \u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e. See the security advisory linked below for\nmore information.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Revamped certificate revocation logic to only cryptographically verify and process\nCRLs from certificates that chained back to an RP-chosen trust anchor\n(\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-2g3p-m8c9-hhwh\"\u003eGHSA-2g3p-m8c9-hhwh\u003c/a\u003e,\n\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-j3h4-m3m2-7p7j\"\u003eGHSA-j3h4-m3m2-7p7j\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eChanges:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[server]\u003c/strong\u003e Attestation statements using PQC algorithms can now be verified\n(\u003ca href=\"https://redirect.github.com/MasterKale/SimpleWebAuthn/pull/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev14.0.0 - The one after they go quantum\u003c/h2\u003e\n\u003cp\u003eThe headlining feature of this release is \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/server\u003c/code\u003e\u003c/strong\u003e gaining support for passkeys\nusing the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those\nsame supported runtimes, SimpleWebAuthn will automatically encourage registration of ML-DSA-44\npasskeys to future-proof Relying Parties as PQC-capable FIDO2 authenticators and credential managers\nstart coming to market. See \u003ca href=\"https://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\"\u003ehttps://simplewebauthn.dev/docs/advanced/server/pqc-ml-dsa-support\u003c/a\u003e for\nmore info 🚀\u003c/p\u003e\n\u003cp\u003eSetting our sites on the browser, \u003cstrong\u003e\u003ccode\u003e@​simplewebauthn/browser\u003c/code\u003e\u003c/strong\u003e picks up a new \u003ccode\u003esendSignal()\u003c/code\u003e method\nas a single method to call all of the\n\u003ca href=\"https://w3c.github.io/webauthn/#sctn-signal-methods\"\u003eWebAuthn Signal APIs\u003c/a\u003e. See\n\u003ca href=\"https://simplewebauthn.dev/docs/packages/browser#sendsignal\"\u003ehttps://simplewebauthn.dev/docs/packages/browser#sendsignal\u003c/a\u003e for more info 🛜\u003c/p\u003e\n\u003cp\u003eAs for breaking changes, the minimum supported version of Node has been raised to \u003cstrong\u003eNode LTS 22.x\nand higher\u003c/strong\u003e, and \u003cstrong\u003eDeno v2.4.x and higher\u003c/strong\u003e. Going forward, SimpleWebAuthn will more formally aim\nto support Node LTS releases through their Active and Maintenance windows as tracked on\n\u003ca href=\"https://nodejs.org/en/about/previous-releases\"\u003ethe Node.js Releases page\u003c/a\u003e, and aim to support Deno\nminor releases for up to one year after their release\u003c/p\u003e\n\u003cp\u003eThat's not all, though. Continue reading for the full list of changes in this release! 🎉\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/084e601404f02429b61d3f0d027068b697566ba9\"\u003e\u003ccode\u003e084e601\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/cd402cce117ff8df1ac4c96ca719031ad114138a\"\u003e\u003ccode\u003ecd402cc\u003c/code\u003e\u003c/a\u003e Lazily evaluate PQC support to prevent Node warnings on startup (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/7e3c4c4ff7b3465de4e614274a3285e4f06d36fc\"\u003e\u003ccode\u003e7e3c4c4\u003c/code\u003e\u003c/a\u003e Kinda makes more sense to do the AKI check first\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/21f99a28d5331735844235044af5783d4353c1d5\"\u003e\u003ccode\u003e21f99a2\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/f03758a427845dff1a66a573f6b5e2efa291ec5e\"\u003e\u003ccode\u003ef03758a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/0bfdc3bcb58e2662bf5e9017242a57523424b025\"\u003e\u003ccode\u003e0bfdc3b\u003c/code\u003e\u003c/a\u003e Update server version to v14.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/4831ce29093ecb7e5ddbdaa786f2cf5c846475de\"\u003e\u003ccode\u003e4831ce2\u003c/code\u003e\u003c/a\u003e Fix X.509 parsing to support PQC use in attestation statements (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/800\"\u003e#800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/3e2dc0c4505b1a381cf7f2da5495825f1f43661e\"\u003e\u003ccode\u003e3e2dc0c\u003c/code\u003e\u003c/a\u003e Update version to v14.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/618c0e9611f08d7f9f6d43ba5b100e21cb957fd4\"\u003e\u003ccode\u003e618c0e9\u003c/code\u003e\u003c/a\u003e Merge v14.0.0 milestone to master (\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server/issues/792\"\u003e#792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commit/4b189bdfd6ffd5e3d30023b2d3e9970d81c89ce9\"\u003e\u003ccode\u003e4b189bd\u003c/code\u003e\u003c/a\u003e Update server version to 13.3.3\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.3/packages/server\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `drizzle-orm` from 0.45.2 to 0.45.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/drizzle-team/drizzle-orm/releases\"\u003edrizzle-orm's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.45.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostgres-js\u003c/code\u003e not using prepared queries on explicit \u003ccode\u003e.prepare(name)\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.45.3\u003c/h2\u003e\n\u003ch2\u003eNew Netlify DB Driver\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eNote: The Netlify DB driver is developed and maintained by the Netlify team.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e\u003cstrong\u003eInstallation:\u003c/strong\u003e\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003enpm i @netlify/db\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eUsage example:\u003c/strong\u003e\u003c/p\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\u003cp\u003e// reads NETLIFY_DB_URL and NETLIFY_DB_DRIVER env vars\nconst db = drizzle();\u003c/p\u003e\n\u003cp\u003econst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\nconst db = drizzle(process.env.DATABASE_URL);\n\nconst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003eimport { drizzle } from 'drizzle-orm/netlify-db';\n\n// Explicit client — consumer controls the driver\nconst db = drizzle({ client: netlifyDbClient });\n\nconst result = await db.execute('select 1');\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/eab8bedbb65d5429c54e612ddbd88aa23091d398\"\u003e\u003ccode\u003eeab8bed\u003c/code\u003e\u003c/a\u003e Fixed \u003ccode\u003epostgres-js\u003c/code\u003e not using prepared queries on explicit \u003ccode\u003e.prepare(name)\u003c/code\u003e (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/15454dbe49d827c6081f3d0231e2e7985e517295\"\u003e\u003ccode\u003e15454db\u003c/code\u003e\u003c/a\u003e +\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/54e436feea82c856d5644152cc9d186e237e2e95\"\u003e\u003ccode\u003e54e436f\u003c/code\u003e\u003c/a\u003e exclude gel from pull\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/0fd1cc61f1ff6553234d29042461fc5e9aa551c3\"\u003e\u003ccode\u003e0fd1cc6\u003c/code\u003e\u003c/a\u003e remove gel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/d028db74f20cbf3740bcaaf136beb9eb27f0928c\"\u003e\u003ccode\u003ed028db7\u003c/code\u003e\u003c/a\u003e skip gel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/93dc01e355724e666b656377cb07cf9613153787\"\u003e\u003ccode\u003e93dc01e\u003c/code\u003e\u003c/a\u003e [All-kit]: Warn when journal timestamps can cause migrations to be skipped (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/b7862528fd8fc39bc2653a6c18dad7c1f4e68d10\"\u003e\u003ccode\u003eb786252\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/drizzle-team/drizzle-orm/issues/6049\"\u003e#6049\u003c/a\u003e from drizzle-team/drizzle-kit-announcements\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/f9fc5bf30bc14e84f2416349acbd6c04001a497e\"\u003e\u003ccode\u003ef9fc5bf\u003c/code\u003e\u003c/a\u003e Add drizzle-kit announcement manifest and schema doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/9d6453215d18705986c2081124437bb6a03fb943\"\u003e\u003ccode\u003e9d64532\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/drizzle-team/drizzle-orm/issues/6004\"\u003e#6004\u003c/a\u003e from drizzle-team/pin-npm-11-main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/drizzle-team/drizzle-orm/commit/0af2f2ea5b75f0831a36874e23df9c294c49e26e\"\u003e\u003ccode\u003e0af2f2e\u003c/code\u003e\u003c/a\u003e Pin the release npm self-update to major 11: the npm 12.0.0 tarball is missin...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/drizzle-team/drizzle-orm/compare/0.45.2...0.45.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jose` from 6.2.3 to 6.2.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/panva/jose/releases\"\u003ejose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.2.12\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclarify and shorten public API guidance (\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003ebe62530\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify JWS and JWE operation cores (\u003ca href=\"https://github.com/panva/jose/commit/92e9640290085dd37c152aeb7c4d5b22e9df96ab\"\u003e92e9640\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid copying AES-GCM output (\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e6925d43\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ededuplicate pending jwks key imports (\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003ebf5138b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eencode single-signature JWS input once (\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e7bc9a33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize General JWE shared headers once (\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e78637bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize jwks selection metadata once (\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003efd3ae3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse native encoding for larger ASCII strings (\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003eb23a6f3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.2.11\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erender subpath indexes as tables (\u003ca href=\"https://github.com/panva/jose/commit/94589ee9efe6cf257a133765d753bbe8d55f6ed3\"\u003e94589ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eshorten API index descriptions (\u003ca href=\"https://github.com/panva/jose/commit/681482fcca7577c6a4b8df61c992f195f6e6ac1b\"\u003e681482f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emodel JWE key management modes (\u003ca href=\"https://github.com/panva/jose/commit/e01dda65d5d272c8dd44710d0c70673c1530038e\"\u003ee01dda6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e reduce declaration repetition (\u003ca href=\"https://github.com/panva/jose/commit/55b970fc08c9082041f40473470ee0fe0e8b0087\"\u003e55b970f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.2.10\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e consume serialization members once (\u003ca href=\"https://github.com/panva/jose/commit/9bee285a6bc356b495c29ae0a5e70b24e723568e\"\u003e9bee285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e reject empty protected and JWE AAD members (\u003ca href=\"https://github.com/panva/jose/commit/8da41453dce79967c6e3f47a787039a7f94de8fe\"\u003e8da4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e validate serialized header values (\u003ca href=\"https://github.com/panva/jose/commit/b711d8fe223e3e85520d6c822d7a417cd872b718\"\u003eb711d8f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e conceal invalid decrypted CEK lengths (\u003ca href=\"https://github.com/panva/jose/commit/41fafe035a62d85f4b313e166100004dd09b111f\"\u003e41fafe0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e enforce AES-GCM tag boundaries (\u003ca href=\"https://github.com/panva/jose/commit/9a5b74454bf145a106312d519efe95b8a9b53a87\"\u003e9a5b744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e validate explicit encryption parameters (\u003ca href=\"https://github.com/panva/jose/commit/7a02697126e40757ed9e02ae786ec9a2b180aa5c\"\u003e7a02697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e accept empty octet-sequence keys (\u003ca href=\"https://github.com/panva/jose/commit/3f871e7859c1ce51d1afcbfeff92c354b8e96dd9\"\u003e3f871e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e normalize key resolution inputs (\u003ca href=\"https://github.com/panva/jose/commit/f54ee7bad8e21c975606bc5e47b352921ac0d890\"\u003ef54ee7b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e enforce verification key metadata (\u003ca href=\"https://github.com/panva/jose/commit/f9ba5101383154147780da7acf1aabc705f75aaf\"\u003ef9ba510\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e order overlapping remote reloads (\u003ca href=\"https://github.com/panva/jose/commit/9a1a913983aa44d065a423692a92148b2a6a36c3\"\u003e9a1a913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e reject invalid remote duration values (\u003ca href=\"https://github.com/panva/jose/commit/7bdb9e56e6a74b833af582532c6fff5bc727ec1c\"\u003e7bdb9e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e validate ext and key_ops parameters (\u003ca href=\"https://github.com/panva/jose/commit/4d91c37fdd36241785cb172774fa017bb8854458\"\u003e4d91c37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e reject mixed payload encoding modes (\u003ca href=\"https://github.com/panva/jose/commit/dc69713081a55a3d6955dd1d8c2cf184905febad\"\u003edc69713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e validate unencoded payload strings (\u003ca href=\"https://github.com/panva/jose/commit/541f28234442c5cbfc5f843a95ccd18a721f3697\"\u003e541f282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e enforce explicit verification policies (\u003ca href=\"https://github.com/panva/jose/commit/b3471826b02589656eaf71843671922644cc60e2\"\u003eb347182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e prevent replacing protected headers (\u003ca href=\"https://github.com/panva/jose/commit/ae07d09bcbac91825e27cde9989b603af3495263\"\u003eae07d09\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e reject invalid duration inputs (\u003ca href=\"https://github.com/panva/jose/commit/282f9aaa496e57f55417bca15e13c369b3f242fb\"\u003e282f9aa\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e validate builder claim values (\u003ca href=\"https://github.com/panva/jose/commit/ea03f83d607fcaee6fc0778c8a4d40a2bbd75c9e\"\u003eea03f83\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/panva/jose/blob/main/CHANGELOG.md\"\u003ejose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.11...v6.2.12\"\u003e6.2.12\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclarify and shorten public API guidance (\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003ebe62530\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify JWS and JWE operation cores (\u003ca href=\"https://github.com/panva/jose/commit/92e9640290085dd37c152aeb7c4d5b22e9df96ab\"\u003e92e9640\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid copying AES-GCM output (\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e6925d43\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ededuplicate pending jwks key imports (\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003ebf5138b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eencode single-signature JWS input once (\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e7bc9a33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize General JWE shared headers once (\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e78637bd\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enormalize jwks selection metadata once (\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003efd3ae3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003euse native encoding for larger ASCII strings (\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003eb23a6f3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.10...v6.2.11\"\u003e6.2.11\u003c/a\u003e (2026-09-04)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erender subpath indexes as tables (\u003ca href=\"https://github.com/panva/jose/commit/94589ee9efe6cf257a133765d753bbe8d55f6ed3\"\u003e94589ee\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eshorten API index descriptions (\u003ca href=\"https://github.com/panva/jose/commit/681482fcca7577c6a4b8df61c992f195f6e6ac1b\"\u003e681482f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eRefactor\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emodel JWE key management modes (\u003ca href=\"https://github.com/panva/jose/commit/e01dda65d5d272c8dd44710d0c70673c1530038e\"\u003ee01dda6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e reduce declaration repetition (\u003ca href=\"https://github.com/panva/jose/commit/55b970fc08c9082041f40473470ee0fe0e8b0087\"\u003e55b970f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/panva/jose/compare/v6.2.9...v6.2.10\"\u003e6.2.10\u003c/a\u003e (2026-08-21)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e consume serialization members once (\u003ca href=\"https://github.com/panva/jose/commit/9bee285a6bc356b495c29ae0a5e70b24e723568e\"\u003e9bee285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e reject empty protected and JWE AAD members (\u003ca href=\"https://github.com/panva/jose/commit/8da41453dce79967c6e3f47a787039a7f94de8fe\"\u003e8da4145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejose:\u003c/strong\u003e validate serialized header values (\u003ca href=\"https://github.com/panva/jose/commit/b711d8fe223e3e85520d6c822d7a417cd872b718\"\u003eb711d8f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e conceal invalid decrypted CEK lengths (\u003ca href=\"https://github.com/panva/jose/commit/41fafe035a62d85f4b313e166100004dd09b111f\"\u003e41fafe0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e enforce AES-GCM tag boundaries (\u003ca href=\"https://github.com/panva/jose/commit/9a5b74454bf145a106312d519efe95b8a9b53a87\"\u003e9a5b744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwe:\u003c/strong\u003e validate explicit encryption parameters (\u003ca href=\"https://github.com/panva/jose/commit/7a02697126e40757ed9e02ae786ec9a2b180aa5c\"\u003e7a02697\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e accept empty octet-sequence keys (\u003ca href=\"https://github.com/panva/jose/commit/3f871e7859c1ce51d1afcbfeff92c354b8e96dd9\"\u003e3f871e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e normalize key resolution inputs (\u003ca href=\"https://github.com/panva/jose/commit/f54ee7bad8e21c975606bc5e47b352921ac0d890\"\u003ef54ee7b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e enforce verification key metadata (\u003ca href=\"https://github.com/panva/jose/commit/f9ba5101383154147780da7acf1aabc705f75aaf\"\u003ef9ba510\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e order overlapping remote reloads (\u003ca href=\"https://github.com/panva/jose/commit/9a1a913983aa44d065a423692a92148b2a6a36c3\"\u003e9a1a913\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwks:\u003c/strong\u003e reject invalid remote duration values (\u003ca href=\"https://github.com/panva/jose/commit/7bdb9e56e6a74b833af582532c6fff5bc727ec1c\"\u003e7bdb9e5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwk:\u003c/strong\u003e validate ext and key_ops parameters (\u003ca href=\"https://github.com/panva/jose/commit/4d91c37fdd36241785cb172774fa017bb8854458\"\u003e4d91c37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e reject mixed payload encoding modes (\u003ca href=\"https://github.com/panva/jose/commit/dc69713081a55a3d6955dd1d8c2cf184905febad\"\u003edc69713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejws:\u003c/strong\u003e validate unencoded payload strings (\u003ca href=\"https://github.com/panva/jose/commit/541f28234442c5cbfc5f843a95ccd18a721f3697\"\u003e541f282\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejwt:\u003c/strong\u003e enforce explicit verification policies (\u003ca href=\"https://github.com/panva/jose/commit/b3471826b02589656eaf71843671922644cc60e2\"\u003eb347182\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/505a55b8f73536082367b2614cb77e927ba96ec1\"\u003e\u003ccode\u003e505a55b\u003c/code\u003e\u003c/a\u003e chore(release): 6.2.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c\"\u003e\u003ccode\u003e7bc9a33\u003c/code\u003e\u003c/a\u003e perf: encode single-signature JWS input once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35\"\u003e\u003ccode\u003e78637bd\u003c/code\u003e\u003c/a\u003e perf: normalize General JWE shared headers once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6\"\u003e\u003ccode\u003ebf5138b\u003c/code\u003e\u003c/a\u003e perf: deduplicate pending jwks key imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc\"\u003e\u003ccode\u003eb23a6f3\u003c/code\u003e\u003c/a\u003e perf: use native encoding for larger ASCII strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd\"\u003e\u003ccode\u003efd3ae3f\u003c/code\u003e\u003c/a\u003e perf: normalize jwks selection metadata once\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef\"\u003e\u003ccode\u003e6925d43\u003c/code\u003e\u003c/a\u003e perf: avoid copying AES-GCM output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9\"\u003e\u003ccode\u003ebe62530\u003c/code\u003e\u003c/a\u003e docs: clarify and shorten public API guidance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/1b413121c71eed953852ac82a288f8a6b37f1343\"\u003e\u003ccode\u003e1b41312\u003c/code\u003e\u003c/a\u003e build: preserve README when generation fails\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/panva/jose/commit/0b518296d441aa95e45268eee178b3ad22a78d49\"\u003e\u003ccode\u003e0b51829\u003c/code\u003e\u003c/a\u003e build: check tree-shaking for every public binding\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/panva/jose/compare/v6.2.3...v6.2.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mongoose` from 9.8.0 to 9.11.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/releases\"\u003emongoose's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.11.2 / 2026-10-12\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf: avoid applying saveSubdocs and sharding plugins to subdocuments \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16585\"\u003e#16585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: upgrade to kareem@3.4.1 for \u003ca href=\"https://redirect.github.com/mongoosejs/kareem/issues/47\"\u003emongoosejs/kareem#47\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16588\"\u003e#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): cast array filter values in bulkWrite() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16574\"\u003e#16574\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16573\"\u003e#16573\u003c/a\u003e \u003ca href=\"https://github.com/OmBhandwaldar\"\u003eOmBhandwaldar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): allow function messages for number min/max and string minlength \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16579\"\u003e#16579\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16572\"\u003e#16572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/8512\"\u003e#8512\u003c/a\u003e \u003ca href=\"https://github.com/NotAFlightRisk\"\u003eNotAFlightRisk\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: make MergeType more efficiently handle MergeType\u0026lt;A, {}\u0026gt; \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16581\"\u003e#16581\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16580\"\u003e#16580\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix broken API anchors and a malformed link \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16583\"\u003e#16583\u003c/a\u003e \u003ca href=\"https://github.com/SatvikMishra08\"\u003eSatvikMishra08\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.11.1 / 2026-10-07\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(document): call recursive toObject() when setting a path to a nested object \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16571\"\u003e#16571\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(update): keep casting array filters after a path not in the schema \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16558\"\u003e#16558\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(document): apply flattenDecimals when toObject() takes the shallow fast path \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16569\"\u003e#16569\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16568\"\u003e#16568\u003c/a\u003e \u003ca href=\"https://github.com/jeremyml\"\u003ejeremyml\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): cast operators under $not inside $elemMatch on primitive arrays \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16542\"\u003e#16542\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/13880\"\u003e#13880\u003c/a\u003e \u003ca href=\"https://github.com/breken-ai\"\u003ebreken-ai\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): use embedded discriminator schema when filter selects the key with $eq or $in \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16543\"\u003e#16543\u003c/a\u003e \u003ca href=\"https://github.com/breken-ai\"\u003ebreken-ai\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(documentarray): don't pass arrayPathIndex to subdocuments when initializing nested document arrays \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16546\"\u003e#16546\u003c/a\u003e \u003ca href=\"https://github.com/Mohamed-Elshesheny\"\u003eMohamed-Elshesheny\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): await driver cleanup when destroying query cursors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16562\"\u003e#16562\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16560\"\u003e#16560\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(cursor): reject getDriverCursor after initialization errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16563\"\u003e#16563\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16561\"\u003e#16561\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes(schema): treat Int32 paths as number \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16565\"\u003e#16565\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16564\"\u003e#16564\u003c/a\u003e \u003ca href=\"https://github.com/lazerg\"\u003elazerg\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes(models): align UpdateOneModel and UpdateManyModel update typing with UpdateQuery \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16559\"\u003e#16559\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16545\"\u003e#16545\u003c/a\u003e \u003ca href=\"https://github.com/aipd506\"\u003eaipd506\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.11.0 / 2026-10-05\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efeat: use MongoDB Node.js driver 7.7.x \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16550\"\u003e#16550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(query): add Query.prototype.findAndCount() for composable paginated queries \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16508\"\u003e#16508\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16504\"\u003e#16504\u003c/a\u003e \u003ca href=\"https://github.com/lokeshllkumar\"\u003elokeshllkumar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid double-calling validators on document arrays underneath nested paths \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16484\"\u003e#16484\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16291\"\u003e#16291\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/5411\"\u003e#5411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etypes: pass TLeanResultType into query for type narrowing support with lean() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16523\"\u003e#16523\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16519\"\u003e#16519\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(guide): use async/await instead of removed callbacks \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16566\"\u003e#16566\u003c/a\u003e \u003ca href=\"https://github.com/joi-agent\"\u003ejoi-agent\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run TypeScript tests on typescript 5+7 with combinations of exactOptionalPropertyTypes, skipLibCheck, strict \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16510\"\u003e#16510\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16506\"\u003e#16506\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.4 / 2026-10-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16557\"\u003e#16557\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(populate): resolve dotted parent path when collecting deferred sub-populate children \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16538\"\u003e#16538\u003c/a\u003e \u003ca href=\"https://github.com/jfits\"\u003ejfits\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(array): compare dates by value in indexOf() so pull() removes them \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16535\"\u003e#16535\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(map): register $set when Map#set() replaces an array \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16540\"\u003e#16540\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16539\"\u003e#16539\u003c/a\u003e \u003ca href=\"https://github.com/luantaraschi\"\u003eluantaraschi\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query): cast case and then expressions in $expr $switch branches \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16534\"\u003e#16534\u003c/a\u003e \u003ca href=\"https://github.com/kwy404\"\u003ekwy404\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(guide): fix read preference tag set example \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16541\"\u003e#16541\u003c/a\u003e \u003ca href=\"https://github.com/NotAFlightRisk\"\u003eNotAFlightRisk\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.3 / 2026-09-29\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003efix(model): preserve unsaved documents after ordered bulkSave errors \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16533\"\u003e#16533\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16532\"\u003e#16532\u003c/a\u003e \u003ca href=\"https://github.com/IbrahimHafez1\"\u003eIbrahimHafez1\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): don't mutate the caller's update object in bulkWrite updateMany \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16526\"\u003e#16526\u003c/a\u003e \u003ca href=\"https://github.com/fadiroot\"\u003efadiroot\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): run setters declared on the union path itself \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16528\"\u003e#16528\u003c/a\u003e \u003ca href=\"https://github.com/giaBaoJS\"\u003egiaBaoJS\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(collection): open collection if connection was already opened \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16527\"\u003e#16527\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16525\"\u003e#16525\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16524\"\u003e#16524\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16529\"\u003e#16529\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16502\"\u003e#16502\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16480\"\u003e#16480\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e9.10.2 / 2026-09-22\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md\"\u003emongoose's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e9.11.2 / 2026-10-12\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eperf: avoid applying saveSubdocs and sharding plugins to subdocuments \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16585\"\u003e#16585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: upgrade to kareem@3.4.1 for \u003ca href=\"https://redirect.github.com/mongoosejs/kareem/issues/47\"\u003emongoosejs/kareem#47\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16588\"\u003e#16588\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(model): cast array filter values in bulkWrite() \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16574\"\u003e#16574\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16573\"\u003e#16573\u003c/a\u003e \u003ca href=\"https://github.com/OmBhandwaldar\"\u003eOmBhandwaldar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(schema): allow function messages for number min/max and string minlength \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16579\"\u003e#16579\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/16572\"\u003e#16572\u003c/a\u003e \u003ca href=\"https://redirect.github.com/Automattic/mongoose/issues/8512\"\u003e#8512\u003c/a\u003e \u003ca...\n\n_Description has been truncated_","html_url":"https://github.com/BehalfID/behalf/pull/328","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/BehalfID%2Fbehalf/issues/328","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/328/packages"}},{"old_version":"12.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-15T00:11:23.000Z","version_change":"12.1.0 → 15.0.0","issue":{"uuid":"5857735067","node_id":"PR_kwDOVBIbmM8AAAABIg0_oA","number":32,"state":"open","title":"chore(deps): bump the npm-production group across 1 directory with 9 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-15T00:11:23.000Z","updated_at":"2026-10-15T00:12:07.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-production","update_count":9,"packages":[{"name":"@stellar/stellar-sdk","old_version":"13.3.0","new_version":"17.2.1","repository_url":"https://github.com/stellar/js-stellar-sdk"},{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"smol-toml","old_version":"1.9.0","new_version":"1.9.1","repository_url":"https://github.com/squirrelchat/smol-toml"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.6","repository_url":"https://github.com/colinhacks/zod"},{"name":"next","old_version":"14.2.35","new_version":"16.4.0","repository_url":"https://github.com/vercel/next.js"},{"name":"react","old_version":"18.3.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"react-dom","old_version":"18.3.1","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"lucide-react","old_version":"0.330.0","new_version":"1.55.0","repository_url":"https://github.com/lucide-icons/lucide"},{"name":"better-sqlite3","old_version":"12.4.1","new_version":"13.0.3","repository_url":"https://github.com/WiseLibs/better-sqlite3"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-production group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `13.3.0` | `17.2.1` |\n| [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` |\n| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.9.0` | `1.9.1` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.6` |\n| [next](https://github.com/vercel/next.js) | `14.2.35` | `16.4.0` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.0` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.0` |\n| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.330.0` | `1.55.0` |\n| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.4.1` | `13.0.3` |\n\n\nUpdates `@stellar/stellar-sdk` from 13.3.0 to 17.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/releases\"\u003e@​stellar/stellar-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/devtechedge\"\u003e\u003ccode\u003e@​devtechedge\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1725\"\u003estellar/js-stellar-sdk#1725\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leocagli\"\u003e\u003ccode\u003e@​leocagli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003estellar/js-stellar-sdk#1679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yigitcangokmen\"\u003e\u003ccode\u003e@​yigitcangokmen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1670\"\u003estellar/js-stellar-sdk#1670\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md\"\u003e@​stellar/stellar-sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.0...v17.0.1\"\u003ev17.0.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEvery v16 XDR-acronym method spelling works again as a deprecated alias of its v17 name, easing migration. \u003ccode\u003etoXDR()\u003c/code\u003e / \u003ccode\u003efromXDR()\u003c/code\u003e come back on \u003ccode\u003exdr.*\u003c/code\u003e values (plus the static \u003ccode\u003evalidateXDR()\u003c/code\u003e) and on \u003ccode\u003eTransaction\u003c/code\u003e / \u003ccode\u003eFeeBumpTransaction\u003c/code\u003e, \u003ccode\u003eTransactionBuilder\u003c/code\u003e, \u003ccode\u003econtract.AssembledTransaction\u003c/code\u003e, \u003ccode\u003eClaimant\u003c/code\u003e, and \u003ccode\u003eSorobanDataBuilder\u003c/code\u003e; \u003ccode\u003etoXDRObject()\u003c/code\u003e / \u003ccode\u003efromXDRObject()\u003c/code\u003e come back on \u003ccode\u003eAsset\u003c/code\u003e (including \u003ccode\u003etoChangeTrustXDRObject()\u003c/code\u003e / \u003ccode\u003etoTrustLineXDRObject()\u003c/code\u003e), \u003ccode\u003eMemo\u003c/code\u003e, \u003ccode\u003eOperation\u003c/code\u003e, \u003ccode\u003eClaimant\u003c/code\u003e, \u003ccode\u003eMuxedAccount\u003c/code\u003e, \u003ccode\u003eLiquidityPoolAsset\u003c/code\u003e, and \u003ccode\u003eLiquidityPoolId\u003c/code\u003e. The aliases delegate to the v17 methods and keep their semantics: on \u003ccode\u003exdr.*\u003c/code\u003e values, \u003ccode\u003etoXDR()\u003c/code\u003e returns a \u003ccode\u003eUint8Array\u003c/code\u003e (not a \u003ccode\u003eBuffer\u003c/code\u003e) and \u003ccode\u003efromXDR()\u003c/code\u003e requires a format for string input; the wrapper-class aliases behave as they did in v16. \u003ccode\u003etoXdrObject()\u003c/code\u003e / \u003ccode\u003efromXdrObject()\u003c/code\u003e on \u003ccode\u003exdr.*\u003c/code\u003e values are net-new methods with no legacy spelling, so they get no alias (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1690\"\u003e#1690\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe type-generic \u003ccode\u003exdr\u003c/code\u003e helpers — \u003ccode\u003eencodeArray\u003c/code\u003e, \u003ccode\u003edecodeArray\u003c/code\u003e, \u003ccode\u003edecodeStream\u003c/code\u003e and the \u003ccode\u003efromXdr\u003c/code\u003e / \u003ccode\u003evalidateXdr\u003c/code\u003e / \u003ccode\u003efromJson\u003c/code\u003e statics — now throw a \u003ccode\u003eTypeError\u003c/code\u003e naming the helper and the argument when it has no static schema, such as an \u003ccode\u003eInt64\u003c/code\u003e/\u003ccode\u003eUint32\u003c/code\u003e shim or an abstract base (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1682\"\u003e#1682\u003c/a\u003e). \u003ccode\u003exdr.encodeArray(xdr.Uint32, [1])\u003c/code\u003e previously threw \u003ccode\u003eTypeError: v.toXdrObject is not a function\u003c/code\u003e, and on an empty list returned a valid-looking 4-byte count. The four decode paths also name a missing \u003ccode\u003estatic fromXdrObject\u003c/code\u003e, which only they need. Valid types are unaffected.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003exdr.Int32\u003c/code\u003e, \u003ccode\u003exdr.Uint32\u003c/code\u003e, \u003ccode\u003exdr.Int64\u003c/code\u003e and \u003ccode\u003exdr.Uint64\u003c/code\u003e report their XDR type name from \u003ccode\u003e.name\u003c/code\u003e, instead of the internal \u003ccode\u003e\u0026quot;Shim\u0026quot;\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1682\"\u003e#1682\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eBytesValue#toString()\u003c/code\u003e on the named byte aliases (\u003ccode\u003eHash\u003c/code\u003e, \u003ccode\u003eSignature\u003c/code\u003e, \u003ccode\u003eAssetCode4\u003c/code\u003e, \u003ccode\u003eAssetCode12\u003c/code\u003e, \u003ccode\u003ePoolId\u003c/code\u003e, \u003ccode\u003eContractId\u003c/code\u003e, …) now returns the class's declared encoding instead of base64 for every wrapper: \u003ccode\u003enew xdr.AssetCode4(\u0026quot;KHL1\u0026quot;).toString()\u003c/code\u003e is now \u003ccode\u003e\u0026quot;KHL1\u0026quot;\u003c/code\u003e, was \u003ccode\u003e\u0026quot;S0hMMQ==\u0026quot;\u003c/code\u003e. Use \u003ccode\u003e.toXdr(\u0026quot;base64\u0026quot;)\u003c/code\u003e for the wire form (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1689\"\u003e#1689\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v16.2.0...v17.0.0\"\u003ev17.0.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eengines.node\u003c/code\u003e is now \u003ccode\u003e\u0026gt;=22.12.0\u003c/code\u003e, up from \u003ccode\u003e\u0026gt;=22.0.0\u003c/code\u003e. The CommonJS build \u003ccode\u003erequire()\u003c/code\u003es ESM-only dependencies, and \u003ccode\u003erequire(esm)\u003c/code\u003e is only unflagged from Node 22.12.0, so on Node 22.0–22.11 \u003ccode\u003erequire(\u0026quot;@stellar/stellar-sdk\u0026quot;)\u003c/code\u003e fails with \u003ccode\u003eERR_REQUIRE_ESM\u003c/code\u003e. Installing on one of those versions now produces an \u003ccode\u003eEBADENGINE\u003c/code\u003e warning instead of a package that cannot be required. Nothing changes for ESM consumers, or on Node 22.12 and later (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1667\"\u003e#1667\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/b4893496f69116d9db2a4a90214a7236831b6656\"\u003e\u003ccode\u003eb489349\u003c/code\u003e\u003c/a\u003e chore(release): prepare v17.2.1 (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1767\"\u003e#1767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/c103c9b3e7dc9ea1e47abc01b3a07011ce62af88\"\u003e\u003ccode\u003ec103c9b\u003c/code\u003e\u003c/a\u003e fix: order asset issuers and ScVal map keys the way the network does (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1766\"\u003e#1766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/53435c3ed9979cfee36b31f2fd48676d4fa2ff46\"\u003e\u003ccode\u003e53435c3\u003c/code\u003e\u003c/a\u003e docs: add release/support policy and security policy (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1729\"\u003e#1729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/7cfd51a98bc9f12bd56abee48c13b7b99f8be4fb\"\u003e\u003ccode\u003e7cfd51a\u003c/code\u003e\u003c/a\u003e chore(release): prepare v17.2.0 (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1760\"\u003e#1760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/40a8376444d7032ba843d66cf1a3c9364a677804\"\u003e\u003ccode\u003e40a8376\u003c/code\u003e\u003c/a\u003e fix(contract): walk delegate trees in needsNonInvokerSigningBy (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1747\"\u003e#1747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/284f4d18a8563b737cb3992013446de5c98a10fe\"\u003e\u003ccode\u003e284f4d1\u003c/code\u003e\u003c/a\u003e docs(contract): explain what needsNonInvokerSigningBy can and cannot see (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1745\"\u003e#1745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/791e4cf78541e10e5c3217a631f274adcf712df5\"\u003e\u003ccode\u003e791e4cf\u003c/code\u003e\u003c/a\u003e fix(contract): forward wallet signerAddress to default authorizer (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1744\"\u003e#1744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/a6ba91a61f9b42fe65ff7027a5adc200223e2043\"\u003e\u003ccode\u003ea6ba91a\u003c/code\u003e\u003c/a\u003e fix(contract): report when signAuthEntries signs no auth entry (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1743\"\u003e#1743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/7b6469e65b98f74a00cd653ac2bc0869e8599161\"\u003e\u003ccode\u003e7b6469e\u003c/code\u003e\u003c/a\u003e fix(auth): verify bare signature callbacks against forAddress (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1742\"\u003e#1742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/commit/74ac0c6ad5f7e62df8930eb7504e34edf9ae410b\"\u003e\u003ccode\u003e74ac0c6\u003c/code\u003e\u003c/a\u003e docs: regroup the Migration Guide and fix the guides-local race (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1740\"\u003e#1740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v13.3.0...v17.2.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for \u003ccode\u003e@​stellar/stellar-sdk\u003c/code\u003e since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 12.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `smol-toml` from 1.9.0 to 1.9.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/squirrelchat/smol-toml/releases\"\u003esmol-toml's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.9.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: reject invalid extra exponent sign by \u003ca href=\"https://github.com/cyyynthia\"\u003e\u003ccode\u003e@​cyyynthia\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\"\u003ehttps://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/69aa050fef018b71799519bb2cbb54f158a0c5f9\"\u003e\u003ccode\u003e69aa050\u003c/code\u003e\u003c/a\u003e fix: actually properly fix exponent issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/7be7084d24c85909cec84ecaafe39737ef4e4472\"\u003e\u003ccode\u003e7be7084\u003c/code\u003e\u003c/a\u003e chore: version bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/be3290da3309502447e020ce106bb8a11d99e580\"\u003e\u003ccode\u003ebe3290d\u003c/code\u003e\u003c/a\u003e chore: upgrade deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/squirrelchat/smol-toml/commit/86c76134ad7a50e8e101ef7fd82cb0f155b278d8\"\u003e\u003ccode\u003e86c7613\u003c/code\u003e\u003c/a\u003e fix: reject invalid extra exponent sign\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/squirrelchat/smol-toml/compare/v1.9.0...v1.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.6\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003eSix malicious commits pushed to \u003ccode\u003emain\u003c/code\u003e on September 21 with a compromised git credential were reverted the same day in \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6620\"\u003e#6620\u003c/a\u003e and have since been removed from the history of \u003ccode\u003emain\u003c/code\u003e. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini\u003c/li\u003e\n\u003cli\u003e9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales\u003c/li\u003e\n\u003cli\u003e34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003e74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eb2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003ebacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003ec42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6638\"\u003e#6638\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6645\"\u003e#6645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6\u003c/li\u003e\n\u003cli\u003e9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.2\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.1\"\u003e4.6.1\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9446b5cc\"\u003e\u003ccode\u003e9446b5cc\u003c/code\u003e\u003c/a\u003e fix: preserve undefined prefault outputs and object keys (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6587\"\u003e#6587\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0c483c58\"\u003e\u003ccode\u003e0c483c58\u003c/code\u003e\u003c/a\u003e docs: the \u003ca href=\"https://zod.dev/blog/zod-4-6\"\u003eZod 4.6 announcement post\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6546\"\u003e#6546\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1\"\u003e\u003ccode\u003e9c21983\u003c/code\u003e\u003c/a\u003e ci: stage at verbose so a failed OIDC token exchange says why\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7\"\u003e\u003ccode\u003e529f78d\u003c/code\u003e\u003c/a\u003e 4.6.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd\"\u003e\u003ccode\u003ea0ebf97\u003c/code\u003e\u003c/a\u003e fix(v4): check array, set and map size bounds before parsing elements (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6652\"\u003e#6652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67\"\u003e\u003ccode\u003ea2ba4a6\u003c/code\u003e\u003c/a\u003e fix(types): declare record output and input as members, not base type argumen...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10\"\u003e\u003ccode\u003ec42596b\u003c/code\u003e\u003c/a\u003e release: hold the run on the release-approval environment until the staged ve...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290\"\u003e\u003ccode\u003ebacad51\u003c/code\u003e\u003c/a\u003e docs: square the Code for Japan logo to match the other bronze tiles\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462\"\u003e\u003ccode\u003e8fb2faf\u003c/code\u003e\u003c/a\u003e docs: crop the Code for Japan logo and list it first in bronze\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa\"\u003e\u003ccode\u003eb2ef983\u003c/code\u003e\u003c/a\u003e docs: add Code for Japan to bronze sponsors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df\"\u003e\u003ccode\u003e74304ce\u003c/code\u003e\u003c/a\u003e release: stage npm versions instead of publishing them (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6622\"\u003e#6622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/34a626f307871ecbb0123947559328dc52ed5e3e\"\u003e\u003ccode\u003e34a626f\u003c/code\u003e\u003c/a\u003e docs: tighten the z.locales tree-shaking note\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 14.2.35 to 16.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.4.0\u003c/h2\u003e\n\u003cp\u003eCheck out the \u003ca href=\"https://nextjs.org/blog/next-16-4\"\u003e16.4 announcement post\u003c/a\u003e to get an overview of the changes.\u003c/p\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow compiler plugin warning in more situations: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/75682\"\u003e#75682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(scripts): correct typo in rm.mjs error message: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/87015\"\u003e#87015\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: improve clarity and punctuation in README: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/86096\"\u003e#86096\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix debug build paths Pages Router support entries: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93529\"\u003e#93529\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebundle-analyzer: record historical snapshots on each analyze run: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93520\"\u003e#93520\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect proxy.ts correctly with compound pageExtensions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93246\"\u003e#93246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(turbopack): support \u003ccode\u003efalse\u003c/code\u003e values for \u003ccode\u003eresolveAlias\u003c/code\u003e config: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/93331\"\u003e#93331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMisc Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs: correction to dynamicParams migration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96624\"\u003e#96624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: proxy event argument: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96435\"\u003e#96435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: remove experimental note from runtime prefetching: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96615\"\u003e#96615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePreserve per-segment prefetching after dynamic navigation: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96583\"\u003e#96583\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename static generation stream option to waitForAllReady: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96564\"\u003e#96564\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete static generation plumbing: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96563\"\u003e#96563\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Drop dead writes to \u003ccode\u003eexports\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96381\"\u003e#96381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Ignore writes to \u003ccode\u003eexports\u003c/code\u003e after a \u003ccode\u003emodule.exports = {}\u003c/code\u003e writes: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96380\"\u003e#96380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Add test for sideEffects with optimizePackageImports: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96549\"\u003e#96549\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[turbopack] Strip leading BOM before parsing CSS: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96678\"\u003e#96678\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003ecbb046ab-20260731\u003c/code\u003e to \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96550\"\u003e#96550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: use relative doc links in instant-navigation error pages: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96672\"\u003e#96672\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTurbopack: terminate failed plugin worker threads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96592\"\u003e#96592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix HTML-limited bot matching in prerender bypass rules: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96584\"\u003e#96584\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ci] Fix create_release_branch for new repo permissions: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96641\"\u003e#96641\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: skip action module instance deploy test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96629\"\u003e#96629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: quote the dynamicParams build error in a blockquote: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96633\"\u003e#96633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[react-sync] Open pull requests as the bot that authors the commits: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96682\"\u003e#96682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Bench] Fixes for pure Fizz bench: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96771\"\u003e#96771\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDerive foreground cache revalidation from the consumer: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96731\"\u003e#96731\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix race when navigating Back before hydration: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96252\"\u003e#96252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: present each Skill as steps in the AI agents guide: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96751\"\u003e#96751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReuse completed cache entries for the rest of a request: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96727\"\u003e#96727\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade React from \u003ccode\u003e7dfc7ccd-20260803\u003c/code\u003e to \u003ccode\u003e11eddecd-20260805\u003c/code\u003e: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96735\"\u003e#96735\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove WorkStore execution mode: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96674\"\u003e#96674\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove cache revalidation execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96670\"\u003e#96670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Route render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96662\"\u003e#96662\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove App Page execution mode reads: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96660\"\u003e#96660\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: fix missing await in css-chunking test: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96725\"\u003e#96725\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs (Skills): stop assuming app/ at the root and port 3000: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96696\"\u003e#96696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImplement next/font BeforeResolvePlugins as ImportMappingReplacement: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/95808\"\u003e#95808\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Tailwind Turbopack loader in create-next-app: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96606\"\u003e#96606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: instant navigation quick start with an adoption prompt: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96663\"\u003e#96663\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSeparate App Page render and prerender pipelines: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96659\"\u003e#96659\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove App Router execution intent to entrypoints: \u003ca href=\"https://redirect.github.com/vercel/next.js/issues/96640\"\u003e#96640\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e273d5b2e869d0be06c0e86f788e1594f9dd40cf\"\u003e\u003ccode\u003ee273d5b\u003c/code\u003e\u003c/a\u003e v16.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/fdf41d6f6315ebff3a7056d7e7f002b8e78749d4\"\u003e\u003ccode\u003efdf41d6\u003c/code\u003e\u003c/a\u003e [ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/c3e76ad9e49ac21d1667e4b8b2b6b3a3348d2975\"\u003e\u003ccode\u003ec3e76ad\u003c/code\u003e\u003c/a\u003e v16.4.0-canary.63\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/47c6cc8da0a35432bc964548ecfb5e1ba160b69c\"\u003e\u003ccode\u003e47c6cc8\u003c/code\u003e\u003c/a\u003e Document next analyze export in the package bundling guide (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99735\"\u003e#99735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/5b10604925853d8cd0bee61eb49d4894707cf7ac\"\u003e\u003ccode\u003e5b10604\u003c/code\u003e\u003c/a\u003e Revert stabilization of \u003ccode\u003eforbidden()\u003c/code\u003e and \u003ccode\u003eunauthorized()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99734\"\u003e#99734\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/f3a6f976de26c40e7a6543a3175666906e84e050\"\u003e\u003ccode\u003ef3a6f97\u003c/code\u003e\u003c/a\u003e Preserve configured output directories during static export (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99507\"\u003e#99507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b22e5a299cb58577ce86f21b6a0f7bb31a6168f2\"\u003e\u003ccode\u003eb22e5a2\u003c/code\u003e\u003c/a\u003e Rename skill to next-bundle-optimizer and document its usage (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/99731\"\u003e#99731\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/74dc549ca01d7c1adada50576b2b204a4ad32df6\"\u003e\u003ccode\u003e74dc549\u003c/code\u003e\u003c/a\u003e [turbo-tasks-backend] Clean up task state before publishing execution complet...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"...\n\n_Description has been truncated_","html_url":"https://github.com/Evergreen-production/evergreen/pull/32","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Evergreen-production%2Fevergreen/issues/32","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/32/packages"}},{"old_version":"11.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-14T03:47:11.000Z","version_change":"11.1.0 → 15.0.0","issue":{"uuid":"5841576148","node_id":"PR_kwDOMdwYLM8AAAABIT2qcQ","number":1048,"state":"open","title":"build(deps): bump commander from 11.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T03:47:11.000Z","updated_at":"2026-10-14T03:47:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"11.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 11.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v11.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=11.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/zypher-game/zytron-optimism/pull/1048","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/zypher-game%2Fzytron-optimism/issues/1048","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1048/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-13T12:58:49.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5830743626","node_id":"PR_kwDOHWAAMc8AAAABILNdNQ","number":185,"state":"closed","title":"E: Bump the production group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-16T01:27:57.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-13T12:58:49.000Z","updated_at":"2026-10-16T01:27:59.000Z","time_to_close":217748,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"E: Bump","group_name":"production","update_count":6,"packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"comment-json","old_version":"4.2.5","new_version":"5.0.0","repository_url":"https://github.com/kaelzhang/node-comment-json"},{"name":"typescript","old_version":"5.7.3","new_version":"5.9.3","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"cjs-module-lexer","old_version":"2.2.1","new_version":"2.3.0","repository_url":"https://github.com/nodejs/cjs-module-lexer"},{"name":"resolve.exports","old_version":"2.0.2","new_version":"2.0.3","repository_url":"https://github.com/lukeed/resolve.exports"},{"name":"memfs","old_version":"4.17.0","new_version":"4.80.0","repository_url":"https://github.com/streamich/memfs"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [comment-json](https://github.com/kaelzhang/node-comment-json) | `4.2.5` | `5.0.0` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.7.3` | `5.9.3` |\n| [cjs-module-lexer](https://github.com/nodejs/cjs-module-lexer) | `2.2.1` | `2.3.0` |\n| [resolve.exports](https://github.com/lukeed/resolve.exports) | `2.0.2` | `2.0.3` |\n| [memfs](https://github.com/streamich/memfs) | `4.17.0` | `4.80.0` |\n\n\nUpdates `commander` from 13.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `comment-json` from 4.2.5 to 5.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kaelzhang/node-comment-json/releases\"\u003ecomment-json's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.0.0\u003c/h2\u003e\n\u003cp\u003eMAJOR: blank lines are now modeled explicitly instead of being inferred from \u003ccode\u003eloc\u003c/code\u003e and historical line-break logic.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduce explicit \u003ccode\u003eBlankLine\u003c/code\u003e comment tokens and use them during \u003ccode\u003eparse()\u003c/code\u003e / \u003ccode\u003estringify()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eparse(code, reviver, { no_comments, no_blank_lines })\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eremoveBlankLines()\u003c/code\u003e for removing blank lines globally or at a specific comment location.\u003c/li\u003e\n\u003cli\u003eImprove round-trip behavior for JSON files that rely on preserved blank lines, including a Bun-derived regression fixture.\u003c/li\u003e\n\u003cli\u003eUpdate TypeScript definitions and documentation for the new blank-line model.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePotential breaking changes\u003c/h3\u003e\n\u003cp\u003eThis release may introduce breaking changes for consumers who directly inspect or mutate comment tokens:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eCommentToken\u003c/code\u003e is now a union type. A token may be \u003ccode\u003e{ type: 'BlankLine', inline: false }\u003c/code\u003e, so \u003ccode\u003evalue\u003c/code\u003e and \u003ccode\u003eloc\u003c/code\u003e are no longer guaranteed on every token.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estringify()\u003c/code\u003e no longer uses \u003ccode\u003eloc\u003c/code\u003e or the old internal blank-line history to infer empty lines. Blank lines are rendered only from explicit \u003ccode\u003eBlankLine\u003c/code\u003e tokens.\u003c/li\u003e\n\u003cli\u003eCustom logic that manually creates or rewrites comment token arrays may need to be updated to preserve blank lines correctly.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBehavior differences\u003c/h3\u003e\n\u003cp\u003eIf your existing usage includes business logic related to blank lines, you may notice behavior differences:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eCode that previously relied on \u003ccode\u003eloc\u003c/code\u003e-based blank-line rendering may now produce different output unless it preserves \u003ccode\u003eBlankLine\u003c/code\u003e tokens explicitly.\u003c/li\u003e\n\u003cli\u003eCode that assumed every comment token was a line/block comment may need an extra type check for \u003ccode\u003eBlankLine\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eParsing with \u003ccode\u003e{ no_blank_lines: true }\u003c/code\u003e now provides an explicit way to drop blank lines, while default parsing preserves them as first-class tokens.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAn upgrade review is recommended for dependents that have custom comment-token processing or formatting logic around blank lines.\u003c/p\u003e\n\u003ch2\u003e4.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMINOR\u003c/strong\u003e: the new \u003ca href=\"https://github.com/kaelzhang/node-comment-json?tab=readme-ov-file#movecommentssource-object-target-object-from-object-to-object-override-boolean\"\u003e\u003ccode\u003emoveComments\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/kaelzhang/node-comment-json?tab=readme-ov-file#removecommentstarget-object-location-object\"\u003e\u003ccode\u003eremoveComments\u003c/code\u003e\u003c/a\u003e to help you to manipulate comments\u003c/li\u003e\n\u003cli\u003eImprove typescript definitions\u003c/li\u003e\n\u003cli\u003eFixes README.md\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAn upgrade is recommended for all dependents\u003c/p\u003e\n\u003ch2\u003e4.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMINOR\u003c/strong\u003e: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/39\"\u003e#39\u003c/a\u003e, implemented the tc39 proposal of \u003ca href=\"https://github.com/tc39/proposal-json-parse-with-source\"\u003ehttps://github.com/tc39/proposal-json-parse-with-source\u003c/a\u003e (only the \u003ccode\u003econtext.source\u003c/code\u003e), so that it is possible to handle \u003ccode\u003eBigInt\u003c/code\u003es.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst {parse, stringify} = require('comment-json')\r\n\u003cp\u003econst parsed = parse(\n\u003ccode\u003e{\u0026amp;quot;foo\u0026amp;quot;: 9007199254740993}\u003c/code\u003e,\n// The reviver function now has a 3rd param that contains the string source.\n(key, value, {source}) =\u0026gt;\n/^[0-9]+$/.test(source) ? BigInt(source) : value\n)\u003c/p\u003e\n\u003cp\u003econsole.log(parsed)\n// {\n//   \u0026quot;foo\u0026quot;: 9007199254740993n\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/7032c691b4f94a2107144fc6deee008c819c5c82\"\u003e\u003ccode\u003e7032c69\u003c/code\u003e\u003c/a\u003e bump version 5.0.0: potential breaking changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/f54170f611a646623614ccbfac2ae88ec3820d83\"\u003e\u003ccode\u003ef54170f\u003c/code\u003e\u003c/a\u003e test/docs: add bun-derived regression fixture and docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/2f8b9eb05344eeedec96f13d0f992701cb4a8ab3\"\u003e\u003ccode\u003e2f8b9eb\u003c/code\u003e\u003c/a\u003e api: add parse options overload and removeBlankLines\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/2b83d0314a155dc7f1083697ab832ab125bf3b84\"\u003e\u003ccode\u003e2b83d03\u003c/code\u003e\u003c/a\u003e core: introduce explicit BlankLine tokens for parse/stringify\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/9bac144e213f75bf600204e3e542b0dc013e2f7e\"\u003e\u003ccode\u003e9bac144\u003c/code\u003e\u003c/a\u003e codestyle: \u0026lt; 80 cols\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/29eba14c195a5d68effdc4871c6c9baba0ee45b7\"\u003e\u003ccode\u003e29eba14\u003c/code\u003e\u003c/a\u003e 4.6.2: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/e8e07c2678b5d0c9c19066804113c6dbc5229fef\"\u003e\u003ccode\u003ee8e07c2\u003c/code\u003e\u003c/a\u003e common: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e, resolve conflicts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/822e18ba64325bce38b21a8c608654733aa95e3f\"\u003e\u003ccode\u003e822e18b\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/60\"\u003e#60\u003c/a\u003e from nikeee/core-utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/4880e8a2b5417cc5c49bb363f6c06fddbfb68a47\"\u003e\u003ccode\u003e4880e8a\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into core-utils\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kaelzhang/node-comment-json/commit/fe34aedca8079b8e4b5dad6d1b8b0ea951bf8942\"\u003e\u003ccode\u003efe34aed\u003c/code\u003e\u003c/a\u003e test: \u003ca href=\"https://redirect.github.com/kaelzhang/node-comment-json/issues/29\"\u003e#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kaelzhang/node-comment-json/compare/4.2.5...5.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `typescript` from 5.7.3 to 5.9.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/TypeScript/releases\"\u003etypescript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTypeScript 5.9.3\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eNo specific changes for TypeScript 5.9.2 (Stable)\u003c/em\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.3%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.3 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eNo specific changes for TypeScript 5.9.2 (Stable)\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9 RC\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9-rc/\"\u003erelease announcement\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.1%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.9 Beta\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-5-9-beta/\"\u003erelease announcement\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+5.9.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 5.9.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 5.8.3\u003c/h2\u003e\n\u003cp\u003eNote: this tag was recreated to point at the correct commit. The npm package contained the correct content.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/c63de15a992d37f0d6cec03ac7631872838602cb\"\u003e\u003ccode\u003ec63de15\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.3 and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/8428ca4cc8a7ecc9ac18dd0258016228814f5eaf\"\u003e\u003ccode\u003e8428ca4\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62438\"\u003e#62438\u003c/a\u003e (Fix incorrectly ignored dts file fr...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/a131cac6831aa6532ea963d0cb3131b957cad980\"\u003e\u003ccode\u003ea131cac\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62351\"\u003e#62351\u003c/a\u003e (Add missing Float16Array constructo...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/04243333584a5bfaeb3434c0982c6280fe87b8d5\"\u003e\u003ccode\u003e0424333\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62423\"\u003e#62423\u003c/a\u003e (Revert PR 61928) into release-5.9 (\u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62425\"\u003e#62425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/bdb641a4347af822916fb8cdb9894c9c2d2421dd\"\u003e\u003ccode\u003ebdb641a\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62311\"\u003e#62311\u003c/a\u003e (Fix parenthesizer rules for manuall...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/0d9b9b92e2aca2f75c979a801abbc21bff473748\"\u003e\u003ccode\u003e0d9b9b9\u003c/code\u003e\u003c/a\u003e 🤖 Pick PR \u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/61978\"\u003e#61978\u003c/a\u003e (Restructure CI to prepare for requi...) into release-5.9 (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/2dce0c58af51cf9a9068365dc2f756c61b82b597\"\u003e\u003ccode\u003e2dce0c5\u003c/code\u003e\u003c/a\u003e Intentionally regress one buggy declaration output to an older version (\u003ca href=\"https://redirect.github.com/microsoft/TypeScript/issues/62163\"\u003e#62163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/5be33469d551655d878876faa9e30aa3b49f8ee9\"\u003e\u003ccode\u003e5be3346\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.2 and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ad825f2bee3362886d642c48cb97c82df82b3ddb\"\u003e\u003ccode\u003ead825f2\u003c/code\u003e\u003c/a\u003e Bump version to 5.9.1-rc and LKG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/463a5bf92c3597dc14f252517c10a1bef7ac2f4c\"\u003e\u003ccode\u003e463a5bf\u003c/code\u003e\u003c/a\u003e Update LKG\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.9.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cjs-module-lexer` from 2.2.1 to 2.3.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/releases\"\u003ecjs-module-lexer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: initialize Wasm automatically before parsing by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/120\"\u003enodejs/cjs-module-lexer#120\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: speed up UTF-16 source copies by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/122\"\u003enodejs/cjs-module-lexer#122\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip identifier and number runs by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/124\"\u003enodejs/cjs-module-lexer#124\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip class checks for unrelated identifiers by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/123\"\u003enodejs/cjs-module-lexer#123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: guard parser stack bounds by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/125\"\u003enodejs/cjs-module-lexer#125\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/pull/120\"\u003enodejs/cjs-module-lexer#120\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\"\u003ehttps://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/70d33c7a332a31fa1542de9b8737f2d23acfc184\"\u003e\u003ccode\u003e70d33c7\u003c/code\u003e\u003c/a\u003e 2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/9b39cd24261b567f4d65aecc06af3c2b29abb416\"\u003e\u003ccode\u003e9b39cd2\u003c/code\u003e\u003c/a\u003e fix: guard parser stack bounds (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/125\"\u003e#125\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/20f83436af4068554595af5e46ae4b55ed750e5c\"\u003e\u003ccode\u003e20f8343\u003c/code\u003e\u003c/a\u003e perf: skip class checks for unrelated identifiers (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/123\"\u003e#123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/8c63bbc00e7ad6a5c532fd7633a74d88677712cb\"\u003e\u003ccode\u003e8c63bbc\u003c/code\u003e\u003c/a\u003e perf: skip identifier and number runs (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/124\"\u003e#124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/66e5b9af640a23ca351bd77296b41245592f4b32\"\u003e\u003ccode\u003e66e5b9a\u003c/code\u003e\u003c/a\u003e perf: speed up UTF-16 source copies (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/122\"\u003e#122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/cjs-module-lexer/commit/0bd046155301545cdd3799e235e42d5b0d838d1b\"\u003e\u003ccode\u003e0bd0461\u003c/code\u003e\u003c/a\u003e fix: initialize Wasm automatically before parsing (\u003ca href=\"https://redirect.github.com/nodejs/cjs-module-lexer/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodejs/cjs-module-lexer/compare/2.2.1...2.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `resolve.exports` from 2.0.2 to 2.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lukeed/resolve.exports/releases\"\u003eresolve.exports's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.0.3\u003c/h2\u003e\n\u003ch2\u003ePatches\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMatch full subpath pattern (\u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/34\"\u003e#34\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/37\"\u003e#37\u003c/a\u003e): c9b413e\n\u003cem\u003eThank you \u003ca href=\"https://github.com/sosoba\"\u003e\u003ccode\u003e@​sosoba\u003c/code\u003e\u003c/a\u003e\u003c/em\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e(ci): skip nyc for Node \u0026lt; 18: cb577d9\u003c/li\u003e\n\u003cli\u003eAdd \u003ca href=\"https://licenses.dev\"\u003elicenses.dev\u003c/a\u003e badge\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\"\u003ehttps://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/6613167c0b4fc1511fc52171f4f52cb030c928c3\"\u003e\u003ccode\u003e6613167\u003c/code\u003e\u003c/a\u003e 2.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/c9b413ef7ce32bdb435f0cc285df3023a9c9ba71\"\u003e\u003ccode\u003ec9b413e\u003c/code\u003e\u003c/a\u003e fix: avoid lazy regexp matching (\u003ca href=\"https://redirect.github.com/lukeed/resolve.exports/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/cb577d9f3a6edd8ee480e52c0296a8041bcb1cf4\"\u003e\u003ccode\u003ecb577d9\u003c/code\u003e\u003c/a\u003e chore(ci): skip nyc for Node \u0026lt; 18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lukeed/resolve.exports/commit/294192309b7276bc0913f65a7ee73721611ae383\"\u003e\u003ccode\u003e2941923\u003c/code\u003e\u003c/a\u003e chore: add licenses badge\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lukeed/resolve.exports/compare/v2.0.2...v2.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `memfs` from 4.17.0 to 4.80.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/streamich/memfs/releases\"\u003ememfs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v4.80.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: allow configuring the synchronous FSA worker timeout by \u003ca href=\"https://github.com/Firatakti\"\u003e\u003ccode\u003e@​Firatakti\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1298\"\u003estreamich/memfs#1298\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Firatakti\"\u003e\u003ccode\u003e@​Firatakti\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1298\"\u003estreamich/memfs#1298\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.79.0...v4.80.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.79.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 improve FS(A) error handling by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1297\"\u003estreamich/memfs#1297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.78.1...v4.79.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.78.1...v4.79.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.78.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: 🐛 return correct shape from \u003ccode\u003e.queryPermission()\u003c/code\u003e by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1295\"\u003estreamich/memfs#1295\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.78.0...v4.78.1\"\u003ehttps://github.com/streamich/memfs/compare/v4.78.0...v4.78.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.78.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 implement Node-compatible \u003ccode\u003ecp\u003c/code\u003e module by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1294\"\u003estreamich/memfs#1294\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.77.0...v4.78.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.77.0...v4.78.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.77.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGlob by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1293\"\u003estreamich/memfs#1293\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.76.0...v4.77.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.76.0...v4.77.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.76.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e.opendir()\u003c/code\u003e and \u003ccode\u003eDir\u003c/code\u003e improvements by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1292\"\u003estreamich/memfs#1292\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.75.0...v4.76.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.75.0...v4.76.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eRelease v4.75.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: 🎸 improve error formatting and normalization, dedupe validators by \u003ca href=\"https://github.com/streamich\"\u003e\u003ccode\u003e@​streamich\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/streamich/memfs/pull/1291\"\u003estreamich/memfs#1291\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/streamich/memfs/compare/v4.74.0...v4.75.0\"\u003ehttps://github.com/streamich/memfs/compare/v4.74.0...v4.75.0\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/streamich/memfs/blob/master/CHANGELOG.md\"\u003ememfs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.53.0...v4.54.0\"\u003e4.54.0\u003c/a\u003e (2026-01-18)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 add locking for FSA writable handles (\u003ca href=\"https://github.com/streamich/memfs/commit/35d3519d90f018905df61396af9325d992a65768\"\u003e35d3519\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.52.0...v4.53.0\"\u003e4.53.0\u003c/a\u003e (2026-01-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimplement Result type and improve error handling for exists methods (\u003ca href=\"https://github.com/streamich/memfs/commit/f95531fb3382d5aa23e8dc9c233d7b47dd7fbbc1\"\u003ef95531f\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1218\"\u003e#1218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.51.1...v4.52.0\"\u003e4.52.0\u003c/a\u003e (2026-01-15)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 add deprecated \u003ccode\u003eDirent.path\u003c/code\u003e with deprecation notice (\u003ca href=\"https://github.com/streamich/memfs/commit/ebf8ea917e8248ff29ad5f975137f89004404d6b\"\u003eebf8ea9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 add \u003cem\u003edisposable\u003c/em\u003e methods to \u003ccode\u003eDir\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/d237aa9db26b027887963a935098f17466109669\"\u003ed237aa9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e🎸 add \u003ccode\u003eDirent.parentPath\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/f72f9fe00bf11b622894335e1e0a0a981636cad4\"\u003ef72f9fe\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.51.0...v4.51.1\"\u003e4.51.1\u003c/a\u003e (2025-11-30)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd glob functions to API lists (\u003ca href=\"https://github.com/streamich/memfs/commit/445f33729e6123b52268e92a9d2785d47f7ab2aa\"\u003e445f337\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.50.0...v4.51.0\"\u003e4.51.0\u003c/a\u003e (2025-11-12)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esort files and folder when using \u003ccode\u003etoTreeSync()\u003c/code\u003e (\u003ca href=\"https://github.com/streamich/memfs/commit/673cb7a98b2ae7b97a57a0693d8d2dbfc745338c\"\u003e673cb7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1214\"\u003e#1214\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.49.0...v4.50.0\"\u003e4.50.0\u003c/a\u003e (2025-10-28)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e🎸 improve Node buffer allocation strategy (\u003ca href=\"https://github.com/streamich/memfs/commit/d1edb3fa70f119642fb7fdd603e7e89f752afa11\"\u003ed1edb3f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eoptimize Node buffer management to prevent O(n^2) overhead (\u003ca href=\"https://github.com/streamich/memfs/commit/95d6f091fef065abb60b5515754b2c8081117e4f\"\u003e95d6f09\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/streamich/memfs/compare/v4.48.1...v4.49.0\"\u003e4.49.0\u003c/a\u003e (2025-10-06)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/adae41a54ff34c89db4e0d0708ec7c166e8998c6\"\u003e\u003ccode\u003eadae41a\u003c/code\u003e\u003c/a\u003e chore: release v4.80.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/d9cfa1874f8189140b9d99908026031b2fe21f29\"\u003e\u003ccode\u003ed9cfa18\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1298\"\u003e#1298\u003c/a\u003e from Firatakti/codex/fsa-sync-timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/fe75fbc40e0d344b33d813b2dd8f449269307ba2\"\u003e\u003ccode\u003efe75fbc\u003c/code\u003e\u003c/a\u003e feat: allow configuring the synchronous FSA worker timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/02dc8141395201d3ba4d7ddada3538403e59ce5c\"\u003e\u003ccode\u003e02dc814\u003c/code\u003e\u003c/a\u003e chore: release v4.79.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/bfebfdd2f35a2e2dd2c9ffef1d1ea9b684baedcc\"\u003e\u003ccode\u003ebfebfdd\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1297\"\u003e#1297\u003c/a\u003e from streamich/fix-improve-fsa-error-handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/55bc7901dccea50a43a95cc51962c173f7bebe23\"\u003e\u003ccode\u003e55bc790\u003c/code\u003e\u003c/a\u003e fix: 🐛 harden stream close behavior\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/b82f6b36c1cfb6926c76449bc2138197a425ad5b\"\u003e\u003ccode\u003eb82f6b3\u003c/code\u003e\u003c/a\u003e feat: 🎸 improve FS(A) error handling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/bbcea1835921cadc7edeeccbfa922cce5688ac0c\"\u003e\u003ccode\u003ebbcea18\u003c/code\u003e\u003c/a\u003e chore: release v4.78.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/8eb78226b4cf072a5f4150ed612ff20aaf7ef358\"\u003e\u003ccode\u003e8eb7822\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/streamich/memfs/issues/1295\"\u003e#1295\u003c/a\u003e from streamich/fix-fsa-permission-return\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/streamich/memfs/commit/0f9bbaed4ec998a5554a696430325781aaf3afec\"\u003e\u003ccode\u003e0f9bbae\u003c/code\u003e\u003c/a\u003e fix: 🐛 return correct shape from \u003ccode\u003e.queryPermission()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/streamich/memfs/compare/v4.17.0...v4.80.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for memfs since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/quatico-solutions/websmith/pull/185","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/quatico-solutions%2Fwebsmith/issues/185","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/185/packages"}},{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-12T05:08:46.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5808679079","node_id":"PR_kwDOQlpgks8AAAABH5pboQ","number":326,"state":"open","title":"deps: bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":9,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-12T05:08:46.000Z","updated_at":"2026-10-18T17:04:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"## Release readiness review — 2026-10-18\n\nHold: existing CI fails CLI declaration builds with TS1479 because Commander 15 is ESM-only while @kortyx/cli currently builds CommonJS. It also raises the Node minimum to 22.12.0 and changes paired positive/negative option defaults. Preserve Commander 14 for this release; migrate module/runtime contracts and test CLI options and clean consumers before upgrading.\n\nThis PR remains open and is excluded from the upcoming release. It has not been rebased or revalidated during this review; no CI gates or audit exclusions were changed.\n\n---\n\n\n\nBumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/kortyx-io/kortyx/pull/326","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kortyx-io%2Fkortyx/issues/326","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/326/packages"}},{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-11T09:27:15.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5799803438","node_id":"PR_kwDOP-rhr88AAAABHy2gwQ","number":1090,"state":"closed","title":"chore(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-12T06:00:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T09:27:15.000Z","updated_at":"2026-10-12T06:00:18.000Z","time_to_close":73970,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/Zahara-Nour/ubumaths/pull/1090","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zahara-Nour%2Fubumaths/issues/1090","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1090/packages"}},{"old_version":"12.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-11T06:49:41.000Z","version_change":"12.1.0 → 15.0.0","issue":{"uuid":"5798738071","node_id":"PR_kwDOVEgIRc8AAAABHyB-WA","number":36,"state":"open","title":"Bump commander from 12.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T06:49:41.000Z","updated_at":"2026-10-11T06:49:44.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aether-bench/keycloak__keycloak__aether-v19__PR32918__20261010/pull/36","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aether-bench%2Fkeycloak__keycloak__aether-v19__PR32918__20261010/issues/36","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/36/packages"}},{"old_version":"12.1.0","new_version":"15.0.0","update_type":"major","path":"/cli","pr_created_at":"2026-10-11T04:33:09.000Z","version_change":"12.1.0 → 15.0.0","issue":{"uuid":"5797985235","node_id":"PR_kwDOVEaWUc8AAAABHxdT-g","number":5,"state":"closed","title":"build(deps): bump commander from 12.1.0 to 15.0.0 in /cli","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-15T05:26:23.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-11T04:33:09.000Z","updated_at":"2026-10-15T05:26:32.000Z","time_to_close":348794,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/cli","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mohamedzajith/anti-kit/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mohamedzajith%2Fanti-kit/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-11T01:15:53.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5796882617","node_id":"PR_kwDOQ9ECn88AAAABHwnqBA","number":1145,"state":"open","title":"chore(deps): bump the production-dependencies group across 1 directory with 16 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-11T01:15:53.000Z","updated_at":"2026-10-11T01:15:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"production-dependencies","update_count":16,"packages":[{"name":"@aws-sdk/client-secrets-manager","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@aws-sdk/client-sns","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@aws-sdk/credential-providers","old_version":"3.1127.0","new_version":"3.1147.0","repository_url":"https://github.com/aws/aws-sdk-js-v3"},{"name":"@opentelemetry/exporter-trace-otlp-proto","old_version":"0.221.0","new_version":"0.223.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"2.11.0","new_version":"2.12.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-trace-base","old_version":"2.11.0","new_version":"2.12.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@stellar/stellar-sdk","old_version":"16.3.0","new_version":"17.2.1","repository_url":"https://github.com/stellar/js-stellar-sdk"},{"name":"better-sqlite3","old_version":"12.11.1","new_version":"13.0.3","repository_url":"https://github.com/WiseLibs/better-sqlite3"},{"name":"chalk","old_version":"5.6.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"},{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"hono","old_version":"4.13.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"nodemailer","old_version":"10.0.12","new_version":"10.0.16","repository_url":"https://github.com/nodemailer/nodemailer"},{"name":"pino","old_version":"10.3.1","new_version":"10.4.0","repository_url":"https://github.com/pinojs/pino"},{"name":"yaml","old_version":"2.9.0","new_version":"2.9.1","repository_url":"https://github.com/eemeli/yaml"},{"name":"zod","old_version":"4.5.4","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"}],"path":null,"ecosystem":"npm"},"body":"Bumps the production-dependencies group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1127.0` | `3.1147.0` |\n| [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1127.0` | `3.1147.0` |\n| [@aws-sdk/credential-providers](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-providers) | `3.1127.0` | `3.1147.0` |\n| [@opentelemetry/exporter-trace-otlp-proto](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.223.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |\n| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |\n| [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `16.3.0` | `17.2.1` |\n| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.11.1` | `13.0.3` |\n| [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.1` |\n| [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.13` |\n| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.12` | `10.0.16` |\n| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |\n| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |\n| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` |\n\n\nUpdates `@aws-sdk/client-secrets-manager` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-secrets-manager's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md\"\u003e@​aws-sdk/client-secrets-manager's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-secrets-manager\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-secrets-manager\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@aws-sdk/client-sns` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/client-sns's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md\"\u003e@​aws-sdk/client-sns's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/client-sns\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-sns\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@aws-sdk/credential-providers` from 3.1127.0 to 3.1147.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/releases\"\u003e@​aws-sdk/credential-providers's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1147.0\u003c/h2\u003e\n\u003ch4\u003e3.1147.0(2026-10-06)\u003c/h4\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-06 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c2162728eaa92e38206b37e81742174638bcee5c\"\u003ec2162728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Removes operations that are not yet generally available from the Lambda Web. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/b9da1cc4d6bba3fa432f7558c2cfa2052c93860d\"\u003eb9da1cc4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elib-transfer-manager:\u003c/strong\u003e  add opt-in O_DIRECT path for file downloads (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8319\"\u003e#8319\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/1e414f146256296cc32d2675a2e2df515918785e\"\u003e1e414f14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1147.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1146.0\u003c/h2\u003e\n\u003ch4\u003e3.1146.0(2026-10-02)\u003c/h4\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-lambda-web:\u003c/strong\u003e  Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/de11d1e19ac647382c35d04c9adc706db43104f9\"\u003ede11d1e1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-mediapackagev2:\u003c/strong\u003e  Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/8a1ac09ce8953bad912b4b6142b33d5419e856ac\"\u003e8a1ac09c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-invoicing:\u003c/strong\u003e  API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/948be4b558efb92f398c77203737dde32adde801\"\u003e948be4b5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-glue:\u003c/strong\u003e  Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6101fef043d32d50593ff9de58d9a424e055a679\"\u003e6101fef0\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-cognito-identity-provider:\u003c/strong\u003e  Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/196e191fb2da07ee24d7f64c67c8ad6e949b801d\"\u003e196e191f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-pinpoint-sms-voice-v2:\u003c/strong\u003e  AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field \u0026quot;OriginalPhoneNumber\u0026quot;. It can also return additional PhoneNumberType enums, VOIP and PREPAID. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/42d43613a4cf6b164fe206389d74f93579b8cff9\"\u003e42d43613\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-securityagent:\u003c/strong\u003e  Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/3d73df94ceaa545b3039dfaadf87bec1dc79eabe\"\u003e3d73df94\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eFor list of updated packages, view \u003cstrong\u003eupdated-packages.md\u003c/strong\u003e in \u003cstrong\u003eassets-3.1146.0.zip\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1145.0\u003c/h2\u003e\n\u003ch4\u003e3.1145.0(2026-10-01)\u003c/h4\u003e\n\u003ch5\u003eChores\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eupdate lock-threads workflow (\u003ca href=\"https://redirect.github.com/aws/aws-sdk-js-v3/pull/8327\"\u003e#8327\u003c/a\u003e) (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5daff5f2a46619fc7ce5a7b0973cf7b59280a27a\"\u003e5daff5f2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eDocumentation Changes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclient-ec2:\u003c/strong\u003e  This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/82608f8c3bc37b277a37ed95d3528fb2c1289803\"\u003e82608f8c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew Features\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eclients:\u003c/strong\u003e  update client endpoints as of 2026-10-01 (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5244c2a9be26ccffb1a29e1b3c9863b01e80dc7c\"\u003e5244c2a9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient-bedrock-agent:\u003c/strong\u003e  Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/a810c753836b472ed51cc5224ba220364e36dc30\"\u003ea810c753\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-providers/CHANGELOG.md\"\u003e@​aws-sdk/credential-providers's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1146.0...v3.1147.0\"\u003e3.1147.0\u003c/a\u003e (2026-10-06)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1145.0...v3.1146.0\"\u003e3.1146.0\u003c/a\u003e (2026-10-02)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1144.0...v3.1145.0\"\u003e3.1145.0\u003c/a\u003e (2026-10-01)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1143.0...v3.1144.0\"\u003e3.1144.0\u003c/a\u003e (2026-09-30)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1142.0...v3.1143.0\"\u003e3.1143.0\u003c/a\u003e (2026-09-29)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1141.0...v3.1142.0\"\u003e3.1142.0\u003c/a\u003e (2026-09-28)\u003c/h1\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e Version bump only for package \u003ccode\u003e@​aws-sdk/credential-providers\u003c/code\u003e\u003c/p\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/compare/v3.1140.0...v3.1141.0\"\u003e3.1141.0\u003c/a\u003e (2026-09-25)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/663046d58796f32069e5198f95a3070b2f5ef969\"\u003e\u003ccode\u003e663046d\u003c/code\u003e\u003c/a\u003e Publish v3.1147.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/054298b1520fc45a7017966674a5ac3aa6f32a04\"\u003e\u003ccode\u003e054298b\u003c/code\u003e\u003c/a\u003e Publish v3.1146.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/0199117830b689aa169a0e4c472484cde9c129cd\"\u003e\u003ccode\u003e0199117\u003c/code\u003e\u003c/a\u003e Publish v3.1145.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/ce262812f5156daee0c2070854970e504b7cd15c\"\u003e\u003ccode\u003ece26281\u003c/code\u003e\u003c/a\u003e Publish v3.1144.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/81afad00ca9394ca4d767468216743ac3ba90fb1\"\u003e\u003ccode\u003e81afad0\u003c/code\u003e\u003c/a\u003e Publish v3.1143.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c935fdd2bc9b36c689ef8e17b75c57bf9a780990\"\u003e\u003ccode\u003ec935fdd\u003c/code\u003e\u003c/a\u003e Publish v3.1142.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/5bc8d9a96936723ac90d721e0c5a2bff7ee8520d\"\u003e\u003ccode\u003e5bc8d9a\u003c/code\u003e\u003c/a\u003e Publish v3.1141.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/6050a3813c26795562b5ada8b0d9ea498eb9f8a1\"\u003e\u003ccode\u003e6050a38\u003c/code\u003e\u003c/a\u003e Publish v3.1140.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/03d54a858f80012bbc60046a77242223e8dfd9d9\"\u003e\u003ccode\u003e03d54a8\u003c/code\u003e\u003c/a\u003e Publish v3.1139.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commit/c68e50e4a6e0469a20c2894fe8a29c140553ebb8\"\u003e\u003ccode\u003ec68e50e\u003c/code\u003e\u003c/a\u003e Publish v3.1138.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/packages/credential-providers\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/exporter-trace-otlp-proto` from 0.221.0 to 0.223.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/exporter-trace-otlp-proto's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eexperimental/v0.223.0\u003c/h2\u003e\n\u003ch2\u003e0.223.0\u003c/h2\u003e\n\u003ch3\u003e:boom: Breaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(web-common)!: clean up and deprecate network span utils \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7114\"\u003e#7114\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThese utilities were long planned for removal. They were moved from the \u003ccode\u003esdk-trace-web\u003c/code\u003e package and are currently only used by the (deprecated) \u003ccode\u003einstrumentation-fetch\u003c/code\u003e and \u003ccode\u003einstrumentation-xml-http-request\u003c/code\u003e packages.\u003c/li\u003e\n\u003cli\u003eDrop the \u003ccode\u003eskipOldSemconvContentLengthAttrs\u003c/code\u003e vestigial option from \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from \u003ccode\u003e@opentelemetry/sdk-trace-web\u003c/code\u003e\ninto \u003ccode\u003e@opentelemetry/web-common\u003c/code\u003e and use them in \u003ccode\u003e@opentelemetry/instrumentation-fetch\u003c/code\u003e and \u003ccode\u003e@opentelemetry/instrumentation-xml-http-request\u003c/code\u003e.\nWith this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eexperimental/v0.222.0\u003c/h2\u003e\n\u003ch2\u003e0.222.0\u003c/h2\u003e\n\u003ch3\u003e:boom: Breaking Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on Propagator creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6930\"\u003e#6930\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on MeterProvider creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6954\"\u003e#6954\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on TracerProvider creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6962\"\u003e#6962\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node)!: fail-fast on Resource creation from config file \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6989\"\u003e#6989\u003c/a\u003e \u003ca href=\"https://github.com/trentm\"\u003e\u003ccode\u003e@​trentm\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eThis also breaks some usage of \u003ccode\u003estartNodeSDK()\u003c/code\u003e for \u003cem\u003eenvironment-based\u003c/em\u003e config, i.e. when \u003cem\u003enot\u003c/em\u003e using a config file. For example with \u003ccode\u003eOTEL_NODE_RESOURCE_DETECTORS=all\u003c/code\u003e, it results in an error message and a no-op SDK.\n(This does not impact users of \u003ccode\u003enew NodeSDK()\u003c/code\u003e -- the currently recommended mechanism to start an SDK using this package.)\u003c/p\u003e\n\u003cpre lang=\"bash\"\u003e\u003ccode\u003eCould not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: \u0026quot;container\u0026quot;\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(sdk-logs): deprecate \u003ccode\u003eSdkLogRecord\u003c/code\u003e in favor of \u003ccode\u003eReadWriteLogRecord\u003c/code\u003e \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6939\"\u003e#6939\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:bug: Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add \u003ccode\u003eredactedQueryParamsServer\u003c/code\u003e config option \u003ca href=\"https://github.com/dyladan\"\u003e\u003ccode\u003e@​dyladan\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(sdk-node): support \u003ccode\u003eheaders_list\u003c/code\u003e when creating OTLP exporters from declarative configuration \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6953\"\u003e#6953\u003c/a\u003e \u003ca href=\"https://github.com/JacksonWeber\"\u003e\u003ccode\u003e@​JacksonWeber\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:books: Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edocs(sdk-logs): mark logger configuration as experimental \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6996\"\u003e#6996\u003c/a\u003e \u003ca href=\"https://github.com/LarryHu0217\"\u003e\u003ccode\u003e@​LarryHu0217\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(configuration): document the \u003ccode\u003eConfigModel\u003c/code\u003e suffix naming convention for exported types \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6612\"\u003e#6612\u003c/a\u003e \u003ca href=\"https://github.com/vedantchalke36\"\u003e\u003ccode\u003e@​vedantchalke36\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(sampler-jaeger-remote): remove \u003ccode\u003eaxios\u003c/code\u003e dependency and use \u003ccode\u003efetch\u003c/code\u003e to get the sampler configuration from Jaeger API \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6963\"\u003e#6963\u003c/a\u003e \u003ca href=\"https://github.com/david-luna\"\u003e\u003ccode\u003e@​david-luna\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/0b72a81636fa476e8f1f1afd2ae0c90a1362194c\"\u003e\u003ccode\u003e0b72a81\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7044\"\u003e#7044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a9c5338a9f485f1433df9308f24bd7397a4a0321\"\u003e\u003ccode\u003ea9c5338\u003c/code\u003e\u003c/a\u003e ci: roll prerelease changelog into one final release changelog (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7045\"\u003e#7045\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/f41805e769ba10fb6dae72a4b7a5a3dc67cca82e\"\u003e\u003ccode\u003ef41805e\u003c/code\u003e\u003c/a\u003e chore: prepare next release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7042\"\u003e#7042\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/experimental/v0.221.0...experimental/v0.223.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/resources` from 2.11.0 to 2.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/resources's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md\"\u003e@​opentelemetry/resources's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.11.0...v2.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@opentelemetry/sdk-trace-base` from 2.11.0 to 2.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/releases\"\u003e@​opentelemetry/sdk-trace-base's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.12.0\u003c/h2\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:rocket: Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md\"\u003e@​opentelemetry/sdk-trace-base's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.0\u003c/h2\u003e\n\u003ch3\u003e:house: Internal\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore(sdk-trace): add \u003ccode\u003eStackContextManager\u003c/code\u003e in \u003ccode\u003e@opentelemetry/sdk-trace\u003c/code\u003e package \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/pull/7086\"\u003e#7086\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): support releasing from maintenance branches \u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6767\"\u003e#6767\u003c/a\u003e \u003ca href=\"https://github.com/pichlermarc\"\u003e\u003ccode\u003e@​pichlermarc\u003c/code\u003e\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eThe API documentation site is only redeployed for releases whose commit is reachable from \u003ccode\u003emain\u003c/code\u003e, so a maintenance release no longer overwrites it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/92b844e8aa7d9655e4b3560154e912c4c1ced64d\"\u003e\u003ccode\u003e92b844e\u003c/code\u003e\u003c/a\u003e chore: prepare next v2.x release (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7151\"\u003e#7151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/a859aff9825ec8138cf287d08ac86401f00aad7c\"\u003e\u003ccode\u003ea859aff\u003c/code\u003e\u003c/a\u003e fix(web-common): export getElementXPath utility (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7124\"\u003e#7124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/2bd5a73e7af7ab363f3b239f8cb1f5f56eaa3ad5\"\u003e\u003ccode\u003e2bd5a73\u003c/code\u003e\u003c/a\u003e chore(web-common)!: deprecate \u003ccode\u003eaddSpanNetworkEvents()\u003c/code\u003e et al instrumentation-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/d60f05edeac6aec8e64736c10672077fd4a766b5\"\u003e\u003ccode\u003ed60f05e\u003c/code\u003e\u003c/a\u003e doc(sdk-trace): add description for StackContextManager (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7089\"\u003e#7089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/5bd476e6f7a22e6cf2e94a645833247284aa295d\"\u003e\u003ccode\u003e5bd476e\u003c/code\u003e\u003c/a\u003e chore: move context manager to sdk-trace (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7086\"\u003e#7086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/554c0c6467c77e9ef1f2676f2bd20b505e228417\"\u003e\u003ccode\u003e554c0c6\u003c/code\u003e\u003c/a\u003e chore: move sdk-trace-web utils to web-common (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7058\"\u003e#7058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/commit/788922c5780a17d5aaace76a0da458858b2ad88a\"\u003e\u003ccode\u003e788922c\u003c/code\u003e\u003c/a\u003e ci: support maintenance branch releases (\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-js/issues/7036\"\u003e#7036\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-js/compare/v2.11.0...v2.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@stellar/stellar-sdk` from 16.3.0 to 17.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/releases\"\u003e@​stellar/stellar-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.2.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.2.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/devtechedge\"\u003e\u003ccode\u003e@​devtechedge\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1725\"\u003estellar/js-stellar-sdk#1725\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ehttps://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev17.1.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-character hex form as \u003ccode\u003eTransaction.getClaimableBalanceId(opIndex)\u003c/code\u003e, which derives the ID before submission; use this one when you only have the result. Horizon's \u003ccode\u003eresult_xdr\u003c/code\u003e is base64, so decode it first with \u003ccode\u003exdr.TransactionResult.fromXdr(result_xdr, \u0026quot;base64\u0026quot;)\u003c/code\u003e, while \u003ccode\u003erpc.Server.getTransaction\u003c/code\u003e already returns a parsed \u003ccode\u003eresultXdr\u003c/code\u003e. It throws a \u003ccode\u003eRangeError\u003c/code\u003e for an out-of-range \u003ccode\u003eopIndex\u003c/code\u003e, and a \u003ccode\u003eTypeError\u003c/code\u003e when \u003ccode\u003eresult\u003c/code\u003e is not a transaction result, when the transaction failed, or when the operation at \u003ccode\u003eopIndex\u003c/code\u003e is not a successful \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1719\"\u003e#1719\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eGenerated TypeScript bindings keep the raw spec name for a function parameter or struct field that is a reserved word or not a valid identifier, instead of renaming it: since \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1345\"\u003e#1345\u003c/a\u003e a parameter \u003ccode\u003enew\u003c/code\u003e was typed as \u003ccode\u003enew_\u003c/code\u003e while the runtime read \u003ccode\u003enew\u003c/code\u003e, so the typed call threw \u003ccode\u003eMissing field new\u003c/code\u003e, and a typed struct read of a renamed field was \u003ccode\u003eundefined\u003c/code\u003e. Methods and \u003ccode\u003edeploy\u003c/code\u003e now take a single \u003ccode\u003eargs\u003c/code\u003e object, \u003ccode\u003eset(args: { new: number }, options?)\u003c/code\u003e; call sites are unchanged, callers who used a renamed key switch to the raw name (\u003ccode\u003enew_\u003c/code\u003e to \u003ccode\u003enew\u003c/code\u003e, \u003ccode\u003e_1st\u003c/code\u003e to \u003ccode\u003eargs[\u0026quot;1st\u0026quot;]\u003c/code\u003e), method names still get the trailing \u003ccode\u003e_\u003c/code\u003e, and a \u003ccode\u003e__constructor\u003c/code\u003e with no inputs now generates \u003ccode\u003edeploy(null, options)\u003c/code\u003e instead of \u003ccode\u003edeploy(options)\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1733\"\u003e#1733\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHorizon call builders now confine a resource identifier to one URL path segment, so a \u003ccode\u003e/\u003c/code\u003e in it no longer opens a new segment. An identifier that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint — \u003ccode\u003eaccountId(\u0026quot;\u0026quot;)\u003c/code\u003e previously reached the collection endpoint and returned a page of records, and \u003ccode\u003eaccountId([\u0026quot;..\u0026quot;])\u003c/code\u003e resolved to the server root. Affects \u003ccode\u003eaccountId()\u003c/code\u003e, \u003ccode\u003etransaction()\u003c/code\u003e, \u003ccode\u003eoperation()\u003c/code\u003e, \u003ccode\u003eoffer()\u003c/code\u003e, \u003ccode\u003eclaimableBalance()\u003c/code\u003e, \u003ccode\u003eledger()\u003c/code\u003e, \u003ccode\u003eliquidityPoolId()\u003c/code\u003e, \u003ccode\u003eloadAccount()\u003c/code\u003e and the \u003ccode\u003efor*()\u003c/code\u003e neighbor filters; \u003ccode\u003eliquidityPoolId()\u003c/code\u003e was reachable the same way because its hex check is unanchored, which is tracked separately in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1703\"\u003e#1703\u003c/a\u003e. A decimal \u003ccode\u003enumber\u003c/code\u003e or \u003ccode\u003ebigint\u003c/code\u003e identifier still works, and well-formed identifiers are unaffected, since no valid Stellar identifier contains \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e or \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eTypeError\u003c/code\u003es are thrown synchronously from \u003ccode\u003ecall()\u003c/code\u003e and \u003ccode\u003estream()\u003c/code\u003e rather than as a rejected promise, which matches the existing \u003ccode\u003eToo many filters specified\u003c/code\u003e error, so a caller that only attaches \u003ccode\u003e.catch()\u003c/code\u003e needs a \u003ccode\u003etry\u003c/code\u003e/\u003ccode\u003ecatch\u003c/code\u003e. Three cases sit outside that, all unchanged by this release: \u003ccode\u003eloadAccount()\u003c/code\u003e is \u003ccode\u003easync\u003c/code\u003e, so it rejects and \u003ccode\u003e.catch()\u003c/code\u003e does work; \u003ccode\u003eliquidityPools().liquidityPoolId()\u003c/code\u003e throws from the builder method; and \u003ccode\u003eledgers().ledger()\u003c/code\u003e with the \u003ccode\u003eforLedger()\u003c/code\u003e filters coerce the sequence with \u003ccode\u003etoString()\u003c/code\u003e first, so a nullish sequence throws there rather than reaching this guard (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1702\"\u003e#1702\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTemplated Horizon \u003ccode\u003e_links\u003c/code\u003e functions now apply the call builders' path-segment guard to a path variable. One that is empty, \u003ccode\u003e.\u003c/code\u003e, \u003ccode\u003e..\u003c/code\u003e, or not a \u003ccode\u003estring\u003c/code\u003e/\u003ccode\u003enumber\u003c/code\u003e/\u003ccode\u003ebigint\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e instead of re-pointing the request at a different endpoint: \u003ccode\u003eaccount.data({ key: \u0026quot;..\u0026quot; })\u003c/code\u003e previously requested the account endpoint, not the data endpoint. Query values are unaffected. \u003ccode\u003eAccountResponse.data()\u003c/code\u003e and the \u003ccode\u003eserver.root()\u003c/code\u003e links both take the path variable through an option TypeScript does not declare, so no call that compiles today changes behavior (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1718\"\u003e#1718\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eStellarToml.Resolver.resolve()\u003c/code\u003e now validates the domain and throws \u003ccode\u003eInvalid domain\u003c/code\u003e before making a request (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1720\"\u003e#1720\u003c/a\u003e). It previously put the string straight into the URL, so some inputs reached a different host, or a different path, than the caller named. A domain must be a plain host name with an optional port: credentials and an embedded \u003ccode\u003e/\u003c/code\u003e, \u003ccode\u003e?\u003c/code\u003e, \u003ccode\u003e#\u003c/code\u003e or \u003ccode\u003e\\\u003c/code\u003e are rejected, as is an empty domain. Surrounding whitespace and a trailing \u003ccode\u003e/\u003c/code\u003e are stripped rather than rejected, so input that worked before keeps working. Host names, IP literals, IPv6 literals, and ports still work, but the request URL is normalized, so \u003ccode\u003eACME.com\u003c/code\u003e is requested as \u003ccode\u003eacme.com\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAsset.fromOperation\u003c/code\u003e preserves the \u003ccode\u003eassetTypeCreditAlphanum12\u003c/code\u003e union arm even when the decoded code is four characters or shorter, instead of re-deriving the arm from code length. Such an asset now re-encodes to the same XDR bytes it was decoded from, and its \u003ccode\u003egetAssetType()\u003c/code\u003e, \u003ccode\u003econtractId()\u003c/code\u003e, \u003ccode\u003eequals()\u003c/code\u003e, and \u003ccode\u003eAsset.compare()\u003c/code\u003e results reflect the alphanum12 arm. \u003ccode\u003eequals()\u003c/code\u003e now also compares the asset type, so a decoded short-code alphanum12 asset is no longer equal to the alphanum4 asset with the same code and issuer. User-constructed assets are unaffected: \u003ccode\u003enew Asset(code, issuer)\u003c/code\u003e still derives the type from code length (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1584\"\u003e#1584\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erpc.Server.getContractData\u003c/code\u003e no longer reports a transport failure as a missing entry. It previously caught every error from the ledger lookup and rethrew \u003ccode\u003e{ code: 404 }\u003c/code\u003e, so a 429, a 5xx, or a network error looked the same as an absent entry. Those errors now propagate untouched, and only a lookup that returns no entry throws the \u003ccode\u003e404\u003c/code\u003e-shaped error, whose shape is unchanged (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003e#1679\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leocagli\"\u003e\u003ccode\u003e@​leocagli\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1679\"\u003estellar/js-stellar-sdk#1679\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yigitcangokmen\"\u003e\u003ccode\u003e@​yigitcangokmen\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1670\"\u003estellar/js-stellar-sdk#1670\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md\"\u003e@​stellar/stellar-sdk's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.2.0...v17.2.1\"\u003ev17.2.1\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAsset.compare()\u003c/code\u003e orders two assets with the same code by their issuers' key bytes, as stellar-core does, instead of by the \u003ccode\u003eG…\u003c/code\u003e strkey text. The two orders can differ, so \u003ccode\u003egetLiquidityPoolId()\u003c/code\u003e and \u003ccode\u003enew LiquidityPoolAsset()\u003c/code\u003e rejected some valid asset pairs as out of order (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escvSortedMap()\u003c/code\u003e and \u003ccode\u003enativeToScVal()\u003c/code\u003e now sort map keys in the order the Soroban host requires: by ScVal type, then by value. They previously compared the keys' native string forms, so address, bytes, and mixed-type keys could come out in an order the host rejects. A plain object's keys are now sorted after conversion, so \u003ccode\u003e{ 10: …, 9: … }\u003c/code\u003e with \u003ccode\u003eu32\u003c/code\u003e keys becomes \u003ccode\u003e[9, 10]\u003c/code\u003e. Maps that mix key types change order: \u003ccode\u003escvString\u003c/code\u003e keys now come before \u003ccode\u003escvSymbol\u003c/code\u003e keys, whatever their names (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1766\"\u003e#1766\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.1.0...v17.2.0\"\u003ev17.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA \u003ccode\u003estellar-contract-bindings-typescript\u003c/code\u003e binary implementing the \u003ca href=\"https://developers.stellar.org/docs/tools/cli/plugins\"\u003eStellar CLI plugin convention\u003c/a\u003e, reachable as \u003ccode\u003estellar contract bindings typescript\u003c/code\u003e. It delegates to \u003ccode\u003estellar-js generate\u003c/code\u003e. The package also adds a \u003ccode\u003estellar-sdk\u003c/code\u003e binary, an alias for \u003ccode\u003estellar-js\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1738\"\u003e#1738\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e forwards a wallet's returned \u003ccode\u003esignerAddress\u003c/code\u003e to the default authorizer, so a classic-multisig signature made by a key other than the account being authorized is no longer rejected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e). A muxed \u003ccode\u003eM…\u003c/code\u003e \u003ccode\u003esignerAddress\u003c/code\u003e resolves to its base account; \u003ccode\u003enull\u003c/code\u003e or an empty string counts as omitted, and any other value that is not an account address is rejected by name. A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e still receives raw bytes. A wallet that returns a \u003ccode\u003esignerAddress\u003c/code\u003e other than the key it signed with now fails with \u0026quot;signature doesn't match payload\u0026quot; instead of having the value ignored (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1744\"\u003e#1744\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.signAuthEntries()\u003c/code\u003e throws \u003ccode\u003eNoSignatureNeeded\u003c/code\u003e when it matched no auth entry, instead of returning as if it had signed (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1681\"\u003e#1681\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1610\"\u003e#1610\u003c/a\u003e). A custom \u003ccode\u003eauthorizeEntry\u003c/code\u003e skips the pre-flight check that reports this for the default authorizer, so a wrong \u003ccode\u003eaddress\u003c/code\u003e was silent there. When \u003ccode\u003eaddress\u003c/code\u003e came from its \u003ccode\u003epublicKey\u003c/code\u003e default, the error says so. Every call that signs at least one entry is unaffected (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1743\"\u003e#1743\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e verifies a bare-\u003ccode\u003eUint8Array\u003c/code\u003e signing callback against \u003ccode\u003eforAddress\u003c/code\u003e when one is given, rather than always against the entry's top-level credential address. A valid CAP-71 delegate signature was previously rejected with \u003ccode\u003esignature doesn't match payload\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1683\"\u003e#1683\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e). For every signer form, a \u003ccode\u003eforAddress\u003c/code\u003e that names no credential node is now rejected before the signer runs, rather than after.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauthorizeEntry\u003c/code\u003e throws a \u003ccode\u003eTypeError\u003c/code\u003e naming \u003ccode\u003esignatureScVal\u003c/code\u003e when the address it would verify against is a contract, instead of StrKey's \u003ccode\u003einvalid version byte\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1742\"\u003e#1742\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eAssembledTransaction.needsNonInvokerSigningBy()\u003c/code\u003e walks CAP-71 delegate trees: it also lists the unsigned delegates under a contract account, even when the account itself has signed, and with \u003ccode\u003eincludeAlreadySigned\u003c/code\u003e it lists every delegate under a contract account (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/issues/1655\"\u003e#1655\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1747\"\u003e#1747\u003c/a\u003e). \u003ccode\u003esignAuthEntries()\u003c/code\u003e still signs top-level addresses only, and names an unsigned delegate passed as \u003ccode\u003eaddress\u003c/code\u003e. \u003ccode\u003esign()\u003c/code\u003e and \u003ccode\u003esignAndSend()\u003c/code\u003e now also reject an unsigned \u003ccode\u003eG…\u003c/code\u003e delegate under a contract account, whether or not the account has signed. This assumes every listed delegate must sign, so it can reject a transaction the network would accept when \u003ccode\u003e__check_auth\u003c/code\u003e uses only some of them. Pass \u003ccode\u003eignoreContractDelegates\u003c/code\u003e to either method to skip that check for delegates under contract accounts; \u003ccode\u003eG…\u003c/code\u003e addresses are still checked.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/stellar/js-stellar-sdk/compare/v17.0.1...v17.1.0\"\u003ev17.1.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eHorizonApi.Predicate\u003c/code\u003e gains the \u003ccode\u003eunconditional\u003c/code\u003e and \u003ccode\u003eabs_before_epoch\u003c/code\u003e fields it previously omitted, so the type now describes every predicate Horizon serves (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1701\"\u003e#1701\u003c/a\u003e). It stays an \u003ccode\u003einterface\u003c/code\u003e, so declaration merging still works. One case does break at compile time: a consumer who already augmented the namespace to declare \u003ccode\u003eunconditional\u003c/code\u003e or \u003ccode\u003eabs_before_epoch\u003c/code\u003e with a different type than the SDK now uses gets \u003ccode\u003eTS2717\u003c/code\u003e and must drop that part of their augmentation.\u003c/li\u003e\n\u003cli\u003eUpdated the production \u003ccode\u003eaxios\u003c/code\u003e dependency from \u003ccode\u003e1.18.0\u003c/code\u003e to \u003ccode\u003e1.20.0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/stellar/js-stellar-sdk/pull/1712\"\u003e#1712\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003egetClaimableBalanceIdFromResult(result, opIndex)\u003c/code\u003e: reads the claimable balance ID created by a \u003ccode\u003eCreateClaimableBalance\u003c/code\u003e operation out of a submitted transaction's \u003ccode\u003exdr.TransactionResult\u003c/code\u003e, unwrapping a fee bump when there is one. It returns the same 72-characte...\n\n_Description has been truncated_","html_url":"https://github.com/TegoLabs/sorokeep/pull/1145","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TegoLabs%2Fsorokeep/issues/1145","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1145/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":"/js","pr_created_at":"2026-10-07T08:10:21.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5741642563","node_id":"PR_kwDOU_Mbes8AAAABHE3LaQ","number":29,"state":"closed","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-07T16:13:38.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-07T08:10:21.000Z","updated_at":"2026-10-07T16:13:49.000Z","time_to_close":28997,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aether-bench/keycloak__keycloak__aether-r1__PR36880__20261007/pull/29","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aether-bench%2Fkeycloak__keycloak__aether-r1__PR36880__20261007/issues/29","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/29/packages"}},{"old_version":"12.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-05T16:57:36.000Z","version_change":"12.1.0 → 15.0.0","issue":{"uuid":"5715946605","node_id":"PR_kwDOTxMs-s8AAAABGwTRZg","number":68,"state":"open","title":"chore(deps): bump the dependencies group with 6 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-05T16:57:36.000Z","updated_at":"2026-10-05T16:57:58.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"dependencies","update_count":6,"packages":[{"name":"@nestjs/common","old_version":"10.4.22","new_version":"12.1.2","repository_url":"https://github.com/nestjs/nest"},{"name":"bullmq","old_version":"5.81.5","new_version":"6.3.11","repository_url":"https://github.com/taskforcesh/bullmq"},{"name":"ioredis","old_version":"5.11.1","new_version":"6.0.0","repository_url":"https://github.com/redis/ioredis"},{"name":"next","old_version":"15.5.25","new_version":"16.3.8","repository_url":"https://github.com/vercel/next.js"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the dependencies group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.22` | `12.1.2` |\n| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.5` | `6.3.11` |\n| [ioredis](https://github.com/redis/ioredis) | `5.11.1` | `6.0.0` |\n| [next](https://github.com/vercel/next.js) | `15.5.25` | `16.3.8` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.5` |\n| [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` |\n\nUpdates `@nestjs/common` from 10.4.22 to 12.1.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nestjs/nest/releases\"\u003e@​nestjs/common's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev12.1.1 (2026-09-28)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e, \u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003emicroservices\u003c/code\u003e, \u003ccode\u003etesting\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17893\"\u003e#17893\u003c/a\u003e fix(common): logger bugs in json output, level changes, fatal and buffered logs (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17891\"\u003e#17891\u003c/a\u003e fix(microservices): let the mqtt client retry after a failed connect (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17888\"\u003e#17888\u003c/a\u003e fix(microservices): keep tcp event listeners across reconnects (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17887\"\u003e#17887\u003c/a\u003e fix(microservices): ignore events from a replaced tcp client socket (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17878\"\u003e#17878\u003c/a\u003e fix(microservices): keep a newer nats connection when a stale one fails (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17869\"\u003e#17869\u003c/a\u003e fix(microservices): keep a newer kafka connection when a stale one fails (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17865\"\u003e#17865\u003c/a\u003e fix(microservices): let the rmq client retry after a failed connect (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17866\"\u003e#17866\u003c/a\u003e fix(microservices): reply on the request channel when redis wildcards are enabled (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17861\"\u003e#17861\u003c/a\u003e fix(microservices): recover the nats client after it gives up reconnecting (\u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17884\"\u003e#17884\u003c/a\u003e fix(common): preserve string enum values matching numeric member names (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17871\"\u003e#17871\u003c/a\u003e fix(core): detect circular dependencies across more than two providers (\u003ca href=\"https://github.com/erezcor\"\u003e\u003ccode\u003e@​erezcor\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform-fastify\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17867\"\u003e#17867\u003c/a\u003e fix(fastify): treat a JSON content type with parameters as JSON in reply() (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e, \u003ccode\u003etesting\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17860\"\u003e#17860\u003c/a\u003e fix(core): honor class and factory overrides of value providers (\u003ca href=\"https://github.com/lehafari\"\u003e\u003ccode\u003e@​lehafari\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eEnhancements\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecommon\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17876\"\u003e#17876\u003c/a\u003e fix(common): reject non-numeric items in ParseArrayPipe with items Number (\u003ca href=\"https://github.com/SulimanAbdulrazzaq\"\u003e\u003ccode\u003e@​SulimanAbdulrazzaq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emicroservices\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17863\"\u003e#17863\u003c/a\u003e feat(microservices): export deserializers from the package root (\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 13\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eAbdellatif Anaflous (\u003ca href=\"https://github.com/hktitof\"\u003e\u003ccode\u003e@​hktitof\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlejandro (\u003ca href=\"https://github.com/lehafari\"\u003e\u003ccode\u003e@​lehafari\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDaniel Pinto (\u003ca href=\"https://github.com/Cayan\"\u003e\u003ccode\u003e@​Cayan\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDharmik Sondagar (\u003ca href=\"https://github.com/DharmikSondagar\"\u003e\u003ccode\u003e@​DharmikSondagar\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKamil Mysliwiec (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLazizbek Ergashev (\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eLuke Son (\u003ca href=\"https://github.com/KAPUIST\"\u003e\u003ccode\u003e@​KAPUIST\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMicael Levi L. Cavalcante (\u003ca href=\"https://github.com/micalevisk\"\u003e\u003ccode\u003e@​micalevisk\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRoman Khegay (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSuliman Abdulrazzaq (\u003ca href=\"https://github.com/SulimanAbdulrazzaq\"\u003e\u003ccode\u003e@​SulimanAbdulrazzaq\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXia Chao (\u003ca href=\"https://github.com/xia-chao\"\u003e\u003ccode\u003e@​xia-chao\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/erezcor\"\u003e\u003ccode\u003e@​erezcor\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efadi romdhan (\u003ca href=\"https://github.com/fadiroot\"\u003e\u003ccode\u003e@​fadiroot\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.1.0 (2026-09-23)\u003c/h2\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecore\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17838\"\u003e#17838\u003c/a\u003e fix(core): inherit optional ctor params when the ctor is not redeclared (\u003ca href=\"https://github.com/kamilmysliwiec\"\u003e\u003ccode\u003e@​kamilmysliwiec\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/nestjs/nest/pull/17819\"\u003e#17819\u003c/a\u003e fix(core): name the module when metadata entries are invalid (\u003ca href=\"https://github.com/thekhegay\"\u003e\u003ccode\u003e@​thekhegay\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/8ab60aa1b2927fbe0e23135ffc65d610c623236a\"\u003e\u003ccode\u003e8ab60aa\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/ab3fb3d5ca7d51d078835e44a8db1b354f8b651b\"\u003e\u003ccode\u003eab3fb3d\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/50fb72246d0de71afff4a0add2dc292daf9f1618\"\u003e\u003ccode\u003e50fb722\u003c/code\u003e\u003c/a\u003e docs(core): fix resolve() \u003ca href=\"https://github.com/returns\"\u003e\u003ccode\u003e@​returns\u003c/code\u003e\u003c/a\u003e tags to match their Promise signatures (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/4ea29ccfd446ea898d00a344029433316e16e446\"\u003e\u003ccode\u003e4ea29cc\u003c/code\u003e\u003c/a\u003e feat(common): export UUIDVersion and support 'all' and numeric versions in Pa...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/a054312a51ba7182f0d1cf9e5a57a2dfd1739c75\"\u003e\u003ccode\u003ea054312\u003c/code\u003e\u003c/a\u003e fix(common): keep \u003ccode\u003eStreamableFile\u003c/code\u003e from mutating the caller options (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17925\"\u003e#17925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/41a3a547af8eec68b8fc2754eb81c05decb44fb3\"\u003e\u003ccode\u003e41a3a54\u003c/code\u003e\u003c/a\u003e feat(common): support uuid v1, v2, v6 and v8 in \u003ccode\u003eParseUUIDPipe\u003c/code\u003e (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17904\"\u003e#17904\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/9feedffde8ef8c86f0cd521153740575dc579d88\"\u003e\u003ccode\u003e9feedff\u003c/code\u003e\u003c/a\u003e chore(release): publish v12.1.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/daf68839d2cdc71cda92fbb8e21afa7cec13fdeb\"\u003e\u003ccode\u003edaf6883\u003c/code\u003e\u003c/a\u003e fix(common): logger bugs in json output, level changes, fatal and buffered lo...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/34c996588fd009ae6da49b4a615a64cfc540c7b2\"\u003e\u003ccode\u003e34c9965\u003c/code\u003e\u003c/a\u003e fix(common): preserve string enum values matching numeric member names (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/17884\"\u003e#17884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nestjs/nest/commit/1fbe1c53323cd2edbcba2883b2ad51ba41ebe7a8\"\u003e\u003ccode\u003e1fbe1c5\u003c/code\u003e\u003c/a\u003e fix(common): reject non-numeric items in ParseArrayPipe with items Number (\u003ca href=\"https://github.com/nestjs/nest/tree/HEAD/packages/common/issues/1\"\u003e#1\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nestjs/nest/commits/v12.1.2/packages/common\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bullmq` from 5.81.5 to 6.3.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/taskforcesh/bullmq/releases\"\u003ebullmq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.3.11\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.10...v6.3.11\"\u003e6.3.11\u003c/a\u003e (2026-10-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eworker:\u003c/strong\u003e detach stalled checker from telemetry context to prevent trace leak (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4812\"\u003e#4812\u003c/a\u003e) fixes \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4731\"\u003e#4731\u003c/a\u003e (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/01b8b14a973984845dc0bbcefccf35b3ed30782d\"\u003e01b8b14\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.10\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.9...v6.3.10\"\u003e6.3.10\u003c/a\u003e (2026-09-29)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eworker:\u003c/strong\u003e stop infinite connection-error retries during shutdown (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4833\"\u003e#4833\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/96e0a96b9f0be7d16eba9c2b6823ba9488101121\"\u003e96e0a96\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.8...v6.3.9\"\u003e6.3.9\u003c/a\u003e (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003econnection:\u003c/strong\u003e infer backend-specific connection options instead of hiding mismatches with casts (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4796\"\u003e#4796\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/10dc93c59790cfffb117624311ca3983172955a8\"\u003e10dc93c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.7...v6.3.8\"\u003e6.3.8\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e retry the LISTEN connection after a failed connect (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4781\"\u003e#4781\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/48a550b39ce29f69e398dde6e3ce3c62c873b723\"\u003e48a550b\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4729\"\u003e#4729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.6...v6.3.7\"\u003e6.3.7\u003c/a\u003e (2026-09-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ededuplication:\u003c/strong\u003e remove deduplication key if job key does not longer exist (python) (elixir) (php) (rust) (dotnet) (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4768\"\u003e#4768\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/75bb3a059ff214b419553822d41d3e8eaff7e888\"\u003e75bb3a0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.5...v6.3.6\"\u003e6.3.6\u003c/a\u003e (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebun:\u003c/strong\u003e allow nested duplicate() on lazy Bun adapter (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4723\"\u003e#4723\u003c/a\u003e) (\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/438a1d83ef3b6c2c28d1901c038223f1ab7a0a27\"\u003e438a1d8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.3.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v6.3.4...v6.3.5\"\u003e6.3.5\u003c/a\u003e (2026-09-14)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/01b8b14a973984845dc0bbcefccf35b3ed30782d\"\u003e\u003ccode\u003e01b8b14\u003c/code\u003e\u003c/a\u003e fix(worker): detach stalled checker from telemetry context to prevent trace l...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/80c8ff6073876766aa38447b74f3d72613a875a6\"\u003e\u003ccode\u003e80c8ff6\u003c/code\u003e\u003c/a\u003e chore(deps): lock file maintenance (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4837\"\u003e#4837\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/69512795c9f52563a96092e537137b3691abe02d\"\u003e\u003ccode\u003e6951279\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency eslint-plugin-tsdoc to v0.5.4 [security] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4846\"\u003e#4846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/98c5ad8e20214dc71ceceeb2f5b117fe9c7d3eaf\"\u003e\u003ccode\u003e98c5ad8\u003c/code\u003e\u003c/a\u003e chore(release): vpy3.3.0 (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4849\"\u003e#4849\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/38c5bd7892e0d112b6d8c38218d6cd27f831f016\"\u003e\u003ccode\u003e38c5bd7\u003c/code\u003e\u003c/a\u003e feat(queue): support getJob method [python] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4848\"\u003e#4848\u003c/a\u003e) ref \u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4840\"\u003e#4840\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/abf9e15a9e2ea317ef3b004431158c6714e3ed43\"\u003e\u003ccode\u003eabf9e15\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency virtualenv to v21.14.1 [python] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4847\"\u003e#4847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/b2f26ba844d6d6995143c7173c069ba31a800d79\"\u003e\u003ccode\u003eb2f26ba\u003c/code\u003e\u003c/a\u003e chore(release): 6.3.10 (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4845\"\u003e#4845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/96e0a96b9f0be7d16eba9c2b6823ba9488101121\"\u003e\u003ccode\u003e96e0a96\u003c/code\u003e\u003c/a\u003e fix(worker): stop infinite connection-error retries during shutdown (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4833\"\u003e#4833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/4409c02ddd05115da43d5db29b1f26a6ee4d71c1\"\u003e\u003ccode\u003e4409c02\u003c/code\u003e\u003c/a\u003e chore(deps): update security dev patches to v8.71.0 [security] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4841\"\u003e#4841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/taskforcesh/bullmq/commit/14b7d90f9105a9bccdecefe510b5b1b62bbf7041\"\u003e\u003ccode\u003e14b7d90\u003c/code\u003e\u003c/a\u003e chore(deps): lock file maintenance [rust] (\u003ca href=\"https://redirect.github.com/taskforcesh/bullmq/issues/4844\"\u003e#4844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/taskforcesh/bullmq/compare/v5.81.5...v6.3.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ioredis` from 5.11.1 to 6.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/ioredis/releases\"\u003eioredis's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003e6.0.0\u003c/a\u003e (2026-07-31)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003ecf3bf71\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd LMOVEM and BLMOVEM command support (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2144\"\u003e#2144\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97\"\u003ec26af46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Redis 8.10 set cardinality commands (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2143\"\u003e#2143\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84\"\u003e301099b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehimport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e729f174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimprove default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e6d0716e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MAXCOUNT and MAXSIZE for stream reads (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2142\"\u003e#2142\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec\"\u003eae5e41b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eioredis now requires Node.js 20 or newer and uses RESP3 by default. Set \u003ccode\u003eprotocol: 2\u003c/code\u003e to retain the v5 wire protocol.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.0-beta.1\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0-beta.1\"\u003e6.0.0-beta.1\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/ioredis/blob/main/CHANGELOG.md\"\u003eioredis's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003e6.0.0\u003c/a\u003e (2026-07-31)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RESP3 (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2127\"\u003e#2127\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078\"\u003e5d0862e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eclear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e6455dbe\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e recreate stale connection on circular MOVED (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2135\"\u003e#2135\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803\"\u003e08c8967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecluster:\u003c/strong\u003e validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e9618206\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/redis/ioredis/issues/1267\"\u003e#1267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecommand:\u003c/strong\u003e serialize large integer arguments in decimal notation (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2136\"\u003e#2136\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565\"\u003e09b8d04\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eredis:\u003c/strong\u003e keep reconnecting when connection closes during client setup (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2099\"\u003e#2099\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2123\"\u003e#2123\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629\"\u003ef9a66bc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esentinel:\u003c/strong\u003e preserve zero preferred slave priority (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2129\"\u003e#2129\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1\"\u003ea3f9f2d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etracing:\u003c/strong\u003e redact values for GETSET and PSETEX (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2134\"\u003e#2134\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732\"\u003e832765d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003ecf3bf71\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd LMOVEM and BLMOVEM command support (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2144\"\u003e#2144\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97\"\u003ec26af46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd Redis 8.10 set cardinality commands (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2143\"\u003e#2143\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84\"\u003e301099b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ehimport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e729f174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eimprove default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e6d0716e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MAXCOUNT and MAXSIZE for stream reads (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2142\"\u003e#2142\u003c/a\u003e) (\u003ca href=\"https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec\"\u003eae5e41b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eioredis now requires Node.js 20 or newer and uses RESP3 by default. Set \u003ccode\u003eprotocol: 2\u003c/code\u003e to retain the v5 wire protocol.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/8ed2946504a36ae9b1e186b9dccc56afcd046d78\"\u003e\u003ccode\u003e8ed2946\u003c/code\u003e\u003c/a\u003e chore(release): 6.0.0 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/3b410f80681d006ebef160493b85ce575aea0d8c\"\u003e\u003ccode\u003e3b410f8\u003c/code\u003e\u003c/a\u003e docs: clarify managed HIMPORT fieldset behavior (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2161\"\u003e#2161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901\"\u003e\u003ccode\u003e729f174\u003c/code\u003e\u003c/a\u003e feat: himport managed fieldsets (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2159\"\u003e#2159\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7\"\u003e\u003ccode\u003e6d0716e\u003c/code\u003e\u003c/a\u003e feat: improve default connection resilience (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2160\"\u003e#2160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f\"\u003e\u003ccode\u003ecf3bf71\u003c/code\u003e\u003c/a\u003e fix(types): export ScanStreamOptions, RedisStatus and ClusterStatus (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2158\"\u003e#2158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/aac171b02ee0fd0b959087e379eda97024b41ac6\"\u003e\u003ccode\u003eaac171b\u003c/code\u003e\u003c/a\u003e ci: update Redis test image (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2156\"\u003e#2156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/807bb1c8660fd47d27a2f19a9a5c08aabec1ca43\"\u003e\u003ccode\u003e807bb1c\u003c/code\u003e\u003c/a\u003e chore(release): update repository URL (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2154\"\u003e#2154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6c889e75df8488246dcc234ff8b0e83dc9f78f75\"\u003e\u003ccode\u003e6c889e7\u003c/code\u003e\u003c/a\u003e docs: add security policy (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2153\"\u003e#2153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac\"\u003e\u003ccode\u003e6455dbe\u003c/code\u003e\u003c/a\u003e fix: clear stale socket timeout on reconnect (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2148\"\u003e#2148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc\"\u003e\u003ccode\u003e9618206\u003c/code\u003e\u003c/a\u003e fix(cluster): validate MOVED slot to prevent Array.prototype pollution (\u003ca href=\"https://redirect.github.com/redis/ioredis/issues/2151\"\u003e#2151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `next` from 15.5.25 to 16.3.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/next.js/releases\"\u003enext's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev16.3.8\u003c/h2\u003e\n\u003cp\u003eThis release contains security fixes for the following advisories:\u003c/p\u003e\n\u003cp\u003eHigh:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4\"\u003eServer-Side Request Forgery in Image Optimization\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMedium:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x\"\u003eInformation disclosure in Next.js App Router metadata image routes via dynamicParams bypass\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-4jqv-mc3x-m676\"\u003eCache poisoning of SSG and ISR pages in self-hosted Next.js applications\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-mcj8-r9mp-w47p\"\u003eCache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-3w37-wq28-93x7\"\u003ePending \u003ccode\u003euse cache\u003c/code\u003e fill can leak Draft Mode content into regular responses and persisted pages\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-h694-7cp9-m8p3\"\u003eCache leak across root param values in nested 'use cache' functions\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eLow:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-39w2-rjm5-chcv\"\u003eInformation disclosure in the Next.js development server's Model Context Protocol endpoint\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.7\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nThis release is backporting bug fixes. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003eCore Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eturbo-tasks-backend: fix strongly consistent read hanging on a canceled task (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98931\"\u003e#98931\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003cp\u003eHuge thanks to \u003ca href=\"https://github.com/lukesandberg\"\u003e\u003ccode\u003e@​lukesandberg\u003c/code\u003e\u003c/a\u003e for helping!\u003c/p\u003e\n\u003ch2\u003ev16.3.6\u003c/h2\u003e\n\u003cp\u003eThis release contains a security fix for \u003ca href=\"https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j\"\u003eGHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev16.3.5\u003c/h2\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does not include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enext/image: Skip 0-byte entries when initializing disk LRU cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98185\"\u003e#98185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003enext/image: Reject empty images when reading/writing to the disk cache (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98186\"\u003e#98186\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEmit whole-app server NFTs when \u003ccode\u003eoutput: 'standalone'\u003c/code\u003e is used with an adapter (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98167\"\u003e#98167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd CSP nonce to script tags of loading and template files (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98403\"\u003e#98403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euse cache\u003c/code\u003e prerender signal retention (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/98448\"\u003e#98448\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev16.3.4\u003c/h2\u003e\n\u003cp\u003eFollow-up release to \u003ca href=\"https://github.com/vercel/next.js/releases/tag/v16.3.3\"\u003ev16.3.3\u003c/a\u003e re-enabling AVIF Image Optimization (\u003ca href=\"https://redirect.github.com/vercel/next.js/pull/97949\"\u003e#97949\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe following bug fixes have been backported. It does \u003cstrong\u003enot\u003c/strong\u003e include all pending features/changes on canary.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003etestmode: Fix infinite recursion in testmode passthrough fetch (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97691\"\u003e#97691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix build error when aliasing typescript to \u003ccode\u003e@​typescript/typescript6\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97997\"\u003e#97997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix unset crossOrigin in Turbopack manifests (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/97930\"\u003e#97930\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCredits\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/b0fad0d45eb4c4430fda5eeeb442e8a5af08a5f6\"\u003e\u003ccode\u003eb0fad0d\u003c/code\u003e\u003c/a\u003e v16.3.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/719e4c67d6e92df60246f95e1d96e2dd60789a52\"\u003e\u003ccode\u003e719e4c6\u003c/code\u003e\u003c/a\u003e [lts-active] Scope response cache keys to their source route (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/218\"\u003e#218\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e92db4536a7f34ae2dbda583cfa1b4e0d06d1865\"\u003e\u003ccode\u003ee92db45\u003c/code\u003e\u003c/a\u003e [lts-active] Fix metadata propagation for deduplicated nested caches (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/223\"\u003e#223\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/40c2ba904289a65ed2fd4633c5dfb1bdc29b52de\"\u003e\u003ccode\u003e40c2ba9\u003c/code\u003e\u003c/a\u003e [lts-active] Match Next data paths case-sensitively (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/196\"\u003e#196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476\"\u003e\u003ccode\u003e2d9f50a\u003c/code\u003e\u003c/a\u003e [lts-active] Fix MCP middleware DNS rebinding (\u003ca href=\"https://redirect.github.com/vercel/next.js/issues/213\"\u003e#213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/bd9214f9a32854a011bf5fe58e481dffe1bbf598\"\u003e\u003ccode\u003ebd9214f\u003c/code\u003e\u003c/a\u003e [lts-active] Fix draft mode leaks through cross-request \u003ccode\u003e'use cache'\u003c/code\u003e dedupli...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/8db4a627c91e718514406ff5644ea4985dcaaae0\"\u003e\u003ccode\u003e8db4a62\u003c/code\u003e\u003c/a\u003e [lts-active][webpack] Ensure \u003ccode\u003edynamicParams\u003c/code\u003e is respected in `opengraph-image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b\"\u003e\u003ccode\u003ee002ad6\u003c/code\u003e\u003c/a\u003e [lts-active] fix(next/image): Pin DNS resolution when fetching external image...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/4c20699e29178d444994cf5a31b8a617ca3a2c80\"\u003e\u003ccode\u003e4c20699\u003c/code\u003e\u003c/a\u003e v16.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/next.js/commit/2521aec5815e7de2121db253d12dae9f13e25361\"\u003e\u003ccode\u003e2521aec\u003c/code\u003e\u003c/a\u003e [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/next.js/compare/v15.5.25...v16.3.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `zod` from 3.25.76 to 4.6.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/colinhacks/zod/releases\"\u003ezod's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.6.5\u003c/h2\u003e\n\u003ch2\u003eCommits:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ed2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003ef1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003ede65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003ecc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6595\"\u003e#6595\u003c/a\u003e)\u0026quot;\u0026quot;\u003c/li\u003e\n\u003cli\u003e0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5\u003c/li\u003e\n\u003cli\u003e59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.4\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.3\"\u003e4.6.3\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d6bc1e30\"\u003e\u003ccode\u003ed6bc1e30\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ez.currencyCode()\u003c/code\u003e over a vendored ISO 4217 list, refreshed weekly by CI (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6595\"\u003e#6595\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ad32d751\"\u003e\u003ccode\u003ead32d751\u003c/code\u003e\u003c/a\u003e perf: \u003ccode\u003ez.url()\u003c/code\u003e rejects an invalid URL with \u003ccode\u003eURL.canParse()\u003c/code\u003e instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6588\"\u003e#6588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb08717\"\u003e\u003ccode\u003e2bb08717\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f6e1701a\"\u003e\u003ccode\u003ef6e1701a\u003c/code\u003e\u003c/a\u003e chore(deps): bump next to 15.5.25 and vite to 7.3.6 (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6153\"\u003e#6153\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.3\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.2\"\u003e4.6.2\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/413cce9a\"\u003e\u003ccode\u003e413cce9a\u003c/code\u003e\u003c/a\u003e fix(v4): make z.properties() a check again (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6594\"\u003e#6594\u003c/a\u003e) — removes the standalone \u003ccode\u003ez.properties()\u003c/code\u003e schema from 4.6.0; \u003ccode\u003ez.instanceof().properties()\u003c/code\u003e and \u003ccode\u003e.check(...z.properties())\u003c/code\u003e are unchanged\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/75d63ee1\"\u003e\u003ccode\u003e75d63ee1\u003c/code\u003e\u003c/a\u003e docs: show only the \u003ccode\u003e.properties()\u003c/code\u003e method form in the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/46da9572\"\u003e\u003ccode\u003e46da9572\u003c/code\u003e\u003c/a\u003e docs: match the error-message examples to what the parsers emit\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.2\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.1\"\u003e4.6.1\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/9446b5cc\"\u003e\u003ccode\u003e9446b5cc\u003c/code\u003e\u003c/a\u003e fix: preserve undefined prefault outputs and object keys (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6587\"\u003e#6587\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6585\"\u003e#6585\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0c483c58\"\u003e\u003ccode\u003e0c483c58\u003c/code\u003e\u003c/a\u003e docs: the \u003ca href=\"https://zod.dev/blog/zod-4-6\"\u003eZod 4.6 announcement post\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6546\"\u003e#6546\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/a00c3f34\"\u003e\u003ccode\u003ea00c3f34\u003c/code\u003e\u003c/a\u003e docs: use Trigger.dev's brand-kit lockups for the platinum card\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.1\u003c/h2\u003e\n\u003cp\u003eA patch on top of \u003ca href=\"https://github.com/colinhacks/zod/releases/tag/v4.6.0\"\u003e4.6.0\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/b12aa523\"\u003e\u003ccode\u003eb12aa523\u003c/code\u003e\u003c/a\u003e fix: preserve unique tags with defaulted discriminators (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6582\"\u003e#6582\u003c/a\u003e) — closes \u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6577\"\u003e#6577\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/dd9c36fa\"\u003e\u003ccode\u003edd9c36fa\u003c/code\u003e\u003c/a\u003e fix(v4): defer recursive object index inference (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6580\"\u003e#6580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/3b154992\"\u003e\u003ccode\u003e3b154992\u003c/code\u003e\u003c/a\u003e feat(lang): add Tajik (\u003ccode\u003etg\u003c/code\u003e) locale (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6581\"\u003e#6581\u003c/a\u003e) by \u003ca href=\"https://github.com/ismoil77\"\u003e\u003ccode\u003e@​ismoil77\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2efa8b80\"\u003e\u003ccode\u003e2efa8b80\u003c/code\u003e\u003c/a\u003e ci: give the npm wait a real budget and drop the back-publish path (\u003ca href=\"https://redirect.github.com/colinhacks/zod/pull/6583\"\u003e#6583\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.6.0\u003c/h2\u003e\n\u003cp\u003eZod 4.6 is now available.\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install zod@latest\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eAt a glance:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/59bbc03e10c636b9eb3c393dfeb552819774ec21\"\u003e\u003ccode\u003e59bbc03\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee\"\u003e\u003ccode\u003e0f3f5ee\u003c/code\u003e\u003c/a\u003e 4.6.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9\"\u003e\u003ccode\u003ecc4cd4e\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, ref...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/ca0229a404818290e6cdcfefcd7eb2d04bcbb543\"\u003e\u003ccode\u003eca0229a\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/56222cd1532c07bcb91b67df529cab4c0a215330\"\u003e\u003ccode\u003e56222cd\u003c/code\u003e\u003c/a\u003e feat(instanceof): key the .properties() shape off the instance type (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6600\"\u003e#6600\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/de65a5cb39ed22a507fac935788f718fa88d104f\"\u003e\u003ccode\u003ede65a5c\u003c/code\u003e\u003c/a\u003e docs: lead the properties section with the check and add a Zod Mini tab (\u003ca href=\"https://redirect.github.com/colinhacks/zod/issues/6598\"\u003e#6598\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1\"\u003e\u003ccode\u003ef1448f7\u003c/code\u003e\u003c/a\u003e docs: fold the 4.6.x patch highlights into the 4.6 post's own sections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/d2b135cfb7a3582b9eb515756b9166bcb9521f4a\"\u003e\u003ccode\u003ed2b135c\u003c/code\u003e\u003c/a\u003e docs: add the 4.6.x patch highlights to the 4.6 post\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/2bb087170f22114b060f1e283bab09fd07963076\"\u003e\u003ccode\u003e2bb0871\u003c/code\u003e\u003c/a\u003e chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/colinhacks/zod/commit/743aedbba79e98ab8e32f2ce8a9f27b0910f0054\"\u003e\u003ccode\u003e743aedb\u003c/code\u003e\u003c/a\u003e 4.6.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for zod since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 12.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/sjsreehari/zerra/pull/68","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sjsreehari%2Fzerra/issues/68","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/68/packages"}},{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-05T03:22:50.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5705948146","node_id":"PR_kwDOU7-Bcs8AAAABGoM0mA","number":3,"state":"closed","title":"build(deps): bump commander from 14.0.3 to 15.0.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-24T10:10:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-05T03:22:50.000Z","updated_at":"2026-10-24T10:10:28.000Z","time_to_close":1666049,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.3 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=14.0.3\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/aniruddhaadak80/loadcurve-analyze/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/aniruddhaadak80%2Floadcurve-analyze/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"11.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-05T02:30:33.000Z","version_change":"11.1.0 → 15.0.0","issue":{"uuid":"5705575941","node_id":"PR_kwDOPz0YV88AAAABGn6QUQ","number":652,"state":"open","title":"chore(deps): bump the major group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-05T02:30:33.000Z","updated_at":"2026-10-05T02:31:06.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"major","update_count":6,"packages":[{"name":"chalk","old_version":"4.1.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"},{"name":"commander","old_version":"11.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"inquirer","old_version":"8.2.7","new_version":"14.2.2","repository_url":"https://github.com/SBoudrias/Inquirer.js"},{"name":"ora","old_version":"5.4.1","new_version":"9.4.1","repository_url":"https://github.com/sindresorhus/ora"},{"name":"vitest","old_version":"4.1.11","new_version":"5.0.3","repository_url":"https://github.com/vitest-dev/vitest"}],"path":null,"ecosystem":"npm"},"body":"Updates the requirements on [chalk](https://github.com/chalk/chalk), [commander](https://github.com/tj/commander.js), [inquirer](https://github.com/SBoudrias/Inquirer.js), [ora](https://github.com/sindresorhus/ora), [@types/inquirer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/inquirer) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) to permit the latest version.\nUpdates `chalk` from 4.1.2 to 6.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/chalk/chalk/releases\"\u003echalk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix inconsistent coercion of two arguments  9c93a04\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v6.0.0...v6.0.1\"\u003ehttps://github.com/chalk/chalk/compare/v6.0.0...v6.0.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 22  8a94e0e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd underline styles and underline colors (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/689\"\u003e#689\u003c/a\u003e)  4c304dd\u003c/li\u003e\n\u003cli\u003eImprove performance  5729845 fa5cff2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTreat a numeric \u003ccode\u003eFORCE_COLOR\u003c/code\u003e as an exact level (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/688\"\u003e#688\u003c/a\u003e)  e912931\u003c/li\u003e\n\u003cli\u003eDownsample \u003ccode\u003eansi256()\u003c/code\u003e and \u003ccode\u003ebgAnsi256()\u003c/code\u003e to 16 colors at level 1 (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/687\"\u003e#687\u003c/a\u003e)  ff549c5\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.6.2...v6.0.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.6.2...v6.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.6.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix vulnerability in 5.6.1, see: \u003ca href=\"https://redirect.github.com/chalk/chalk/issues/656\"\u003echalk/chalk#656\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake WezTerm terminal use true color  a8f5bf7\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.5.0...v5.6.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.5.0...v5.6.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.5.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMake Ghostty terminal use true color (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/653\"\u003e#653\u003c/a\u003e)  79ee2d3\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.4.1...v5.5.0\"\u003ehttps://github.com/chalk/chalk/compare/v5.4.1...v5.5.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003enavigator\u003c/code\u003e not defined \u003ccode\u003eReferenceError\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/642\"\u003e#642\u003c/a\u003e)  4ebb62d\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/chalk/chalk/compare/v5.4.0...v5.4.1\"\u003ehttps://github.com/chalk/chalk/compare/v5.4.0...v5.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003eCIRCLECI\u003c/code\u003e environments to return level 3 color support  f838120\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/47fc05abd46171b235e24174cd2dba83d25bf037\"\u003e\u003ccode\u003e47fc05a\u003c/code\u003e\u003c/a\u003e 6.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/9c93a04eae27fb1801764fbd60eb0811e2068b83\"\u003e\u003ccode\u003e9c93a04\u003c/code\u003e\u003c/a\u003e Fix inconsistent coercion of two arguments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/8960ada92ca0f9220c8863495bae78dcc0c323ee\"\u003e\u003ccode\u003e8960ada\u003c/code\u003e\u003c/a\u003e Meta tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/661317e6f91fe7c90306c2c48ea9354562ee9146\"\u003e\u003ccode\u003e661317e\u003c/code\u003e\u003c/a\u003e 6.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/5729845f33d357e0c21b29b2b16849b72fb8cec4\"\u003e\u003ccode\u003e5729845\u003c/code\u003e\u003c/a\u003e Improve performance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/4c304dd72cce5a036c02e5dd8af52996ae98501f\"\u003e\u003ccode\u003e4c304dd\u003c/code\u003e\u003c/a\u003e Add extended underline styles and underline colors (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/689\"\u003e#689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/e91293130c7d642c7b91152c3c942743a3b910a7\"\u003e\u003ccode\u003ee912931\u003c/code\u003e\u003c/a\u003e Fix: Treat a numeric \u003ccode\u003eFORCE_COLOR\u003c/code\u003e as an exact level (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/688\"\u003e#688\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/8a94e0ebfc495dda27f7090fb1a012790b15a76d\"\u003e\u003ccode\u003e8a94e0e\u003c/code\u003e\u003c/a\u003e Require Node.js 22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/fa5cff280e821c928dab716a03beff06529ffaf3\"\u003e\u003ccode\u003efa5cff2\u003c/code\u003e\u003c/a\u003e Optimize 2-argument calls (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/chalk/chalk/commit/ff549c534c413a9225322c1ff4e5fc0d97ae5610\"\u003e\u003ccode\u003eff549c5\u003c/code\u003e\u003c/a\u003e Fix: Downsample \u003ccode\u003eansi256()\u003c/code\u003e and \u003ccode\u003ebgAnsi256()\u003c/code\u003e to 16 colors at level 1 (\u003ca href=\"https://redirect.github.com/chalk/chalk/issues/687\"\u003e#687\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/chalk/chalk/compare/v4.1.2...v6.0.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `commander` from 11.1.0 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v11.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `inquirer` from 8.2.7 to 14.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/SBoudrias/Inquirer.js/releases\"\u003einquirer's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003einquirer@14.2.2\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (\u003ccode\u003e@inquirer/core\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2255\"\u003e#2255\u003c/a\u003e, closes \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/1816\"\u003e#1816\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003econfirm()\u003c/code\u003e now trims surrounding whitespace from answers before matching yes/no keywords (\u003ccode\u003e@inquirer/confirm\u003c/code\u003e, \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2254\"\u003e#2254\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.3\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.2\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.2.1\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePublished manifests now pin \u003ccode\u003e@inquirer/type\u003c/code\u003e to an exact version. Since these type definitions leak into consumers' \u003ccode\u003etsc\u003c/code\u003e runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/pull/2247\"\u003e#2247\u003c/a\u003e, fixes \u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2244\"\u003e#2244\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/type@4.1.1\u003c/code\u003e (pinned exactly)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/ansi@^2.0.8\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.2.0\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated to \u003ccode\u003e@inquirer/prompts@^8.7.0\u003c/code\u003e and \u003ccode\u003e@inquirer/core@^12.0.1\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eIncludes the new \u003ccode\u003etoggleMask\u003c/code\u003e option for \u003ccode\u003epassword\u003c/code\u003e (ctrl+t to reveal), localized yes/no parsing for \u003ccode\u003econfirm\u003c/code\u003e, and prettified prompt/theme types for better IDE display.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eIncluded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/core@^12.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/prompts@^8.7.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/type@^4.1.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@inquirer/ansi@^2.0.7\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003einquirer@14.1.0\u003c/h2\u003e\n\u003cp\u003eThe umbrella package, bundling \u003ccode\u003e@inquirer/prompts\u003c/code\u003e and \u003ccode\u003e@inquirer/core\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eWhat's new\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/cbdb34bfc6c245941d80ef88493c50b3d6dbfce6\"\u003e\u003ccode\u003ecbdb34b\u003c/code\u003e\u003c/a\u003e chore: Publish new release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/8340d2dd764d4b11d4e200412b614f9964ae0691\"\u003e\u003ccode\u003e8340d2d\u003c/code\u003e\u003c/a\u003e fix(\u003ccode\u003e@​inquirer/core\u003c/code\u003e): clear hook effects before settling prompts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/2475e07186d824d52504095c71c2272d9e7338fe\"\u003e\u003ccode\u003e2475e07\u003c/code\u003e\u003c/a\u003e test(\u003ccode\u003e@​inquirer/core\u003c/code\u003e): cover hook cleanup error semantics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/15cd8d3b53bfc270633072073c24d6be6ce3d83b\"\u003e\u003ccode\u003e15cd8d3\u003c/code\u003e\u003c/a\u003e fix(confirm): ignore surrounding whitespace in answers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/9cb0da6c187346c955ab0b788fa1a88c897f16da\"\u003e\u003ccode\u003e9cb0da6\u003c/code\u003e\u003c/a\u003e chore(deps): Bump github/codeql-action/analyze from 4.37.7 to 4.37.9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/1c750bc55ab4fac310d70db84a7a6ada76c0e854\"\u003e\u003ccode\u003e1c750bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump the build group with 3 updates (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2251\"\u003e#2251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/81f1525110990603e9796d48eecde0f8c2d2fc98\"\u003e\u003ccode\u003e81f1525\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump \u003ccode\u003e@​types/node\u003c/code\u003e in the types group (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2252\"\u003e#2252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/7c27f26606a16b6e8f55b51e4431c72658c674c5\"\u003e\u003ccode\u003e7c27f26\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump oxfmt in the formatting group (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2249\"\u003e#2249\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/6119088a4e07ec59460c3cd44d06817de97bfdac\"\u003e\u003ccode\u003e6119088\u003c/code\u003e\u003c/a\u003e chore(deps): Bump github/codeql-action/init from 4.37.7 to 4.37.9 (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2250\"\u003e#2250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SBoudrias/Inquirer.js/commit/0d167c0aface3f5cf95132ada9bfec7946dd5b74\"\u003e\u003ccode\u003e0d167c0\u003c/code\u003e\u003c/a\u003e chore(deps-dev): Bump the linting group with 4 updates (\u003ca href=\"https://redirect.github.com/SBoudrias/Inquirer.js/issues/2248\"\u003e#2248\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.7...inquirer@14.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for inquirer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ora` from 5.4.1 to 9.4.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sindresorhus/ora/releases\"\u003eora's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.4.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix type definitions (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/257\"\u003e#257\u003c/a\u003e)  431ebc4\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003efailText\u003c/code\u003e type to accept \u003ccode\u003eunknown\u003c/code\u003e instead of \u003ccode\u003eError\u003c/code\u003e, matching the actual promise rejection value  bc3a283\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.4.0...v9.4.1\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.4.0...v9.4.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003esuccessSymbol\u003c/code\u003e and \u003ccode\u003efailSymbol\u003c/code\u003e options to \u003ccode\u003eoraPromise\u003c/code\u003e  3d2e0a9\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.3.0...v9.4.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.3.0...v9.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduce flicker in rendering  2ab4f76\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.2.0...v9.3.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.2.0...v9.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003estdin-discarder\u003c/code\u003e dependency (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/251\"\u003e#251\u003c/a\u003e)  020eaba\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.1.0...v9.2.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.1.0...v9.2.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport external writes to stream (\u003ccode\u003econsole.log\u003c/code\u003e) while spinning  d2b543a\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003estrip-ansi\u003c/code\u003e dependency with native \u003ccode\u003estripVTControlCharacters\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/249\"\u003e#249\u003c/a\u003e)  68d50e5\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/sindresorhus/ora/compare/v9.0.0...v9.1.0\"\u003ehttps://github.com/sindresorhus/ora/compare/v9.0.0...v9.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev9.0.0\u003c/h2\u003e\n\u003ch3\u003eBreaking\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Node.js 20  7aca06d\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix clearing in some cases  aa51538\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eframe()\u003c/code\u003e not displaying dynamic \u003ccode\u003eprefixText\u003c/code\u003e/\u003ccode\u003esuffixText\u003c/code\u003e from functions  0f19f57\u003c/li\u003e\n\u003cli\u003eFix multiline text exceeding console height leaving garbage when scrolling  45d30ad\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/79cd8c15ac34572cffb3ab53e3d4b6bab6d59ea8\"\u003e\u003ccode\u003e79cd8c1\u003c/code\u003e\u003c/a\u003e 9.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/bc3a28363a9873304ffb56420cb55fe83a7f41e8\"\u003e\u003ccode\u003ebc3a283\u003c/code\u003e\u003c/a\u003e Minor tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/431ebc40dceb1f700f3b60821f139541dbd7c93d\"\u003e\u003ccode\u003e431ebc4\u003c/code\u003e\u003c/a\u003e Fix type definitions (\u003ca href=\"https://redirect.github.com/sindresorhus/ora/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/46a670390249718af7c66452afdc5d78ceb579e9\"\u003e\u003ccode\u003e46a6703\u003c/code\u003e\u003c/a\u003e 9.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/3d2e0a907e1141a121e5ed3348d9ea0981ca8a9c\"\u003e\u003ccode\u003e3d2e0a9\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003esuccessSymbol\u003c/code\u003e and \u003ccode\u003efailSymbol\u003c/code\u003e options to \u003ccode\u003eoraPromise\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/f70f613d72f0afb0f4cb0a7fe56268f8abd1a170\"\u003e\u003ccode\u003ef70f613\u003c/code\u003e\u003c/a\u003e Test tweaks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/7cf29a75e64409205a6606dada9780ccf5acf6a8\"\u003e\u003ccode\u003e7cf29a7\u003c/code\u003e\u003c/a\u003e Validate some options better\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/4496362714e1edd414e5347e8d4b337f103f0e15\"\u003e\u003ccode\u003e4496362\u003c/code\u003e\u003c/a\u003e 9.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/2ab4f7613879515e29039888115831422f49e1af\"\u003e\u003ccode\u003e2ab4f76\u003c/code\u003e\u003c/a\u003e Reduce flicker in rendering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sindresorhus/ora/commit/8d17b13a8b3330af16cfa24c6e3b8a99f678c5c4\"\u003e\u003ccode\u003e8d17b13\u003c/code\u003e\u003c/a\u003e Add FAQ item\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sindresorhus/ora/compare/v5.4.1...v9.4.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@types/inquirer` to 9.0.10\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/inquirer\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vitest` from 4.1.11 to 5.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003evitest's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIsolate \u003ccode\u003eresult.status\u003c/code\u003e between \u003ccode\u003erepeats\u003c/code\u003e runs  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11218\"\u003evitest-dev/vitest#11218\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5dbebe9e3\"\u003e\u003c!-- raw HTML omitted --\u003e(5dbeb)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't print an interceptor warning in browser mode  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11377\"\u003evitest-dev/vitest#11377\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa\"\u003e\u003c!-- raw HTML omitted --\u003e(15cc0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't retry when \u003ccode\u003etest.fails\u003c/code\u003e expectedly failed  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11219\"\u003evitest-dev/vitest#11219\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b24585f08\"\u003e\u003c!-- raw HTML omitted --\u003e(b2458)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eScope cache key generators to projects  -  by \u003ca href=\"https://github.com/ecoyoung\"\u003e\u003ccode\u003e@​ecoyoung\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11281\"\u003evitest-dev/vitest#11281\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11301\"\u003evitest-dev/vitest#11301\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/92ba7fc1d\"\u003e\u003c!-- raw HTML omitted --\u003e(92ba7)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDelay server \u003ccode\u003elisten\u003c/code\u003e until tests start running  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11366\"\u003evitest-dev/vitest#11366\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7d8ed3e9b\"\u003e\u003c!-- raw HTML omitted --\u003e(7d8ed)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCheck mock path boundaries  -  by \u003ca href=\"https://github.com/saryn17\"\u003e\u003ccode\u003e@​saryn17\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eRyosei Sato\u003c/strong\u003e and \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11361\"\u003evitest-dev/vitest#11361\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11362\"\u003evitest-dev/vitest#11362\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1c3888bce\"\u003e\u003c!-- raw HTML omitted --\u003e(1c388)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep config of browser-consumed environments  -  by \u003ca href=\"https://github.com/kasperpeulen\"\u003e\u003ccode\u003e@​kasperpeulen\u003c/code\u003e\u003c/a\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11378\"\u003evitest-dev/vitest#11378\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/aafc0996f\"\u003e\u003c!-- raw HTML omitted --\u003e(aafc0)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIgnore page crash while cancelling  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11386\"\u003evitest-dev/vitest#11386\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c36748fa\"\u003e\u003c!-- raw HTML omitted --\u003e(7c367)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etoMatchScreenshot\u003c/code\u003e uses wrong reference on retried tests  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11393\"\u003evitest-dev/vitest#11393\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c22aba992\"\u003e\u003c!-- raw HTML omitted --\u003e(c22ab)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecache\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eRevalidate imports of cached modules  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11381\"\u003evitest-dev/vitest#11381\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/38f98855f\"\u003e\u003c!-- raw HTML omitted --\u003e(38f98)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePin \u003ccode\u003ewhy-is-node-running\u003c/code\u003e to \u003ccode\u003e3.2.1\u003c/code\u003e to avoid users running into \u003ccode\u003eERR_PNPM_TRUST_DOWNGRADE\u003c/code\u003e  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11403\"\u003evitest-dev/vitest#11403\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f6c9a4977\"\u003e\u003c!-- raw HTML omitted --\u003e(f6c9a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpect\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePass current equality testers to \u003ccode\u003eexpect.extend\u003c/code\u003e asymmetric matchers  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11401\"\u003evitest-dev/vitest#11401\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3e794a96b\"\u003e\u003c!-- raw HTML omitted --\u003e(3e794)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejsdom\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSupport Blob on jsdom 30.1  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11379\"\u003evitest-dev/vitest#11379\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c49b7197\"\u003e\u003c!-- raw HTML omitted --\u003e(6c49b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epool\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePreserve unique pool ids when \u003ccode\u003egroupOrder\u003c/code\u003e is set  -  by \u003ca href=\"https://github.com/mtorp\"\u003e\u003ccode\u003e@​mtorp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11392\"\u003evitest-dev/vitest#11392\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/50312ebb4\"\u003e\u003c!-- raw HTML omitted --\u003e(50312)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eSplit-pane handle overlapping iframe  -  by \u003ca href=\"https://github.com/macarie\"\u003e\u003ccode\u003e@​macarie\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11221\"\u003evitest-dev/vitest#11221\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f91db0dfd\"\u003e\u003c!-- raw HTML omitted --\u003e(f91db)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evitest\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eRemove root temp dir on close  -  by \u003ca href=\"https://github.com/abhinav-phi\"\u003e\u003ccode\u003e@​abhinav-phi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11248\"\u003evitest-dev/vitest#11248\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c7119cf7\"\u003e\u003c!-- raw HTML omitted --\u003e(7c711)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evm\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eDo not optimize deps from index.html  -  by \u003ca href=\"https://github.com/ezefernandezyf\"\u003e\u003ccode\u003e@​ezefernandezyf\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-6)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11329\"\u003evitest-dev/vitest#11329\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11360\"\u003evitest-dev/vitest#11360\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caf2887de\"\u003e\u003c!-- raw HTML omitted --\u003e(caf28)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDon't reuse scripts across vite environments  -  by \u003ca href=\"https://github.com/MO2k4\"\u003e\u003ccode\u003e@​MO2k4\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eMartin Oehlert\u003c/strong\u003e and \u003cstrong\u003eClaude\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11395\"\u003evitest-dev/vitest#11395\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/346d3896b\"\u003e\u003c!-- raw HTML omitted --\u003e(346d3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBind \u003ccode\u003eprocess\u003c/code\u003e in case global is overwritten  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11343\"\u003evitest-dev/vitest#11343\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0b79231ad\"\u003e\u003c!-- raw HTML omitted --\u003e(0b792)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edetect-async-leaks\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore \u003ccode\u003eprocess.stdio\u003c/code\u003e handles  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11333\"\u003evitest-dev/vitest#11333\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/0fd6b9790\"\u003e\u003c!-- raw HTML omitted --\u003e(0fd6b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eexpect\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003etoMatchObject\u003c/code\u003e with asymmetric matchers  -  by \u003ca href=\"https://github.com/ShreeBohara\"\u003e\u003ccode\u003e@​ShreeBohara\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eClaude Opus 5\u003c/strong\u003e, \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eCodex (GPT-5)\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11100\"\u003evitest-dev/vitest#11100\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/42523289e\"\u003e\u003c!-- raw HTML omitted --\u003e(42523)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ejsdom\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eRequest\u003c/code\u003e with \u003ccode\u003eBlob\u003c/code\u003e body on jsdom 28+  -  by \u003ca href=\"https://github.com/harshit-d3v\"\u003e\u003ccode\u003e@​harshit-d3v\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11295\"\u003evitest-dev/vitest#11295\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d1c3ecc93\"\u003e\u003c!-- raw HTML omitted --\u003e(d1c3e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eagent\u003c/code\u003e to respect \u003ccode\u003e--silent\u003c/code\u003e  -  by \u003ca href=\"https://github.com/Raj4478\"\u003e\u003ccode\u003e@​Raj4478\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11271\"\u003evitest-dev/vitest#11271\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5b95efb6d\"\u003e\u003c!-- raw HTML omitted --\u003e(5b95e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporters\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eHandle concurrent \u003ccode\u003ecreateReport\u003c/code\u003e calls  -  by \u003ca href=\"https://github.com/7rulnik\"\u003e\u003ccode\u003e@​7rulnik\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11278\"\u003evitest-dev/vitest#11278\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e8e556ff7\"\u003e\u003c!-- raw HTML omitted --\u003e(e8e55)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehanging-process\u003c/code\u003e to use ESM entrypoint  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11316\"\u003evitest-dev/vitest#11316\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4e91e5668\"\u003e\u003c!-- raw HTML omitted --\u003e(4e91e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003espy\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eFix stack overflow when spying \u003ccode\u003eSet.prototype.add\u003c/code\u003e  -  by \u003ca href=\"https://github.com/fengmk2\"\u003e\u003ccode\u003e@​fengmk2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11299\"\u003evitest-dev/vitest#11299\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a0a939653\"\u003e\u003c!-- raw HTML omitted --\u003e(a0a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/346d3896b65c3c907174447a035807342799f346\"\u003e\u003ccode\u003e346d389\u003c/code\u003e\u003c/a\u003e fix(vm): don't reuse scripts across vite environments (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11395\"\u003e#11395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/f6c9a4977ad3363f796a737834572e54c6ad5c18\"\u003e\u003ccode\u003ef6c9a49\u003c/code\u003e\u003c/a\u003e fix(deps): pin \u003ccode\u003ewhy-is-node-running\u003c/code\u003e to \u003ccode\u003e3.2.1\u003c/code\u003e to avoid users running into `...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/062c75d8b63519211d951d8293ea81b5a9e3c124\"\u003e\u003ccode\u003e062c75d\u003c/code\u003e\u003c/a\u003e chore: fix standalone docs build, update exports maps (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11394\"\u003e#11394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/caf2887dee8987a60118d53933f6e9cabd6b3e2a\"\u003e\u003ccode\u003ecaf2887\u003c/code\u003e\u003c/a\u003e fix(vm): do not optimize deps from index.html (fix \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11329\"\u003e#11329\u003c/a\u003e) (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11360\"\u003e#11360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/50312ebb4eca6a98f6d0b2b61d5d9d38cbbabcef\"\u003e\u003ccode\u003e50312eb\u003c/code\u003e\u003c/a\u003e fix(pool): preserve unique pool ids when \u003ccode\u003egroupOrder\u003c/code\u003e is set (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11392\"\u003e#11392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7c36748fad1eae9687312f2f7ceadce6ec88b5df\"\u003e\u003ccode\u003e7c36748\u003c/code\u003e\u003c/a\u003e fix(browser): ignore page crash while cancelling (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11386\"\u003e#11386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/92ba7fc1df16a4fa5bbee3f198c582fbd56689d8\"\u003e\u003ccode\u003e92ba7fc\u003c/code\u003e\u003c/a\u003e fix: scope cache key generators to projects (fix \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11281\"\u003e#11281\u003c/a\u003e) (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11301\"\u003e#11301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/38f98855fa9cd7fd376afb84094eba0fda256a74\"\u003e\u003ccode\u003e38f9885\u003c/code\u003e\u003c/a\u003e fix(cache): revalidate imports of cached modules (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11381\"\u003e#11381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b24585f08f2ea267746a2d6ca0e43edcbb29726f\"\u003e\u003ccode\u003eb24585f\u003c/code\u003e\u003c/a\u003e fix: don't retry when \u003ccode\u003etest.fails\u003c/code\u003e expectedly failed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11219\"\u003e#11219\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/slimatic/zakapp/pull/652","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/slimatic%2Fzakapp/issues/652","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/652/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-10-02T09:13:47.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5675365635","node_id":"PR_kwDOTLn0ac8AAAABGQUcpw","number":513,"state":"open","title":"chore(deps): bump the npm-dependencies group across 1 directory with 55 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-02T09:13:47.000Z","updated_at":"2026-10-02T09:14:04.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-dependencies","update_count":55,"packages":[{"name":"@prisma/client","old_version":"6.19.3","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma"},{"name":"eslint","old_version":"9.39.5","new_version":"10.11.0","repository_url":"https://github.com/eslint/eslint"},{"name":"lint-staged","old_version":"17.4.1","new_version":"17.6.0","repository_url":"https://github.com/lint-staged/lint-staged"},{"name":"tsx","old_version":"4.23.1","new_version":"4.23.15","repository_url":"https://github.com/privatenumber/tsx"},{"name":"turbo","old_version":"2.10.11","new_version":"2.11.5","repository_url":"https://github.com/vercel/turborepo"},{"name":"typescript","old_version":"5.9.3","new_version":"7.0.2","repository_url":"https://github.com/microsoft/TypeScript"},{"name":"@apollo/server","old_version":"4.13.0","new_version":"5.5.1","repository_url":"https://github.com/apollographql/apollo-server"},{"name":"@fastify/swagger","old_version":"9.8.1","new_version":"9.9.0","repository_url":"https://github.com/fastify/fastify-swagger"},{"name":"@grpc/grpc-js","old_version":"1.14.4","new_version":"1.14.5","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@grpc/proto-loader","old_version":"0.7.15","new_version":"0.8.1","repository_url":"https://github.com/grpc/grpc-node"},{"name":"@opentelemetry/exporter-trace-otlp-http","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/instrumentation-http","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/resources","old_version":"1.30.1","new_version":"2.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@opentelemetry/sdk-node","old_version":"0.221.0","new_version":"0.222.0","repository_url":"https://github.com/open-telemetry/opentelemetry-js"},{"name":"@prisma/adapter-pg","old_version":"7.9.0","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma"},{"name":"bullmq","old_version":"5.81.3","new_version":"6.3.9","repository_url":"https://github.com/taskforcesh/bullmq"},{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"dotenv","old_version":"17.4.2","new_version":"18.0.4","repository_url":"https://github.com/motdotla/dotenv"},{"name":"fastify","old_version":"5.10.0","new_version":"5.12.5","repository_url":"https://github.com/fastify/fastify"},{"name":"graphql","old_version":"16.14.2","new_version":"17.0.2","repository_url":"https://github.com/graphql/graphql-js"},{"name":"graphql-subscriptions","old_version":"2.0.0","new_version":"3.0.0","repository_url":"https://github.com/apollographql/graphql-subscriptions"},{"name":"ink","old_version":"5.2.1","new_version":"7.1.1","repository_url":"https://github.com/vadimdemedes/ink"},{"name":"otplib","old_version":"12.0.1","new_version":"13.5.0","repository_url":"https://github.com/yeojz/otplib"},{"name":"pdfkit","old_version":"0.20.1","new_version":"0.20.2","repository_url":"https://github.com/foliojs/pdfkit"},{"name":"pg","old_version":"8.22.0","new_version":"8.23.0","repository_url":"https://github.com/brianc/node-postgres"},{"name":"@types/pg","old_version":"8.20.0","new_version":"8.23.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"react","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react","old_version":"19.2.17","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"resend","old_version":"3.5.0","new_version":"6.30.0","repository_url":"https://github.com/resend/resend-node"},{"name":"zod","old_version":"3.25.76","new_version":"4.6.5","repository_url":"https://github.com/colinhacks/zod"},{"name":"@types/node","old_version":"20.19.43","new_version":"26.6.3","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/pg","old_version":"8.20.0","new_version":"8.23.1","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/react","old_version":"19.2.17","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/ws","old_version":"8.18.1","new_version":"8.18.2","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"fast-check","old_version":"3.23.2","new_version":"4.10.2","repository_url":"https://github.com/dubzzz/fast-check"},{"name":"pkg-types","old_version":"2.3.1","new_version":"2.3.3","repository_url":"https://github.com/unjs/pkg-types"},{"name":"prisma","old_version":"7.9.0","new_version":"7.10.0","repository_url":"https://github.com/prisma/prisma-cli"},{"name":"@react-three/fiber","old_version":"9.7.0","new_version":"9.8.1","repository_url":"https://github.com/pmndrs/react-three-fiber"},{"name":"next","old_version":"16.2.10","new_version":"16.3.7","repository_url":"https://github.com/vercel/next.js"},{"name":"next-auth","old_version":"4.24.14","new_version":"4.24.15","repository_url":"https://github.com/nextauthjs/next-auth"},{"name":"react-dom","old_version":"19.2.4","new_version":"19.3.0","repository_url":"https://github.com/react/react"},{"name":"@types/react-dom","old_version":"19.2.3","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"three","old_version":"0.171.0","new_version":"0.186.1","repository_url":"https://github.com/mrdoob/three.js"},{"name":"y-websocket","old_version":"2.1.0","new_version":"3.1.0","repository_url":"https://github.com/yjs/y-websocket"},{"name":"yjs","old_version":"13.6.32","new_version":"13.6.33","repository_url":"https://github.com/yjs/yjs"},{"name":"@tailwindcss/postcss","old_version":"4.3.2","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"@testing-library/dom","old_version":"10.4.1","new_version":"10.4.2","repository_url":"https://github.com/testing-library/dom-testing-library"},{"name":"@testing-library/jest-dom","old_version":"6.9.1","new_version":"7.0.1","repository_url":"https://github.com/testing-library/jest-dom"},{"name":"@testing-library/react","old_version":"16.3.2","new_version":"16.3.3","repository_url":"https://github.com/testing-library/react-testing-library"},{"name":"@testing-library/user-event","old_version":"14.6.6","new_version":"14.6.7","repository_url":"https://github.com/testing-library/user-event"},{"name":"@types/react-dom","old_version":"19.2.3","new_version":"19.3.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@types/three","old_version":"0.171.0","new_version":"0.186.0","repository_url":"https://github.com/DefinitelyTyped/DefinitelyTyped"},{"name":"@vitejs/plugin-react","old_version":"4.7.0","new_version":"6.1.1","repository_url":"https://github.com/vitejs/vite-plugin-react"},{"name":"eslint-config-next","old_version":"16.2.10","new_version":"16.3.7","repository_url":"https://github.com/vercel/next.js"},{"name":"jsdom","old_version":"25.0.1","new_version":"30.1.1","repository_url":"https://github.com/jsdom/jsdom"},{"name":"tailwindcss","old_version":"4.3.2","new_version":"4.3.3","repository_url":"https://github.com/tailwindlabs/tailwindcss"},{"name":"chalk","old_version":"5.6.2","new_version":"6.0.1","repository_url":"https://github.com/chalk/chalk"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-dependencies group with 55 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `6.19.3` | `7.10.0` |\n| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.11.0` |\n| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` |\n| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.15` |\n| [turbo](https://github.com/vercel/turborepo) | `2.10.11` | `2.11.5` |\n| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |\n| [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `4.13.0` | `5.5.1` |\n| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.8.1` | `9.9.0` |\n| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.4` | `1.14.5` |\n| [@grpc/proto-loader](https://github.com/grpc/grpc-node) | `0.7.15` | `0.8.1` |\n| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.1` | `2.11.0` |\n| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` |\n| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.0` | `7.10.0` |\n| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.3` | `6.3.9` |\n| [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` |\n| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.4` |\n| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.5` |\n| [graphql](https://github.com/graphql/graphql-js) | `16.14.2` | `17.0.2` |\n| [graphql-subscriptions](https://github.com/apollographql/graphql-subscriptions) | `2.0.0` | `3.0.0` |\n| [ink](https://github.com/vadimdemedes/ink) | `5.2.1` | `7.1.1` |\n| [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib) | `12.0.1` | `13.5.0` |\n| [pdfkit](https://github.com/foliojs/pdfkit) | `0.20.1` | `0.20.2` |\n| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |\n| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |\n| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.3.0` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |\n| [resend](https://github.com/resend/resend-node) | `3.5.0` | `6.30.0` |\n| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.5` |\n| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.43` | `26.6.3` |\n| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` |\n| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |\n| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |\n| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `3.23.2` | `4.10.2` |\n| [pkg-types](https://github.com/unjs/pkg-types) | `2.3.1` | `2.3.3` |\n| [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.0` | `7.10.0` |\n| [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.7.0` | `9.8.1` |\n| [next](https://github.com/vercel/next.js) | `16.2.10` | `16.3.7` |\n| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.14` | `4.24.15` |\n| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.3.0` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |\n| [three](https://github.com/mrdoob/three.js) | `0.171.0` | `0.186.1` |\n| [y-websocket](https://github.com/yjs/y-websocket) | `2.1.0` | `3.1.0` |\n| [yjs](https://github.com/yjs/yjs) | `13.6.32` | `13.6.33` |\n| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` |\n| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |\n| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.1` |\n| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |\n| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.6` | `14.6.7` |\n| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |\n| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.171.0` | `0.186.0` |\n| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `6.1.1` |\n| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.10` | `16.3.7` |\n| [jsdom](https://github.com/jsdom/jsdom) | `25.0.1` | `30.1.1` |\n| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |\n| [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.1` |\n\n\nUpdates `@prisma/client` from 6.19.3 to 7.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prisma/prisma/releases\"\u003e@​prisma/client's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e7.10.0\u003c/h2\u003e\n\u003ch1\u003ePrisma ORM 7.10.0\u003c/h1\u003e\n\u003cp\u003ePrisma ORM 7.10.0 introduces a compatibility package for running Prisma 7 alongside newer Prisma versions, secures Prisma Studio's local server, and includes fixes across Prisma Client and the PostgreSQL, MariaDB, Neon, SQLite, and Prisma Postgres Serverless adapters.\u003c/p\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003ch3\u003eRun Prisma 7 alongside Prisma 8\u003c/h3\u003e\n\u003cp\u003eThis release introduces \u003ccode\u003e@prisma/prisma7\u003c/code\u003e, a compatibility package that lets you retain a matching Prisma 7 CLI and configuration while installing Prisma 8 in the same project.\u003c/p\u003e\n\u003cp\u003eOnce 7.10.0 is released, a side-by-side installation can use:\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpm install --save-dev prisma@8 @prisma/prisma7@7.10.0\r\nnpm install @prisma/client@7.10.0\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eUse \u003ccode\u003eprisma\u003c/code\u003e for the directly installed Prisma 8 CLI and \u003ccode\u003eprisma7\u003c/code\u003e for Prisma 7:\u003c/p\u003e\n\u003cpre lang=\"sh\"\u003e\u003ccode\u003enpx prisma --version\r\nnpx prisma7 --version\r\n\u003cp\u003enpx prisma7 generate\u003cbr /\u003e\nnpx prisma7 migrate dev\u003cbr /\u003e\nnpx prisma7 db push\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003ePrisma 7 now prefers version-specific configuration files, allowing its configuration to coexist with Prisma 8's \u003ccode\u003eprisma.config.*\u003c/code\u003e files:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003e// prisma7.config.ts\r\nimport { defineConfig } from '@prisma/prisma7/config'\r\n\u003cp\u003eexport default defineConfig({\u003cbr /\u003e\nschema: 'prisma/schema.prisma',\u003cbr /\u003e\nmigrations: {\u003cbr /\u003e\npath: 'prisma/migrations',\u003cbr /\u003e\n},\u003cbr /\u003e\n})\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eWithout an explicit \u003ccode\u003e--config\u003c/code\u003e option, Prisma 7 searches for:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eRoot-level \u003ccode\u003eprisma7.config.*\u003c/code\u003e files.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e.config/prisma7.*\u003c/code\u003e files.\u003c/li\u003e\n\u003cli\u003eExisting \u003ccode\u003eprisma.config.*\u003c/code\u003e files as a backwards-compatible fallback.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eThe supported extensions are \u003ccode\u003e.js\u003c/code\u003e, \u003ccode\u003e.ts\u003c/code\u003e, \u003ccode\u003e.mjs\u003c/code\u003e, \u003ccode\u003e.cjs\u003c/code\u003e, \u003ccode\u003e.mts\u003c/code\u003e, and \u003ccode\u003e.cts\u003c/code\u003e. An explicit config path always takes precedence:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/05c1b8870678db5efc787b95172e4155f0712c7d\"\u003e\u003ccode\u003e05c1b88\u003c/code\u003e\u003c/a\u003e Teach Prisma 7 to prefer versioned config files (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/30020\"\u003e#30020\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/cf2bc1f4b2d781330d09c7b425272734e3a2e9d2\"\u003e\u003ccode\u003ecf2bc1f\u003c/code\u003e\u003c/a\u003e Rename prisma7 package to \u003ccode\u003e@​prisma/prisma7\u003c/code\u003e (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/30002\"\u003e#30002\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/ce5a34cbe0d77228b1dbebb020b72460e883f2b9\"\u003e\u003ccode\u003ece5a34c\u003c/code\u003e\u003c/a\u003e Complete downstream actionable Prisma 7 guidance propagation (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29994\"\u003e#29994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/3f13ec60f8506fa882556bc257cbeff28eb6e392\"\u003e\u003ccode\u003e3f13ec6\u003c/code\u003e\u003c/a\u003e Complete CLI-owned prisma7 distribution identity (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29969\"\u003e#29969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/179ba0c56b80b77e0708e5b07373135592d93f5e\"\u003e\u003ccode\u003e179ba0c\u003c/code\u003e\u003c/a\u003e feat(prisma7): add side-by-side CLI wrapper (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29949\"\u003e#29949\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/3fa65ac134696ca8eb3d1f869b1ab894ce5c93eb\"\u003e\u003ccode\u003e3fa65ac\u003c/code\u003e\u003c/a\u003e fix(p2002): correct modelName in nested create unique constraint errors \u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/2959\"\u003e#2959\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/6b6d9e90b002b4bf29e3f0d642a16629fae21a6b\"\u003e\u003ccode\u003e6b6d9e9\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-4.0edf323efd1d98336f3f0a68684b56f689b90...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/b64e33c9c21e23e83b5fedb3786ae25125394114\"\u003e\u003ccode\u003eb64e33c\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-3.9d90ce2c89d5c95a1148aef15e5561ab6c490...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/2046f9b74bc68d283c586e7c8e83da192e448d9b\"\u003e\u003ccode\u003e2046f9b\u003c/code\u003e\u003c/a\u003e feat(client): expose ModelName to compute function in Result extensions (\u003ca href=\"https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29782\"\u003e#29782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prisma/orm/commit/f2b3abd550657bf80f2cfdeafdbb5a2f10dc256b\"\u003e\u003ccode\u003ef2b3abd\u003c/code\u003e\u003c/a\u003e chore(deps): update engines to 7.10.0-1.6d040c802892de6d56c7e0061b7a10b3e6a0c...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prisma/prisma/commits/7.10.0/packages/client\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `eslint` from 9.39.5 to 10.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/eslint/eslint/releases\"\u003eeslint's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.11.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127\"\u003e\u003ccode\u003ed136fa4\u003c/code\u003e\u003c/a\u003e feat: object-shorthand handle quoted properties for \u003ccode\u003eignoreConstructors\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21271\"\u003e#21271\u003c/a\u003e) (Pavel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/397b3b8134b8ce1a61cbf414d4c29c945ba25690\"\u003e\u003ccode\u003e397b3b8\u003c/code\u003e\u003c/a\u003e feat: report unsafe labeled \u003ccode\u003econtinue\u003c/code\u003e in \u003ccode\u003eno-unsafe-finally\u003c/code\u003e rule (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21316\"\u003e#21316\u003c/a\u003e) (electrohyun)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d3dd47f42e4cb5f9da27e3a2e741aa21e02ea1a4\"\u003e\u003ccode\u003ed3dd47f\u003c/code\u003e\u003c/a\u003e feat: only exempt \u003ccode\u003enew-cap\u003c/code\u003e built-ins that reference the global (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21290\"\u003e#21290\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476\"\u003e\u003ccode\u003e22b09f5\u003c/code\u003e\u003c/a\u003e fix: ignore \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eprefer-object-spread\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21311\"\u003e#21311\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b684bb1cd7e6be03ad1b7a951baead936d9c2166\"\u003e\u003ccode\u003eb684bb1\u003c/code\u003e\u003c/a\u003e fix: make TimePass.parse optional in types and docs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21313\"\u003e#21313\u003c/a\u003e) (ntnyq)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/26d11bce3e0e21f223613d4bb4be3423839b229e\"\u003e\u003ccode\u003e26d11bc\u003c/code\u003e\u003c/a\u003e fix: don't report \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eobject-shorthand\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21310\"\u003e#21310\u003c/a\u003e) (xbinaryx)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa\"\u003e\u003ccode\u003e9ecfdc5\u003c/code\u003e\u003c/a\u003e docs: note that --cache can serve stale results for cross-file rules (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21312\"\u003e#21312\u003c/a\u003e) (bytedoe)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/6c789ff39bc5420e94e8dafeb328bf2b7e3d35ab\"\u003e\u003ccode\u003e6c789ff\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5997825635dc9c4e81434894607ef2e3887e0ea3\"\u003e\u003ccode\u003e5997825\u003c/code\u003e\u003c/a\u003e docs: clarify preserve-caught-error known limitation (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21294\"\u003e#21294\u003c/a\u003e) (Akinyemi Toluwalase)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68\"\u003e\u003ccode\u003e520dd77\u003c/code\u003e\u003c/a\u003e perf: Implement fast paths in critical areas (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21210\"\u003e#21210\u003c/a\u003e) (Nicholas C. Zakas)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a\"\u003e\u003ccode\u003e92086c8\u003c/code\u003e\u003c/a\u003e test: update \u003ccode\u003eEMFILE\u003c/code\u003e error generation for Node.js 26.9.0 compatibility (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21330\"\u003e#21330\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e\"\u003e\u003ccode\u003e9ac7eb6\u003c/code\u003e\u003c/a\u003e chore: update github/codeql-action action to v4.38.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21331\"\u003e#21331\u003c/a\u003e) (renovate[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd\"\u003e\u003ccode\u003e24310e3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21324\"\u003e#21324\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651\"\u003e\u003ccode\u003e45ad79e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21318\"\u003e#21318\u003c/a\u003e) (dependabot[bot])\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/ac74e37322ebf122ada676f153dc55c81f3caab0\"\u003e\u003ccode\u003eac74e37\u003c/code\u003e\u003c/a\u003e chore: Add AGENTS.md with AI disclosure requirements (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21221\"\u003e#21221\u003c/a\u003e) (Nicholas C. Zakas)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c8326608e710e670beaf982501aed80ea104919a\"\u003e\u003ccode\u003ec832660\u003c/code\u003e\u003c/a\u003e chore: Upgrade Stylelint to the latest version in docs (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21245\"\u003e#21245\u003c/a\u003e) (Jung Hyeon Jun)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/f9f88fcccd965fdc162b89c4615dd4018e3cabdf\"\u003e\u003ccode\u003ef9f88fc\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21308\"\u003e#21308\u003c/a\u003e) (ESLint Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/fc81076a5b8145360654d81cbc130cf7d25dca77\"\u003e\u003ccode\u003efc81076\u003c/code\u003e\u003c/a\u003e ci: add more types integration tests (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20395\"\u003e#20395\u003c/a\u003e) (Nitin Kumar)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev10.10.0\u003c/h2\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/264b4346d1963701df0c398b4aeb2f6e8b2af93e\"\u003e\u003ccode\u003e264b434\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003ed\u003c/code\u003e and \u003ccode\u003ev\u003c/code\u003e flags to \u003ccode\u003eno-unexpected-multiline\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21305\"\u003e#21305\u003c/a\u003e) (Gihyeon Jeong / 정기현)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/c6cc6c592f30901345d94ef75e0d42c1894fae6c\"\u003e\u003ccode\u003ec6cc6c5\u003c/code\u003e\u003c/a\u003e feat: check \u003ccode\u003eObject.prototype\u003c/code\u003e property names in \u003ccode\u003enew-cap\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21269\"\u003e#21269\u003c/a\u003e) (crimsonjay0)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5661fa65fde9fd4c14f0b730e3cee6a42fc657c1\"\u003e\u003ccode\u003e5661fa6\u003c/code\u003e\u003c/a\u003e feat: no-extra-bind false negatives with class fields and static blocks (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21260\"\u003e#21260\u003c/a\u003e) (synthex-byte)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/bb47dc6da2399a8f76c0c0c3273e6bc314c480e5\"\u003e\u003ccode\u003ebb47dc6\u003c/code\u003e\u003c/a\u003e fix: update dependency file-entry-cache to v11 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/20801\"\u003e#20801\u003c/a\u003e) (Milos Djermanovic)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/427ac0a014066c36aa57fa8fa9af20fd9fb591e1\"\u003e\u003ccode\u003e427ac0a\u003c/code\u003e\u003c/a\u003e fix: use format strings in debug calls (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21247\"\u003e#21247\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9d8153223dbf47b9aecdc1474202aaee4845f146\"\u003e\u003ccode\u003e9d81532\u003c/code\u003e\u003c/a\u003e fix: support \u003ccode\u003e__proto__\u003c/code\u003e in \u003ccode\u003e/* exported */\u003c/code\u003e comments (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21261\"\u003e#21261\u003c/a\u003e) (sethamus)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/87e0a082438264ad90b87fd74165ab4fd90f63ef\"\u003e\u003ccode\u003e87e0a08\u003c/code\u003e\u003c/a\u003e fix: prefer-object-has-own autofix breaks when Object is shadowed (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21282\"\u003e#21282\u003c/a\u003e) (김채영)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8e2cb142217f2efee1d10dcc02bfb75145ae775d\"\u003e\u003ccode\u003e8e2cb14\u003c/code\u003e\u003c/a\u003e fix: \u003ccode\u003enew-cap\u003c/code\u003e false positive for \u003ccode\u003eUTC\u003c/code\u003e calls with \u003ccode\u003eproperties: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21275\"\u003e#21275\u003c/a\u003e) (Pixel)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9f4a364ab0ade048dfce1f37792b1d461d866e55\"\u003e\u003ccode\u003e9f4a364\u003c/code\u003e\u003c/a\u003e fix: Ignore static imports in no-unreachable (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21276\"\u003e#21276\u003c/a\u003e) (Taha Kotil)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/2417cad57d7d1bc4cf3ecf0f0575cfb10ff2011c\"\u003e\u003ccode\u003e2417cad\u003c/code\u003e\u003c/a\u003e docs: Update README (GitHub Actions Bot)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9cecb8a0a2348070abf72321965d41919c7cc626\"\u003e\u003ccode\u003e9cecb8a\u003c/code\u003e\u003c/a\u003e docs: document \u003ccode\u003e\\c\u003c/code\u003e control letter escapes in no-control-regex (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21286\"\u003e#21286\u003c/a\u003e) (한국)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/8724829f69f8ed80c876e3a5a017da199ce78739\"\u003e\u003ccode\u003e8724829\u003c/code\u003e\u003c/a\u003e docs: update compat table links (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21263\"\u003e#21263\u003c/a\u003e) (fnx)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/5634542be580750ffb1a5766470f9e9c72719696\"\u003e\u003ccode\u003e5634542\u003c/code\u003e\u003c/a\u003e docs: Clarify eqeqeq suggestion behavior (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21256\"\u003e#21256\u003c/a\u003e) (Müslüm Yılmaz)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/b3d876b46083d67899eb1d9613118c1c583632a2\"\u003e\u003ccode\u003eb3d876b\u003c/code\u003e\u003c/a\u003e chore: disable npm audit in ecosystem tests (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21306\"\u003e#21306\u003c/a\u003e) (Francesco Trotta)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/1696682791661c13167eb905da2f38d1b8f4a3bf\"\u003e\u003ccode\u003e1696682\u003c/code\u003e\u003c/a\u003e ci: restore EMFILE test on Node.js 26 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21297\"\u003e#21297\u003c/a\u003e) (Marry (Subin Yang))\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/3c0b7c6e1fe2dec778b97a996018126f22d437ae\"\u003e\u003ccode\u003e3c0b7c6\u003c/code\u003e\u003c/a\u003e 10.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/321f0a70dd908ed461b11142e17fbdc0c0f1f198\"\u003e\u003ccode\u003e321f0a7\u003c/code\u003e\u003c/a\u003e Build: changelog update for 10.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68\"\u003e\u003ccode\u003e520dd77\u003c/code\u003e\u003c/a\u003e perf: Implement fast paths in critical areas (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21210\"\u003e#21210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa\"\u003e\u003ccode\u003e9ecfdc5\u003c/code\u003e\u003c/a\u003e docs: note that --cache can serve stale results for cross-file rules (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21312\"\u003e#21312\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a\"\u003e\u003ccode\u003e92086c8\u003c/code\u003e\u003c/a\u003e test: update \u003ccode\u003eEMFILE\u003c/code\u003e error generation for Node.js 26.9.0 compatibility (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21330\"\u003e#21330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e\"\u003e\u003ccode\u003e9ac7eb6\u003c/code\u003e\u003c/a\u003e chore: update github/codeql-action action to v4.38.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21331\"\u003e#21331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476\"\u003e\u003ccode\u003e22b09f5\u003c/code\u003e\u003c/a\u003e fix: ignore \u003ccode\u003e__proto__\u003c/code\u003e properties in \u003ccode\u003eprefer-object-spread\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21311\"\u003e#21311\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd\"\u003e\u003ccode\u003e24310e3\u003c/code\u003e\u003c/a\u003e chore: update ecosystem plugins (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21324\"\u003e#21324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127\"\u003e\u003ccode\u003ed136fa4\u003c/code\u003e\u003c/a\u003e feat: object-shorthand handle quoted properties for \u003ccode\u003eignoreConstructors\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651\"\u003e\u003ccode\u003e45ad79e\u003c/code\u003e\u003c/a\u003e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (\u003ca href=\"https://redirect.github.com/eslint/eslint/issues/21318\"\u003e#21318\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/eslint/eslint/compare/v9.39.5...v10.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `lint-staged` from 17.4.1 to 17.6.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lint-staged/lint-staged/releases\"\u003elint-staged's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev17.6.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1850\"\u003e#1850\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180\"\u003e\u003ccode\u003e938d3f4\u003c/code\u003e\u003c/a\u003e - Task functions like \u003ccode\u003e{ title, task }\u003c/code\u003e can now use a logger function \u003ccode\u003elog()\u003c/code\u003e to emit output while the task runs. By default, the output will only be visible if the task fails, unless the \u003ccode\u003e--verbose\u003c/code\u003e option was used. Additionally, when the task rejects, the error will be shown in the output.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*': {\ntitle: 'Fail if PDF files are committed',\ntask: async (filepaths, { log }) =\u0026gt; {\nconst pdfFiles = filepaths.filter((f) =\u0026gt; f.toLowerCase().endsWith('.pdf'))\nif (pdfFiles.length \u0026gt; 0) {\nlog('PDF files should not be committed: %s', pdfFiles)\nthrow new Error('Failed')\n}\n},\n},\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1854\"\u003e#1854\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3\"\u003e\u003ccode\u003e30562bc\u003c/code\u003e\u003c/a\u003e - \u003cem\u003elint-staged\u003c/em\u003e now stages changes to \u003cstrong\u003eall tracked files modified by tasks\u003c/strong\u003e, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like \u003ccode\u003e() =\u0026gt; \u0026quot;prettier --write .\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIf you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use \u003ccode\u003e--hide-unstaged\u003c/code\u003e to hide your changes while tasks run.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1860\"\u003e#1860\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98\"\u003e\u003ccode\u003e4296532\u003c/code\u003e\u003c/a\u003e - The assignment of staged files to \u003cem\u003elint-staged\u003c/em\u003e configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1861\"\u003e#1861\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a\"\u003e\u003ccode\u003ec45f28a\u003c/code\u003e\u003c/a\u003e - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example \u003ccode\u003eeslint\u003c/code\u003e and \u003ccode\u003eprettier\u003c/code\u003e will run in parallel (for all files, when any JS files are staged):\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*.js': () =\u0026gt; [['eslint --max-warnings=0 .', 'prettier --list-different .']],\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1859\"\u003e#1859\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d\"\u003e\u003ccode\u003ef0ea69d\u003c/code\u003e\u003c/a\u003e - Various performance improvements from skipping redundant internal Git calls.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1856\"\u003e#1856\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821\"\u003e\u003ccode\u003e69d7d17\u003c/code\u003e\u003c/a\u003e - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of \u003cem\u003elint-staged\u003c/em\u003e overwriting it. This makes it safer to run \u003cem\u003elint-staged\u003c/em\u003e in multiple worktrees at the same time.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev17.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1852\"\u003e#1852\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/bfcca94e61aef7078a7a0ec8165c0cc2c9baca99\"\u003e\u003ccode\u003ebfcca94\u003c/code\u003e\u003c/a\u003e - Fix TypeScript issue \u003ccode\u003eTS1254\u003c/code\u003e from \u003ccode\u003edefineConfig()\u003c/code\u003e by changing the signature from \u003ccode\u003econst\u003c/code\u003e to a \u003ccode\u003efunction\u003c/code\u003e:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eA 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md\"\u003elint-staged's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e17.6.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1850\"\u003e#1850\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180\"\u003e\u003ccode\u003e938d3f4\u003c/code\u003e\u003c/a\u003e - Task functions like \u003ccode\u003e{ title, task }\u003c/code\u003e can now use a logger function \u003ccode\u003elog()\u003c/code\u003e to emit output while the task runs. By default, the output will only be visible if the task fails, unless the \u003ccode\u003e--verbose\u003c/code\u003e option was used. Additionally, when the task rejects, the error will be shown in the output.\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*': {\ntitle: 'Fail if PDF files are committed',\ntask: async (filepaths, { log }) =\u0026gt; {\nconst pdfFiles = filepaths.filter((f) =\u0026gt; f.toLowerCase().endsWith('.pdf'))\nif (pdfFiles.length \u0026gt; 0) {\nlog('PDF files should not be committed: %s', pdfFiles)\nthrow new Error('Failed')\n}\n},\n},\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1854\"\u003e#1854\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3\"\u003e\u003ccode\u003e30562bc\u003c/code\u003e\u003c/a\u003e - \u003cem\u003elint-staged\u003c/em\u003e now stages changes to \u003cstrong\u003eall tracked files modified by tasks\u003c/strong\u003e, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like \u003ccode\u003e() =\u0026gt; \u0026quot;prettier --write .\u0026quot;\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIf you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use \u003ccode\u003e--hide-unstaged\u003c/code\u003e to hide your changes while tasks run.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1860\"\u003e#1860\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98\"\u003e\u003ccode\u003e4296532\u003c/code\u003e\u003c/a\u003e - The assignment of staged files to \u003cem\u003elint-staged\u003c/em\u003e configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1861\"\u003e#1861\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a\"\u003e\u003ccode\u003ec45f28a\u003c/code\u003e\u003c/a\u003e - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example \u003ccode\u003eeslint\u003c/code\u003e and \u003ccode\u003eprettier\u003c/code\u003e will run in parallel (for all files, when any JS files are staged):\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { defineConfig } from 'lint-staged/config'\n\u003cp\u003eexport default defineConfig({\n'*.js': () =\u0026gt; [['eslint --max-warnings=0 .', 'prettier --list-different .']],\n})\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1859\"\u003e#1859\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d\"\u003e\u003ccode\u003ef0ea69d\u003c/code\u003e\u003c/a\u003e - Various performance improvements from skipping redundant internal Git calls.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1856\"\u003e#1856\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821\"\u003e\u003ccode\u003e69d7d17\u003c/code\u003e\u003c/a\u003e - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of \u003cem\u003elint-staged\u003c/em\u003e overwriting it. This makes it safer to run \u003cem\u003elint-staged\u003c/em\u003e in multiple worktrees at the same time.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e17.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/pull/1852\"\u003e#1852\u003c/a\u003e \u003ca href=\"https://github.com/lint-staged/lint-staged/commit/bfcca94e61aef7078a7a0ec8165c0cc2c9baca99\"\u003e\u003ccode\u003ebfcca94\u003c/code\u003e\u003c/a\u003e - Fix TypeScript issue \u003ccode\u003eTS1254\u003c/code\u003e from \u003ccode\u003edefineConfig()\u003c/code\u003e by changing the signature from \u003ccode\u003econst\u003c/code\u003e to a \u003ccode\u003efunction\u003c/code\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/48f9f4ea4b88eb605de3546e4599083de7a394b2\"\u003e\u003ccode\u003e48f9f4e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/issues/1857\"\u003e#1857\u003c/a\u003e from lint-staged/changeset-release/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/16b2e213efeec330f7e1576a8d35776822bf698a\"\u003e\u003ccode\u003e16b2e21\u003c/code\u003e\u003c/a\u003e chore(changeset): release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/195f15677da877431b63dfd001e1ed9369bb1479\"\u003e\u003ccode\u003e195f156\u003c/code\u003e\u003c/a\u003e docs: improve changeset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/0ba6261cabfdade60e487385ebec4fc2b4b44309\"\u003e\u003ccode\u003e0ba6261\u003c/code\u003e\u003c/a\u003e fix: create hidden directory only when required\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/66ac2de6f71d19256cc5d11026d37e653af11549\"\u003e\u003ccode\u003e66ac2de\u003c/code\u003e\u003c/a\u003e docs: fixes to changesets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/80af8d7f8246c4246cdf8b53229bd1bf7763f959\"\u003e\u003ccode\u003e80af8d7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/lint-staged/lint-staged/issues/1863\"\u003e#1863\u003c/a\u003e from lint-staged/fix-issues\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/e4334881d49d94669bc2b2fb5a73705d822c69bb\"\u003e\u003ccode\u003ee433488\u003c/code\u003e\u003c/a\u003e fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/e5019b32138e301c777c683f95e4a1e17362845f\"\u003e\u003ccode\u003ee5019b3\u003c/code\u003e\u003c/a\u003e fix: handle trailing newlines when detecting changed files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/74efec85fa276618837d3c4602062ef30d16abf1\"\u003e\u003ccode\u003e74efec8\u003c/code\u003e\u003c/a\u003e ci: run Cygwin and MSYS2 tests on Node.js 26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lint-staged/lint-staged/commit/655b7dcd9f7eb57a6f574f03be371190afeb9f5c\"\u003e\u003ccode\u003e655b7dc\u003c/code\u003e\u003c/a\u003e fix: use TypeScript types instead of JSDoc\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lint-staged/lint-staged/compare/v17.4.1...v17.6.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tsx` from 4.23.1 to 4.23.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/privatenumber/tsx/releases\"\u003etsx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.23.15\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.14...v4.23.15\"\u003e4.23.15\u003c/a\u003e (2026-09-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexclude bare builtins from namespace inheritance (\u003ca href=\"https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a\"\u003e38e1588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eexpose require.cache and require.extensions to tsImport CommonJS modules (\u003ca href=\"https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a\"\u003e2da3407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emake namespaced register() overloads portable for declaration emit (\u003ca href=\"https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15\"\u003e562c434\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.15\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.14\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.14\"\u003e4.23.14\u003c/a\u003e (2026-09-20)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erestore the CJS bridge namespace for Node 24 require(esm) under tsImport() (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/802\"\u003e#802\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f\"\u003e6e5236b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.14\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.13\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.12...v4.23.13\"\u003e4.23.13\u003c/a\u003e (2026-08-30)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ecache:\u003c/strong\u003e bound shared transform cache memory (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/835\"\u003e#835\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e\"\u003e28e1f12\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.13\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.23.12\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.11...v4.23.12\"\u003e4.23.12\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshim \u003ccode\u003eimport.meta\u003c/code\u003e when tokens are split by comments or newlines (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/privatenumber/tsx/commit/ed9d33046a135de13a35fdfce12368b79d1b1518\"\u003eed9d330\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/828\"\u003e#828\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eThis release is also available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/tsx/v/4.23.12\"\u003e\u003ccode\u003enpm package (@​latest dist-tag)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/ca66105a17a2a4c6503fe3a12b5b9ec408286011\"\u003e\u003ccode\u003eca66105\u003c/code\u003e\u003c/a\u003e test: fix drive-less file URLs in ESM resolver fixtures\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a\"\u003e\u003ccode\u003e2da3407\u003c/code\u003e\u003c/a\u003e fix: expose require.cache and require.extensions to tsImport CommonJS modules\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a\"\u003e\u003ccode\u003e38e1588\u003c/code\u003e\u003c/a\u003e fix: exclude bare builtins from namespace inheritance\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15\"\u003e\u003ccode\u003e562c434\u003c/code\u003e\u003c/a\u003e fix: make namespaced register() overloads portable for declaration emit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/edfb1f05a3f40b879a41a03a0801c2abd3a3ecf9\"\u003e\u003ccode\u003eedfb1f0\u003c/code\u003e\u003c/a\u003e build: upgrade pkgroll and externalize CJS loader reference\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/70e78284837c859f09b96cd10cd71d007aa4b795\"\u003e\u003ccode\u003e70e7828\u003c/code\u003e\u003c/a\u003e test: upgrade tinyspy for disposable API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/9ed2022dfa9ea1be9511fe6abcde8110c25055a7\"\u003e\u003ccode\u003e9ed2022\u003c/code\u003e\u003c/a\u003e ci: avoid duplicate release notifications\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/872e77ffc5e96ca5c4727e74c0694debcb26219b\"\u003e\u003ccode\u003e872e77f\u003c/code\u003e\u003c/a\u003e refactor: use disposables for cleanup\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f\"\u003e\u003ccode\u003e6e5236b\u003c/code\u003e\u003c/a\u003e fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e\"\u003e\u003ccode\u003e28e1f12\u003c/code\u003e\u003c/a\u003e fix(cache): bound shared transform cache memory (\u003ca href=\"https://redirect.github.com/privatenumber/tsx/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `turbo` from 2.10.11 to 2.11.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vercel/turborepo/releases\"\u003eturbo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTurborepo v2.11.5\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003echore: Release Turborepo 2.11.4 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14231\"\u003evercel/turborepo#14231\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Python opt-in hint into filter contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14228\"\u003evercel/turborepo#14228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output summary assertion into contract by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14230\"\u003evercel/turborepo#14230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output selection and validation cases to engine contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14232\"\u003evercel/turborepo#14232\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo exclude-only scope coverage by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14238\"\u003evercel/turborepo#14238\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo cache-authority cases to contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14240\"\u003evercel/turborepo#14240\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move JIT dependency graph scenario into engine contract by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14235\"\u003evercel/turborepo#14235\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move dependency-output hash cases into task-hash contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14233\"\u003evercel/turborepo#14233\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Cargo task-filter cases into crate contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14239\"\u003evercel/turborepo#14239\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move JIT input hash timing cases into task-hash contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14234\"\u003evercel/turborepo#14234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move package input normalization cases into engine contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14236\"\u003evercel/turborepo#14236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move structured startup and JIT input cases into contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14237\"\u003evercel/turborepo#14237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Back off remote artifact requests during outages by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14222\"\u003evercel/turborepo#14222\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Release Turborepo 2.11.5-canary.1 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14245\"\u003evercel/turborepo#14245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Make new-package lockfile filter deterministic by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14241\"\u003evercel/turborepo#14241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Trim redundant Go cache builds by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14242\"\u003evercel/turborepo#14242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Reduce Go versioned-name test matrix by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14243\"\u003evercel/turborepo#14243\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Move Go binary checks into contracts by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14246\"\u003evercel/turborepo#14246\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Consolidate Go format smokes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14244\"\u003evercel/turborepo#14244\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Reuse Cargo build artifacts safely by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14247\"\u003evercel/turborepo#14247\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: Separate prune planning matrix from buildability smoke by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14248\"\u003evercel/turborepo#14248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Bundle docs in \u003ccode\u003eturbo\u003c/code\u003e npm package by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14108\"\u003evercel/turborepo#14108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Release Turborepo 2.11.5-canary.2 by \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14249\"\u003evercel/turborepo#14249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Stabilize pnpm per-workspace lockfile hashes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14253\"\u003evercel/turborepo#14253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade factory Next.js to 16.3.3 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14254\"\u003evercel/turborepo#14254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Update js-yaml to address CVE-2026-84375 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14255\"\u003evercel/turborepo#14255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Upgrade Next.js in docs and factory for CVE-2026-94545 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14256\"\u003evercel/turborepo#14256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Remove unmaintained proc-macro-error2 by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14257\"\u003evercel/turborepo#14257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Replace clap in production CLIs with usage-rs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14259\"\u003evercel/turborepo#14259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove tiny-gradient dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14260\"\u003evercel/turborepo#14260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Replace human-panic with local crash reporting by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14261\"\u003evercel/turborepo#14261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove unused struct_iterable dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14258\"\u003evercel/turborepo#14258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Sign complete on-disk artifacts after local cache writes by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14265\"\u003evercel/turborepo#14265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove \u003ccode\u003ederive_setters\u003c/code\u003e dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14266\"\u003evercel/turborepo#14266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove port_scanner dependency by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14267\"\u003evercel/turborepo#14267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Remove unused Rust dependency declarations by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14268\"\u003evercel/turborepo#14268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused public Rust APIs by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14269\"\u003evercel/turborepo#14269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Use workspace Rust edition across crates by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14270\"\u003evercel/turborepo#14270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: Clean up Rust Clippy exceptions by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14271\"\u003evercel/turborepo#14271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Group task-hash and uv generation context by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14279\"\u003evercel/turborepo#14279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused global hash wrapper by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14281\"\u003evercel/turborepo#14281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused file-hash telemetry argument by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14282\"\u003evercel/turborepo#14282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove dead CLI code and crate-wide allowance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14283\"\u003evercel/turborepo#14283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove dead Microfrontends config code by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14284\"\u003evercel/turborepo#14284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: Remove unused UI task types and dead-code allowance by \u003ca href=\"https://github.com/anthonyshew\"\u003e\u003ccode\u003e@​anthonyshew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vercel/turborepo/pull/14286\"\u003evercel/turborepo#14286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8492b42667210270f4169f0df8c0edf725ff2f41\"\u003e\u003ccode\u003e8492b42\u003c/code\u003e\u003c/a\u003e publish 2.11.5 to registry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/a50ee6536eac2f7f3168cc38087ee7d8397fc0e9\"\u003e\u003ccode\u003ea50ee65\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.5 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14328\"\u003e#14328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c9602f339008964f8dfaf6329491c374cf2f0a60\"\u003e\u003ccode\u003ec9602f3\u003c/code\u003e\u003c/a\u003e fix: Pass repository to release asset commands (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14327\"\u003e#14327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8cb67669e73cf73bde0a8a9e0a9a829ddd34993f\"\u003e\u003ccode\u003e8cb6766\u003c/code\u003e\u003c/a\u003e fix: Isolate installer test environment (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14326\"\u003e#14326\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/5108f6c9fda7a7aeb2d2f31c46a44bbe966970c7\"\u003e\u003ccode\u003e5108f6c\u003c/code\u003e\u003c/a\u003e feat: Add standalone installers URLs for \u003ccode\u003ecurl | bash\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14325\"\u003e#14325\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/a46f82a2742ef0f8e1b5f9acebfbe2544c34c528\"\u003e\u003ccode\u003ea46f82a\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.4 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14324\"\u003e#14324\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/8427e6e5dd7efc7afdf5a332502551fc8f2eabc8\"\u003e\u003ccode\u003e8427e6e\u003c/code\u003e\u003c/a\u003e fix: Run standalone archive job on manual releases (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14323\"\u003e#14323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/7f57aa38406027a30a77d46489ebbdf9dd3ef0e5\"\u003e\u003ccode\u003e7f57aa3\u003c/code\u003e\u003c/a\u003e feat: Publish versioned standalone turbo archives (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14322\"\u003e#14322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/d6b852c53c8473ec88081e826b357feb35938e5e\"\u003e\u003ccode\u003ed6b852c\u003c/code\u003e\u003c/a\u003e docs: Update Turborepo schema URL example (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14321\"\u003e#14321\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vercel/turborepo/commit/c76ac66c4447bfe35301bee0a002d3c60e163342\"\u003e\u003ccode\u003ec76ac66\u003c/code\u003e\u003c/a\u003e chore: Release Turborepo 2.11.5-canary.3 (\u003ca href=\"https://redirect.github.com/vercel/turborepo/issues/14320\"\u003e#14320\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vercel/turborepo/compare/v2.10.11...v2.11.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `typescript` from 5.9.3 to 7.0.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/microsoft/TypeScript/releases\"\u003etypescript's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eTypeScript 7.0.2\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/\"\u003ehttps://devblogs.microsoft.com/typescript/announcing-typescript-7-0/\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eThis tag was originally released at: \u003ca href=\"https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2\"\u003ehttps://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eTypeScript 6.0.3\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.2%22\"\u003efixed issues query for TypeScript 6.0.2 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.3%22\"\u003efixed issues query for TypeScript 6.0.3 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.2%22\"\u003efixed issues query for TypeScript 6.0.2 (Stable)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0.1 RC\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-rc/\"\u003erelease announcement blog post\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22\"\u003efixed issues query for TypeScript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.1%22\"\u003efixed issues query for TypeScript 6.0.1 (RC)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTypeScript 6.0 Beta\u003c/h2\u003e\n\u003cp\u003eFor release notes, check out the \u003ca href=\"https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-beta/\"\u003erelease announcement\u003c/a\u003e.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\u0026amp;q=milestone%3A%22TypeScript+6.0.0%22+is%3Aclosed+\"\u003efixed issues query for Typescript 6.0.0 (Beta)\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eDownloads are available on:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.npmjs.com/package/typescript\"\u003enpm\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/1e4744d68260a7cb91b62b12edc3f6a2187faaf1\"\u003e\u003ccode\u003e1e4744d\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into ts7-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/a5a219c3b5da0db4fa0ecf6c0b1f588c9af9c669\"\u003e\u003ccode\u003ea5a219c\u003c/code\u003e\u003c/a\u003e\u003ccode\u003emicrosoft/typescript-go#4558\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ecfe30dce91368d52c9a49b6095bb0b673a238f8\"\u003e\u003ccode\u003eecfe30d\u003c/code\u003e\u003c/a\u003e Update status localization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/5de25b5f8fec2ca35eadaed041f1f06d2e214895\"\u003e\u003ccode\u003e5de25b5\u003c/code\u003e\u003c/a\u003e Hide executable name in TypeScript status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/d7ce74a75da2b80e8201506a1599c06549432b93\"\u003e\u003ccode\u003ed7ce74a\u003c/code\u003e\u003c/a\u003e Show bundled TypeScript version for packaged servers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/29be66a607707f90d7a53103a4469bb3015a4d54\"\u003e\u003ccode\u003e29be66a\u003c/code\u003e\u003c/a\u003e Correct TS 7 release version to 7.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/ed2bd1bfa4aac5211ce4bc58fcd1313c7eddc8ff\"\u003e\u003ccode\u003eed2bd1b\u003c/code\u003e\u003c/a\u003e Merge branch 'main' into ts7-release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/887307575c58ea640dbeba3b4e8fdb6347cd3044\"\u003e\u003ccode\u003e8873075\u003c/code\u003e\u003c/a\u003e Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/9427131ae2d4e230a90ee8a09daac4e75da3e311\"\u003e\u003ccode\u003e9427131\u003c/code\u003e\u003c/a\u003e Set up stable / nightly extension split, other prep (microsoft/typescript-go#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/microsoft/TypeScript/commit/d4eaca5460a1f5f02a829e62706794b0a6fb903e\"\u003e\u003ccode\u003ed4eaca5\u003c/code\u003e\u003c/a\u003e\u003ccode\u003emicrosoft/typescript-go#4549\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/microsoft/TypeScript/compare/v5.9.3...v7.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~microsoft1es\"\u003emicrosoft1es\u003c/a\u003e, a new releaser for typescript since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@apollo/server` from 4.13.0 to 5.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apollographql/apollo-server/releases\"\u003e@​apollo/server's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server-integration-testsuite\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8201\"\u003e#8201\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mhassan1\"\u003e\u003ccode\u003e@​mhassan1\u003c/code\u003e\u003c/a\u003e! - Replace dependency \u003ccode\u003euuid\u003c/code\u003e with calls to \u003ccode\u003ecrypto.randomUUID\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server-integration-testsuite\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e - ⚠️ SECURITY \u003ccode\u003e@apollo/server/standalone\u003c/code\u003e:\u003c/p\u003e\n\u003cp\u003eApollo Server now rejects GraphQL \u003ccode\u003eGET\u003c/code\u003e requests which contain a \u003ccode\u003eContent-Type\u003c/code\u003e header other than \u003ccode\u003eapplication/json\u003c/code\u003e (with optional parameters such as \u003ccode\u003e; charset=utf-8\u003c/code\u003e). Any other value is now rejected with a 415 status code.\u003c/p\u003e\n\u003cp\u003e(GraphQL \u003ccode\u003eGET\u003c/code\u003e requests without a \u003ccode\u003eContent-Type\u003c/code\u003e header are still allowed, though they do still need to contain a non-empty \u003ccode\u003eX-Apollo-Operation-Name\u003c/code\u003e or \u003ccode\u003eApollo-Require-Preflight\u003c/code\u003e header to be processed if the default CSRF prevention feature is enabled.)\u003c/p\u003e\n\u003cp\u003eThis improvement makes Apollo Server's CSRF more resistant to browsers which implement CORS in non-spec-compliant ways. Apollo is aware of one browser which as of March 2026 has a bug which allows an attacker to circumvent Apollo Server's CSRF prevention feature to carry out read-only XS-Search-style CSRF attacks. The browser vendor is in the process of patching this vulnerability; upgrading Apollo Server to v5.5.0 mitigates this vulnerability.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIf your server uses cookies (or HTTP Basic Auth) for authentication, Apollo encourages you to upgrade to v5.5.0.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThis is technically a backwards-incompatible change. Apollo is not aware of any GraphQL clients which provide non-empty \u003ccode\u003eContent-Type\u003c/code\u003e headers with \u003ccode\u003eGET\u003c/code\u003e requests with types other than \u003ccode\u003eapplication/json\u003c/code\u003e. If your use case requires such requests, please \u003ca href=\"https://github.com/apollographql/apollo-server/issues\"\u003efile an issue\u003c/a\u003e and we may add more configurability in a follow-up release.\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/apollographql/apollo-server/security/advisories/GHSA-9q82-xgwf-vj6h\"\u003eadvisory GHSA-9q82-xgwf-vj6h\u003c/a\u003e for more details.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated dependencies [\u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e]:\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​apollo/server\u003c/code\u003e\u003ca href=\"https://github.com/5\"\u003e\u003ccode\u003e@​5\u003c/code\u003e\u003c/a\u003e.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf\"\u003e\u003ccode\u003eada1200\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/glasser\"\u003e\u003ccode\u003e@​glasser\u003c/code\u003e\u003c/a\u003e! - ⚠️ SECURITY \u003ccode\u003e@apollo/server/standalone\u003c/code\u003e:\u003c/p\u003e\n\u003cp\u003eApollo Server now rejects GraphQL \u003ccode\u003eGET\u003c/code\u003e requests which contain a \u003ccode\u003eContent-Type\u003c/code\u003e header other than \u003ccode\u003eapplication/json\u003c/code\u003e (with optional parameters such as \u003ccode\u003e; charset=utf-8\u003c/code\u003e). Any other value is now rejected with a 415 status code.\u003c/p\u003e\n\u003cp\u003e(GraphQL \u003ccode\u003eGET\u003c/code\u003e requests without a \u003ccode\u003eContent-Type\u003c/code\u003e header are still allowed, though they do still need to contain a non-empty \u003ccode\u003eX-Apollo-Operation-Name\u003c/code\u003e or \u003ccode\u003eApollo-Require-Preflight\u003c/code\u003e header to be processed if the default CSRF prevention feature is enabled.)\u003c/p\u003e\n\u003cp\u003eThis improvement makes Apollo Server's CSRF more resistant to browsers which implement CORS in non-spec-compliant ways. Apollo is aware of one browser which as of March 2026 has a bug which allows an attacker to circumvent Apollo Server's CSRF prevention feature to carry out read-only XS-Search-style CSRF attacks. The browser vendor is in the process of patching this vulnerability; upgrading Apollo Server to v5.5.0 mitigates this vulnerability.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eIf your server uses cookies (or HTTP Basic Auth) for authentication, Apollo encourages you to upgrade to v5.5.0.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThis is technically a backwards-incompatible change. Apollo is not aware of any GraphQL clients which provide non-empty \u003ccode\u003eContent-Type\u003c/code\u003e headers with \u003ccode\u003eGET\u003c/code\u003e requests with types other than \u003ccode\u003eapplication/json\u003c/code\u003e. If your use case requires such requests, please \u003ca href=\"https://github.com/apollographql/apollo-server/issues\"\u003efile an issue\u003c/a\u003e and we may add more configurability in a follow-up release.\u003c/p\u003e\n\u003cp\u003eSee \u003ca href=\"https://github.com/apollographql/apollo-server/security/advisories/GHSA-9q82-xgwf-vj6h\"\u003eadvisory GHSA-9q82-xgwf-vj6h\u003c/a\u003e for more details.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md\"\u003e@​apollo/server's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e5.5.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8201\"\u003e#8201\u003c/a\u003e \u003ca href=\"https://github.com/apollographql/apollo-server/commit/3f46c51d0fa629e9e885ba095568a43c714a9b06\"\u003e\u003ccode\u003e3f46c51\u003c/code\u003e\u003c/a\u003e Thanks \u003ca href=\"https://github.com/mhassan1\"\u003e\u003ccode\u003e@​mhassan1\u003c/code\u003e\u003c/a\u003e! - Replace dependency \u003ccode\u003euuid\u003c/code\u003e with calls to \u003ccode\u003ecrypto.randomUUID\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e5.5.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/apollographql/apollo-server/pull/8191\"\u003e#8191\u003c/a\u003e \u003ca href=\"https://github.com/apollographq...\n\n_Description has been truncated_","html_url":"https://github.com/stellar-alerts-labs/stellar-alerts/pull/513","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/stellar-alerts-labs%2Fstellar-alerts/issues/513","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/513/packages"}},{"old_version":"12.1.0","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-09-30T17:57:42.000Z","version_change":"12.1.0 → 15.0.0","issue":{"uuid":"5650786042","node_id":"PR_kwDOUcGRT88AAAABF8q4Bw","number":6,"state":"open","title":"chore(deps): bump commander from 12.1.0 to 15.0.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T17:57:42.000Z","updated_at":"2026-09-30T17:57:43.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"commander","old_version":"12.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":null,"ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 12.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v12.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=12.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/poposnail61/minim-astryx/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/poposnail61%2Fminim-astryx/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":"/js","pr_created_at":"2026-09-30T12:45:19.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5646643410","node_id":"PR_kwDOU1FZ988AAAABF5VWzQ","number":68,"state":"open","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T12:45:19.000Z","updated_at":"2026-09-30T12:45:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/codereview-benchmark/zz-failed-keycloak-keycloak-tenki-v2-PR37429-20260930/pull/68","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/codereview-benchmark%2Fzz-failed-keycloak-keycloak-tenki-v2-PR37429-20260930/issues/68","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/68/packages"}},{"old_version":"14.0.3","new_version":"15.0.0","update_type":"major","path":null,"pr_created_at":"2026-09-30T06:00:22.000Z","version_change":"14.0.3 → 15.0.0","issue":{"uuid":"5641757924","node_id":"PR_kwDOUjd5W88AAAABF1ZHHg","number":5,"state":"closed","title":"chore(deps): Bump the production-dependencies group with 3 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-30T06:43:48.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-30T06:00:22.000Z","updated_at":"2026-09-30T06:43:56.000Z","time_to_close":2606,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): Bump","group_name":"production-dependencies","update_count":3,"packages":[{"name":"commander","old_version":"14.0.3","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"},{"name":"marked","old_version":"18.0.13","new_version":"18.0.14","repository_url":"https://github.com/markedjs/marked"},{"name":"react-devtools-core","old_version":"7.0.1","new_version":"8.0.0","repository_url":"https://github.com/react/react"}],"path":null,"ecosystem":"npm"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the production-dependencies group with 3 updates: [commander](https://github.com/tj/commander.js), [marked](https://github.com/markedjs/marked) and [react-devtools-core](https://github.com/react/react/tree/HEAD/packages/react-devtools-core).\n\nUpdates `commander` from 14.0.3 to 15.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.3...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `marked` from 18.0.13 to 18.0.14\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/markedjs/marked/releases\"\u003emarked's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev18.0.14\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/markedjs/marked/compare/v18.0.13...v18.0.14\"\u003e18.0.14\u003c/a\u003e (2026-09-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow indented lines in setext heading text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4095\"\u003e#4095\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/7d05530733fa3f3ec2ed912ff695d05af6d81b8a\"\u003e7d05530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edecode numeric character references in text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4076\"\u003e#4076\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/cead8de96f2ee32d79e1de187bd099929f7409a8\"\u003ecead8de\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ekeep text after empty nested blockquote (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4101\"\u003e#4101\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/1b89557177fe5a7d5d430fdc76e7c8a7c0adf6d7\"\u003e1b89557\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4098\"\u003e#4098\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epreserve internal tabs in list item content (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4086\"\u003e#4086\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/e136da7c7dedcb58af046086005f89350020c416\"\u003ee136da7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estrip whitespace when normalizing link reference labels (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4091\"\u003e#4091\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/c7ee43abecd6a9e024f8bb6818be2da05e5793cb\"\u003ec7ee43a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport GFM protocol autolinks (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4067\"\u003e#4067\u003c/a\u003e) (\u003ca href=\"https://github.com/markedjs/marked/commit/7f7a49670c14acc6f11efcb18ecc69d17962477a\"\u003e7f7a496\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/ef0704c58459e927c805b92a5cc7d0c629e6fe43\"\u003e\u003ccode\u003eef0704c\u003c/code\u003e\u003c/a\u003e chore(release): 18.0.14 [skip ci]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/23c82ad02bc8723d9a32c41dd23db155a472d37e\"\u003e\u003ccode\u003e23c82ad\u003c/code\u003e\u003c/a\u003e chore: update deps (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4108\"\u003e#4108\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/1b89557177fe5a7d5d430fdc76e7c8a7c0adf6d7\"\u003e\u003ccode\u003e1b89557\u003c/code\u003e\u003c/a\u003e fix: keep text after empty nested blockquote (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4101\"\u003e#4101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/7f7a49670c14acc6f11efcb18ecc69d17962477a\"\u003e\u003ccode\u003e7f7a496\u003c/code\u003e\u003c/a\u003e fix: support GFM protocol autolinks (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4067\"\u003e#4067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/5196d98839463f17efa1bb104164d3bcf9cbcac2\"\u003e\u003ccode\u003e5196d98\u003c/code\u003e\u003c/a\u003e docs: add commonmark and gfm as versions in demo (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4094\"\u003e#4094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/de2320ac743ef752acb37c5ffe536ce1abc0d281\"\u003e\u003ccode\u003ede2320a\u003c/code\u003e\u003c/a\u003e docs: add marked-gitlab to known extensions (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4092\"\u003e#4092\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/7d05530733fa3f3ec2ed912ff695d05af6d81b8a\"\u003e\u003ccode\u003e7d05530\u003c/code\u003e\u003c/a\u003e fix: allow indented lines in setext heading text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4095\"\u003e#4095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/c7ee43abecd6a9e024f8bb6818be2da05e5793cb\"\u003e\u003ccode\u003ec7ee43a\u003c/code\u003e\u003c/a\u003e fix: strip whitespace when normalizing link reference labels (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4091\"\u003e#4091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/cead8de96f2ee32d79e1de187bd099929f7409a8\"\u003e\u003ccode\u003ecead8de\u003c/code\u003e\u003c/a\u003e fix: decode numeric character references in text (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4076\"\u003e#4076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/markedjs/marked/commit/e136da7c7dedcb58af046086005f89350020c416\"\u003e\u003ccode\u003ee136da7\u003c/code\u003e\u003c/a\u003e fix: preserve internal tabs in list item content (\u003ca href=\"https://redirect.github.com/markedjs/marked/issues/4086\"\u003e#4086\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/markedjs/marked/compare/v18.0.13...v18.0.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `react-devtools-core` from 7.0.1 to 8.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/releases\"\u003ereact-devtools-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eeslint-plugin-react-hooks@7.1.1 (April 17, 2026)\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eNote:\u003c/strong\u003e 7.1.0 accidentally removed the \u003ccode\u003ecomponent-hook-factories\u003c/code\u003e rule, causing errors for users who referenced it in their ESLint config. This is now fixed.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd deprecated no-op \u003ccode\u003ecomponent-hook-factories\u003c/code\u003e rule for backwards compatibility. (\u003ca href=\"https://github.com/mofeiZ\"\u003e\u003ccode\u003e@​mofeiZ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/36307\"\u003e#36307\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eeslint-plugin-react-hooks@7.1.0 (April 16, 2026)\u003c/h2\u003e\n\u003cp\u003eThis release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better \u003ccode\u003eset-state-in-effect\u003c/code\u003e detection, improved ref validation, and more helpful error reporting.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ESLint v10 support. (\u003ca href=\"https://github.com/azat-io\"\u003e\u003ccode\u003e@​azat-io\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSkip compilation for non-React files to improve performance. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35589\"\u003e#35589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix exhaustive deps bug with Flow type casting. (\u003ca href=\"https://github.com/jorge-cab\"\u003e\u003ccode\u003e@​jorge-cab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003euseEffectEvent\u003c/code\u003e checks in component syntax. (\u003ca href=\"https://github.com/jbrown215\"\u003e\u003ccode\u003e@​jbrown215\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35041\"\u003e#35041\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved \u003ccode\u003eset-state-in-effect\u003c/code\u003e validation with fewer false negatives. (\u003ca href=\"https://github.com/jorge-cab\"\u003e\u003ccode\u003e@​jorge-cab\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35134\"\u003e#35134\u003c/a\u003e, \u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35147\"\u003e#35147\u003c/a\u003e, \u003ca href=\"https://github.com/jackpope\"\u003e\u003ccode\u003e@​jackpope\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35214\"\u003e#35214\u003c/a\u003e, \u003ca href=\"https://github.com/chesnokov-tony\"\u003e\u003ccode\u003e@​chesnokov-tony\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35419\"\u003e#35419\u003c/a\u003e, \u003ca href=\"https://github.com/jsleitor\"\u003e\u003ccode\u003e@​jsleitor\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/36107\"\u003e#36107\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved ref validation for non-mutating functions and event handler props. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35893\"\u003e#35893\u003c/a\u003e, \u003ca href=\"https://github.com/kolvian\"\u003e\u003ccode\u003e@​kolvian\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35062\"\u003e#35062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCompiler now reports all errors instead of stopping at the first. (\u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35873\"\u003e#35873\u003c/a\u003e–\u003ca href=\"https://redirect.github.com/facebook/react/pull/35884\"\u003e#35884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImproved source locations and error display in compiler diagnostics. (\u003ca href=\"https://github.com/nathanmarks\"\u003e\u003ccode\u003e@​nathanmarks\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/35348\"\u003e#35348\u003c/a\u003e, \u003ca href=\"https://github.com/josephsavona\"\u003e\u003ccode\u003e@​josephsavona\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/facebook/react/pull/34963\"\u003e#34963\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/react/react/blob/main/CHANGELOG.md\"\u003ereact-devtools-core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e18.0.0 (March 29, 2022)\u003c/h2\u003e\n\u003cp\u003eBelow is a list of all new features, APIs, deprecations, and breaking changes.\nRead \u003ca href=\"https://reactjs.org/blog/2022/03/29/react-v18.html\"\u003eReact 18 release post\u003c/a\u003e and \u003ca href=\"https://reactjs.org/blog/2022/03/08/react-18-upgrade-guide.html\"\u003eReact 18 upgrade guide\u003c/a\u003e for more information.\u003c/p\u003e\n\u003ch3\u003eNew Features\u003c/h3\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003euseId\u003c/code\u003e is a new hook for generating unique IDs on both the client and server, while avoiding hydration mismatches. It is primarily useful for component libraries integrating with accessibility APIs that require unique IDs. This solves an issue that already exists in React 17 and below, but it’s even more important in React 18 because of how the new streaming server renderer delivers HTML out-of-order.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estartTransition\u003c/code\u003e and \u003ccode\u003euseTransition\u003c/code\u003e let you mark some state updates as not urgent. Other state updates are considered urgent by default. React will allow urgent state updates (for example, updating a text input) to interrupt non-urgent state updates (for example, rendering a list of search results).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseDeferredValue\u003c/code\u003e lets you defer re-rendering a non-urgent part of the tree. It is similar to debouncing, but has a few advantages compared to it. There is no fixed time delay, so React will attempt the deferred render right after the first render is reflected on the screen. The deferred render is interruptible and doesn't block user input.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseSyncExternalStore\u003c/code\u003e is a new hook that allows external stores to support concurrent reads by forcing updates to the store to be synchronous. It removes the need for \u003ccode\u003euseEffect\u003c/code\u003e when implementing subscriptions to external data sources, and is recommended for any library that integrates with state external to React.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003euseInsertionEffect\u003c/code\u003e is a new hook that allows CSS-in-JS libraries to address performance issues of injecting styles in render. Unless you’ve already built a CSS-in-JS library we don’t expect you to ever use this. This hook will run after the DOM is mutated, but before layout effects read the new layout. This solves an issue that already exists in React 17 and below, but is even more important in React 18 because React yields to the browser during concurrent rendering, giving it a chance to recalculate layout.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eReact DOM Client\u003c/h3\u003e\n\u003cp\u003eThese new APIs are now exported from \u003ccode\u003ereact-dom/client\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecreateRoot\u003c/code\u003e: New method to create a root to \u003ccode\u003erender\u003c/code\u003e or \u003ccode\u003eunmount\u003c/code\u003e. Use it instead of \u003ccode\u003eReactDOM.render\u003c/code\u003e. New features in React 18 don't work without it.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehydrateRoot\u003c/code\u003e: New method to hydrate a server rendered application. Use it instead of \u003ccode\u003eReactDOM.hydrate\u003c/code\u003e in conjunction with the new React DOM Server APIs. New features in React 18 don't work without it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth \u003ccode\u003ecreateRoot\u003c/code\u003e and \u003ccode\u003ehydrateRoot\u003c/code\u003e accept a new option called \u003ccode\u003eonRecoverableError\u003c/code\u003e in case you want to be notified when React recovers from errors during rendering or hydration for logging. By default, React will use \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/API/reportError\"\u003e\u003ccode\u003ereportError\u003c/code\u003e\u003c/a\u003e, or \u003ccode\u003econsole.error\u003c/code\u003e in the older browsers.\u003c/p\u003e\n\u003ch3\u003eReact DOM Server\u003c/h3\u003e\n\u003cp\u003eThese new APIs are now exported from \u003ccode\u003ereact-dom/server\u003c/code\u003e and have full support for streaming Suspense on the server:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003erenderToPipeableStream\u003c/code\u003e: for streaming in Node environments.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erenderToReadableStream\u003c/code\u003e: for modern edge runtime environments, such as Deno and Cloudflare workers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe existing \u003ccode\u003erenderToString\u003c/code\u003e method keeps working but is discouraged.\u003c/p\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.render\u003c/code\u003e has been deprecated. Using it will warn and run your app in React 17 mode.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.hydrate\u003c/code\u003e has been deprecated. Using it will warn and run your app in React 17 mode.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.unmountComponentAtNode\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom\u003c/code\u003e: \u003ccode\u003eReactDOM.renderSubtreeIntoContainer\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ereact-dom/server\u003c/code\u003e: \u003ccode\u003eReactDOMServer.renderToNodeStream\u003c/code\u003e has been deprecated.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBreaking Changes\u003c/h2\u003e\n\u003ch3\u003eReact\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAutomatic batching:\u003c/strong\u003e This release introduces a performance improvement that changes to the way React batches updates to do more batching automatically. See \u003ca href=\"https://github.com/reactwg/react-18/discussions/21\"\u003eAutomatic batching for fewer renders in React 18\u003c/a\u003e for more info. In the rare case that you need to opt out, wrap the state update in \u003ccode\u003eflushSync\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStricter Strict Mode\u003c/strong\u003e: In the future, React will provide a feature that lets components preserve state between unmounts. To prepare for it, React 18 introduces a new development-only check to Strict Mode. React will automatically unmount and remount every component, whenever a component mounts for the first time, restoring the previous state on the second mount. If this breaks your app, consider removing Strict Mode until you can fix the components to be resilient to remounting with existing state.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eConsistent useEffect timing\u003c/strong\u003e: React now always synchronously flushes effect functions if the update was triggered during a discrete user input event such as a click or a keydown event. Previously, the behavior wasn't always predictable or consistent.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStricter hydration errors\u003c/strong\u003e: Hydration mismatches due to missing or extra text content are now treated like errors instead of warnings. React will no longer attempt to \u0026quot;patch up\u0026quot; individual nodes by inserting or deleting a node on the client in an attempt to match the server markup, and will revert to client rendering up to the closest \u003ccode\u003e\u0026lt;Suspense\u0026gt;\u003c/code\u003e boundary in the tree. This ensures the hydrated tree is consistent and avoids potential privacy and security holes that can be caused by hydration mismatches.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSuspense trees are always consistent:\u003c/strong\u003e If a component suspends before it's fully added to the tree, React will not add it to the tree in an incomplete state or fire its effects. Instead, React will throw away the new tree completely, wait for the asynchronous operation to finish, and then retry rendering again from scratch. React will render the retry attempt concurrently, and without blocking the browser.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/react/react/commits/HEAD/packages/react-devtools-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/shazhou-ww/silvermoon/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/shazhou-ww%2Fsilvermoon/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"14.0.0","new_version":"15.0.0","update_type":"major","path":"/js","pr_created_at":"2026-09-30T01:38:52.000Z","version_change":"14.0.0 → 15.0.0","issue":{"uuid":"5639512030","node_id":"PR_kwDOU0E-Mc8AAAABFznMDw","number":65,"state":"open","title":"Bump commander from 14.0.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-30T01:38:52.000Z","updated_at":"2026-09-30T01:38:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"14.0.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 14.0.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v14.0.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=14.0.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Hewline-Ai/keycloak__keycloak-greptile__hew__PR1__20260930/pull/65","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hewline-Ai%2Fkeycloak__keycloak-greptile__hew__PR1__20260930/issues/65","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/65/packages"}},{"old_version":"13.1.0","new_version":"15.0.0","update_type":"major","path":"/js","pr_created_at":"2026-09-25T19:09:00.000Z","version_change":"13.1.0 → 15.0.0","issue":{"uuid":"5587322846","node_id":"PR_kwDOUrxF-M8AAAABFKsGlg","number":3,"state":"open","title":"Bump commander from 13.1.0 to 15.0.0 in /js","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-25T19:09:00.000Z","updated_at":"2026-09-25T19:09:01.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"commander","old_version":"13.1.0","new_version":"15.0.0","repository_url":"https://github.com/tj/commander.js"}],"path":"/js","ecosystem":"npm"},"body":"Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/releases\"\u003ecommander's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev15.0.0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/v15.0.0/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003ev15.0.0-0\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tj/commander.js/blob/master/CHANGELOG.md\"\u003ecommander's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[15.0.0] (2026-05-29)\u003c/h2\u003e\n\u003cp\u003eCommander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.\u003c/p\u003e\n\u003cp\u003eThe release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for\n12 months (to May 2027). For more info see \u003ca href=\"https://github.com/tj/commander.js/blob/master/docs/release-policy.md\"\u003eRelease Policy\u003c/a\u003e.\u003c/p\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eshow excess command-arguments in error message (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e only lone \u003ccode\u003e--no-*\u003c/code\u003e option sets default option value to \u003ccode\u003etrue\u003c/code\u003e, default not implicitly set when define both positive and negative option in either order (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2405\"\u003e#2405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate example to use compatible character for MINGW64 (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2475\"\u003e#2475\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e migrated Commander implementation from CommonJS to ESM (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e Commander 15 requires Node.js v22.12.0 or higher (for \u003ccode\u003erequire(esm)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003edev: switch tests from Jest to \u003ccode\u003enode:test\u003c/code\u003e test runner (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDeleted\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cem\u003eBreaking:\u003c/em\u003e removed deprecated export of \u003ccode\u003ecommander/esm.mjs\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMigration Tips\u003c/h3\u003e\n\u003cp\u003eCommander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is\nsupported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or\nsome other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework\nor bundler.\u003c/p\u003e\n\u003cp\u003eIf you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will\nget security updates until May 2027 and things will hopefully improve for your setup in the meantime.\u003c/p\u003e\n\u003ch2\u003e[15.0.0-0] (2026-02-22)\u003c/h2\u003e\n\u003cp\u003e(Released as 15.0.0)\u003c/p\u003e\n\u003ch2\u003e[14.0.3] (2026-01-31)\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRelease Policy document (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eold major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eclarify typing for deprecated callback parameter to \u003ccode\u003e.outputHelp()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2427\"\u003e#2427\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/ba6d13ddb4243e5913367734f8c159089ffe7834\"\u003e\u003ccode\u003eba6d13d\u003c/code\u003e\u003c/a\u003e Fix release dates in changelog (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2523\"\u003e#2523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/a752ed909f179e3a5dcae31a890a89fb748473c4\"\u003e\u003ccode\u003ea752ed9\u003c/code\u003e\u003c/a\u003e Pin GitHub actions with hash (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/74d5dfe9b7e199d98e2269ecf88dcf771c260983\"\u003e\u003ccode\u003e74d5dfe\u003c/code\u003e\u003c/a\u003e Drop EOL node 20 from test matrix, and add node 26  (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/6df9b68b75ad8df1532ad3572e1d5a1c53bde6cd\"\u003e\u003ccode\u003e6df9b68\u003c/code\u003e\u003c/a\u003e Update details for 15.0.0 release (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2519\"\u003e#2519\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/01ce5d0cd7e845d6ed749ab57616ec9c173cf91f\"\u003e\u003ccode\u003e01ce5d0\u003c/code\u003e\u003c/a\u003e Remove jest esm examples (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/d785d8b3b9448952ef023a8cd26a0a3923a90458\"\u003e\u003ccode\u003ed785d8b\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/9098b4863ef7678b9d138ae0f04afd949287510c\"\u003e\u003ccode\u003e9098b48\u003c/code\u003e\u003c/a\u003e Update dependencies (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2506\"\u003e#2506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/373f660f6febb720b82635220eea72dd9b7e0cba\"\u003e\u003ccode\u003e373f660\u003c/code\u003e\u003c/a\u003e Use node:util stripVTControlCharacters instead of own code (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/987f28966c71baecb0ef4a36780e727bcd575b31\"\u003e\u003ccode\u003e987f289\u003c/code\u003e\u003c/a\u003e Use simple match in test (to avoid warning about expensive regex) (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tj/commander.js/commit/0ea3bb3e883eaa909f1056d0d13a06cc31ec2c3c\"\u003e\u003ccode\u003e0ea3bb3\u003c/code\u003e\u003c/a\u003e Update dependecies and lint (\u003ca href=\"https://redirect.github.com/tj/commander.js/issues/2489\"\u003e#2489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tj/commander.js/compare/v13.1.0...v15.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commander\u0026package-manager=npm_and_yarn\u0026previous-version=13.1.0\u0026new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/vetoo-benchmark/keycloak__keycloak__vetoo__PR37634__20260925/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/vetoo-benchmark%2Fkeycloak__keycloak__vetoo__PR37634__20260925/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}}]}