{"id":2766,"name":"shell-quote","ecosystem":"npm","repository_url":"https://github.com/ljharb/shell-quote","issues_count":58683,"created_at":"2025-06-06T15:02:12.058Z","updated_at":"2025-06-06T15:02:12.058Z","purl":"pkg:npm/shell-quote","metadata":{"id":2356117,"name":"shell-quote","ecosystem":"npm","description":"quote and parse shell commands","homepage":"https://github.com/ljharb/shell-quote","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/ljharb/shell-quote","keywords_array":["command","parse","quote","shell"],"namespace":null,"versions_count":29,"first_release_published_at":"2012-05-18T10:42:06.889Z","latest_release_published_at":"2025-06-02T05:03:05.889Z","latest_release_number":"1.8.3","last_synced_at":"2025-06-02T05:04:42.422Z","created_at":"2022-04-10T00:38:17.345Z","updated_at":"2025-06-02T05:04:42.727Z","registry_url":"https://www.npmjs.com/package/shell-quote","install_command":"npm install shell-quote","documentation_url":null,"metadata":{"funding":{"url":"https://github.com/sponsors/ljharb"},"dist-tags":{"latest":"1.8.3"}},"repo_metadata":{"id":61311616,"uuid":"548978868","full_name":"ljharb/shell-quote","owner":"ljharb","description":null,"archived":false,"fork":false,"pushed_at":"2023-11-05T02:54:45.000Z","size":164,"stargazers_count":18,"open_issues_count":7,"forks_count":8,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-04-14T07:46:40.466Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ljharb.png","metadata":{"funding":{"github":["ljharb"],"patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"custom":null},"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"security.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-10-10T13:38:42.000Z","updated_at":"2024-05-15T19:46:29.577Z","dependencies_parsed_at":"2023-02-16T15:15:55.582Z","dependency_job_id":"0a900d49-b993-4014-bf72-02762eabfaa3","html_url":"https://github.com/ljharb/shell-quote","commit_stats":{"total_commits":172,"total_committers":22,"mean_commits":7.818181818181818,"dds":"0.41860465116279066","last_synced_commit":"8f0c5c3c9df3a10e32f1972636675af6fffef998"},"previous_names":[],"tags_count":46,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ljharb","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219863930,"owners_count":16554022,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"ljharb","name":"Jordan Harband","uuid":"45469","kind":"user","description":"software engineer/nerd/teacher/will try anything once; surgeon with git rebase. @TC39 ex @Coinbase @Airbnb @Twitter @MobBase. Fav punctuation ⸮, scent petrichor","email":"","website":null,"location":"Hillsborough, CA","twitter":"LJHarb","company":"@herodevs @tc39 ","icon_url":"https://avatars.githubusercontent.com/u/45469?u=6ab74b3b934f9659a90b588062c2c4328e40c6be\u0026v=4","repositories_count":255,"last_synced_at":"2024-06-11T15:41:32.189Z","metadata":{"has_sponsors_listing":true,"funding":{"github":["ljharb"],"patreon":null,"open_collective":null,"ko_fi":"ljharb","tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"polar":null,"buy_me_a_coffee":null,"custom":null}},"html_url":"https://github.com/ljharb","funding_links":["https://github.com/sponsors/ljharb","https://ko-fi.com/ljharb"],"total_stars":10683,"followers":6841,"following":380,"created_at":"2022-11-02T16:19:00.017Z","updated_at":"2024-06-11T15:41:39.816Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ljharb","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ljharb/repositories"},"tags":[{"name":"v1.8.1","sha":"da8a3abb4b2754dd9c1d3203142133e253c515a4","kind":"tag","published_at":"2023-04-07T20:56:06.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.8.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.8.1/manifests"},{"name":"v1.8.0","sha":"508e2f9c6439706cc696407d52fec36f78248a19","kind":"tag","published_at":"2023-01-31T03:26:21.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.8.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.8.0/manifests"},{"name":"v1.7.4","sha":"5409e72ef6c905c4d1637883cd394f6f07abd934","kind":"tag","published_at":"2022-10-12T22:01:02.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.7.4","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.4/manifests"},{"name":"1.7.3","sha":"6a8a899c62a58a30fb128a7079f02826ed4faee0","kind":"commit","published_at":"2021-10-21T06:34:28.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.7.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.7.3/manifests"},{"name":"v1.7.3","sha":"6a8a899c62a58a30fb128a7079f02826ed4faee0","kind":"tag","published_at":"2021-10-21T06:34:28.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.7.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.3/manifests"},{"name":"v1.7.2","sha":"89a1993809eb7620ec985c3b6869c9079287c35a","kind":"commit","published_at":"2019-08-30T18:37:20.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.7.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.2/manifests"},{"name":"v1.7.1","sha":"c2950fba942da2d2e17a8fb5a4eaf8f8c72d1ab3","kind":"commit","published_at":"2019-08-13T13:34:41.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.7.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.1/manifests"},{"name":"v1.7.0","sha":"09ed4dfb9fe315b4a416e36e0c39bda87975494e","kind":"commit","published_at":"2019-08-13T07:51:55.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.7.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.7.0/manifests"},{"name":"v1.6.3","sha":"c90d2c69b74865f7018a18e8c847d1fac4efcd28","kind":"commit","published_at":"2019-08-13T07:41:26.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.6.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.3/manifests"},{"name":"v1.6.2","sha":"fd9e3da9fd9b275dca0eefdb8062306e76528a97","kind":"commit","published_at":"2019-08-13T07:14:54.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.6.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.2/manifests"},{"name":"1.6.1","sha":"09935581cd2b300d74a65bda3b1cbeb52779dd16","kind":"commit","published_at":"2016-06-17T20:43:01.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.6.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.6.1/manifests"},{"name":"v1.6.1","sha":"09935581cd2b300d74a65bda3b1cbeb52779dd16","kind":"tag","published_at":"2016-06-17T20:43:01.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.6.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"88a5280d9c3f5d43fffa538ae9919d1ae579b56e","kind":"tag","published_at":"2016-04-24T05:59:38.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.6.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.6.0/manifests"},{"name":"1.6.0","sha":"88a5280d9c3f5d43fffa538ae9919d1ae579b56e","kind":"commit","published_at":"2016-04-24T05:59:38.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.6.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.6.0/manifests"},{"name":"v1.5.0","sha":"609735869389bd3fbc4bac9830f34fcea5cb6e46","kind":"tag","published_at":"2016-03-16T18:03:59.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.5.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.5.0/manifests"},{"name":"1.5.0","sha":"609735869389bd3fbc4bac9830f34fcea5cb6e46","kind":"commit","published_at":"2016-03-16T18:03:59.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.5.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.5.0/manifests"},{"name":"v1.4.3","sha":"88c9b82e446c32bf782461059d2cb8b147e037d8","kind":"tag","published_at":"2015-03-08T03:49:50.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.4.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.3/manifests"},{"name":"1.4.3","sha":"88c9b82e446c32bf782461059d2cb8b147e037d8","kind":"commit","published_at":"2015-03-08T03:49:50.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.4.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.3/manifests"},{"name":"v1.4.2","sha":"cf747ca3969f4a4a27a7270f1f1cc7665751e8ec","kind":"tag","published_at":"2014-07-20T21:26:41.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.4.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.2/manifests"},{"name":"1.4.2","sha":"cf747ca3969f4a4a27a7270f1f1cc7665751e8ec","kind":"commit","published_at":"2014-07-20T21:26:41.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.4.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.2/manifests"},{"name":"v1.4.1","sha":"708e1e31732c46b983611d1174e01f663138ddc1","kind":"tag","published_at":"2013-12-25T00:58:25.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.4.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.1/manifests"},{"name":"1.4.1","sha":"708e1e31732c46b983611d1174e01f663138ddc1","kind":"commit","published_at":"2013-12-25T00:58:25.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.4.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.1/manifests"},{"name":"1.4.0","sha":"9c499321f2d6b817edb7573346b8bb5523069c99","kind":"commit","published_at":"2013-10-18T01:40:17.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.4.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.4.0/manifests"},{"name":"v1.4.0","sha":"9c499321f2d6b817edb7573346b8bb5523069c99","kind":"tag","published_at":"2013-10-18T01:40:17.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.4.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.4.0/manifests"},{"name":"1.3.3","sha":"649fa46319838dccd1bd7511b81fa4bc1c4f4287","kind":"commit","published_at":"2013-06-24T12:01:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.3.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.3/manifests"},{"name":"v1.3.3","sha":"649fa46319838dccd1bd7511b81fa4bc1c4f4287","kind":"tag","published_at":"2013-06-24T12:01:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.3.3","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"7ab76228cb9b54786b696434c088c3e62a2157fd","kind":"tag","published_at":"2013-06-24T11:49:52.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.3.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.2/manifests"},{"name":"1.3.2","sha":"7ab76228cb9b54786b696434c088c3e62a2157fd","kind":"commit","published_at":"2013-06-24T11:49:52.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.3.2","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.2/manifests"},{"name":"v1.3.1","sha":"4380811eef06f642a6e5e6764e8938ccf80927d5","kind":"tag","published_at":"2013-05-13T13:47:33.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.3.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.1/manifests"},{"name":"1.3.1","sha":"4380811eef06f642a6e5e6764e8938ccf80927d5","kind":"commit","published_at":"2013-05-13T13:47:33.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.3.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.1/manifests"},{"name":"1.3.0","sha":"041c5da88800b4e15f0ed023049050b11b623a23","kind":"commit","published_at":"2013-05-13T13:41:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.3.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.3.0/manifests"},{"name":"v1.3.0","sha":"041c5da88800b4e15f0ed023049050b11b623a23","kind":"tag","published_at":"2013-05-13T13:41:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.3.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.3.0/manifests"},{"name":"1.2.0","sha":"414eeedd77aa7288d47b597cff3da1c6eb55633a","kind":"commit","published_at":"2013-05-13T12:09:11.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.2.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.2.0/manifests"},{"name":"v1.2.0","sha":"414eeedd77aa7288d47b597cff3da1c6eb55633a","kind":"tag","published_at":"2013-05-13T12:09:11.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.2.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.2.0/manifests"},{"name":"1.1.0","sha":"9d4a8f57793e3e212b7798d5de4386e073134dfd","kind":"commit","published_at":"2013-05-13T10:34:20.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.1.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.1.0/manifests"},{"name":"v1.1.0","sha":"9d4a8f57793e3e212b7798d5de4386e073134dfd","kind":"tag","published_at":"2013-05-13T10:34:20.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.1.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"17a40edb3cd7a0f1c44be2be5ddd412c8ca2b7ca","kind":"tag","published_at":"2013-05-13T10:26:12.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v1.0.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v1.0.0/manifests"},{"name":"1.0.0","sha":"17a40edb3cd7a0f1c44be2be5ddd412c8ca2b7ca","kind":"commit","published_at":"2013-05-13T10:26:12.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/1.0.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/1.0.0/manifests"},{"name":"0.1.1","sha":"ce51b1fb92de142b81c7718e85389389302f326f","kind":"commit","published_at":"2013-04-17T08:04:25.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/0.1.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.1.1/manifests"},{"name":"v0.1.1","sha":"ce51b1fb92de142b81c7718e85389389302f326f","kind":"tag","published_at":"2013-04-17T08:04:25.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v0.1.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"eef91521b2c7630be38665d192d72b183591a5b3","kind":"tag","published_at":"2013-04-15T04:34:15.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v0.1.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.1.0/manifests"},{"name":"0.1.0","sha":"eef91521b2c7630be38665d192d72b183591a5b3","kind":"commit","published_at":"2013-04-15T04:34:15.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/0.1.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.1.0/manifests"},{"name":"0.0.1","sha":"5ce339feeaf971a5172fe58faa3ac5f90bdfe8b5","kind":"commit","published_at":"2012-05-18T18:25:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/0.0.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.0.1/manifests"},{"name":"v0.0.1","sha":"5ce339feeaf971a5172fe58faa3ac5f90bdfe8b5","kind":"tag","published_at":"2012-05-18T18:25:19.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v0.0.1","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.0.1/manifests"},{"name":"0.0.0","sha":"1c72261f45002744fac3fecec3f0395924d66717","kind":"commit","published_at":"2012-05-18T10:41:15.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/0.0.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/0.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/0.0.0/manifests"},{"name":"v0.0.0","sha":"1c72261f45002744fac3fecec3f0395924d66717","kind":"tag","published_at":"2012-05-18T10:41:15.000Z","download_url":"https://codeload.github.com/ljharb/shell-quote/tar.gz/v0.0.0","html_url":"https://github.com/ljharb/shell-quote/releases/tag/v0.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ljharb%2Fshell-quote/tags/v0.0.0/manifests"}]},"repo_metadata_updated_at":"2024-09-30T06:41:55.827Z","dependent_packages_count":1586,"downloads":110381215,"downloads_period":"last-month","dependent_repos_count":2355456,"rankings":{"downloads":0.02245145830435635,"dependent_repos_count":0.011170969497777305,"dependent_packages_count":0.04747662036555355,"stargazers_count":8.04753577380752,"forks_count":6.934983570730189,"docker_downloads_count":0.026339393766818056,"average":2.5149929644120355},"purl":"pkg:npm/shell-quote","advisories":[{"uuid":"GSA_kwCzR0hTQS1nNHJnLTk5M3ItbWd4N84AAqZr","url":"https://github.com/advisories/GHSA-g4rg-993r-mgx7","title":"Improper Neutralization of Special Elements used in a Command in Shell-quote","description":"The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive letters. If the output of this package is passed to a real shell as a quoted argument to a command with `exec()`, an attacker can inject arbitrary commands. This is because the Windows drive letter regex character class is `[A-z]` instead of the correct `[A-Za-z]`. Several shell metacharacters exist in the space between capital letter Z and lower case letter a, such as the backtick character.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-05-24T19:18:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-42740","https://www.npmjs.com/package/shell-quote","https://github.com/ljharb/shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe","https://github.com/ljharb/shell-quote/blob/master/CHANGELOG.md#173","https://github.com/advisories/GHSA-g4rg-993r-mgx7"],"source_kind":"github","identifiers":["GHSA-g4rg-993r-mgx7","CVE-2021-42740"],"repository_url":"https://github.com/ljharb/shell-quote","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.7.3","vulnerable_version_range":"\u003c= 1.7.2"}],"ecosystem":"npm","package_name":"shell-quote"}],"created_at":"2022-12-21T16:12:17.987Z","updated_at":"2024-02-02T20:50:03.000Z","epss_percentage":0.07537,"epss_percentile":0.91036},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnOHAtdjlxNC1naDM0","url":"https://github.com/advisories/GHSA-qg8p-v9q4-gh34","title":"Potential Command Injection in shell-quote","description":"Affected versions of `shell-quote` do not properly escape command line arguments, which may result in command injection if the library is used to escape user input destined for use as command line arguments.\n\n\n\n## Proof of Concept:\n\nThe following characters are not escaped properly: `\u003e`,`;`,`{`,`}`\n\nBash has a neat but not well known feature known as \"Bash Brace Expansion\", wherein a sub-command can be executed without spaces by running it between a set of `{}` and using the `,` instead of ` ` to seperate arguments. Because of this, full command injection is possible even though it was initially thought to be impossible. \n\n```\n   const quote = require('shell-quote').quote;\n   console.log(quote(['a;{echo,test,123,234}']));\n   // Actual                    \"a;{echo,test,123,234}\"\n   // Expected                  \"a\\;\\{echo,test,123,234\\}\"\n   // Functional Equivalent     \"a; echo 'test' '123' '1234'\"\n```\n\n\n\n## Recommendation\n\nUpdate to version 1.6.1 or later.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2019-02-18T23:58:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-10541","https://github.com/advisories/GHSA-qg8p-v9q4-gh34","https://www.npmjs.com/advisories/117"],"source_kind":"github","identifiers":["GHSA-qg8p-v9q4-gh34","CVE-2016-10541"],"repository_url":null,"blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.6.1","vulnerable_version_range":"\u003c 1.6.1"}],"ecosystem":"npm","package_name":"shell-quote"}],"created_at":"2022-12-21T16:13:31.356Z","updated_at":"2025-04-16T01:15:43.150Z","epss_percentage":0.00418,"epss_percentile":0.6058}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/shell-quote","docker_dependents_count":11803,"docker_downloads_count":4990610265,"usage_url":"https://repos.ecosyste.ms/usage/npm/shell-quote","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/shell-quote/dependencies","status":null,"funding_links":["https://github.com/sponsors/ljharb"],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/shell-quote/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/shell-quote/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/shell-quote/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/shell-quote/related_packages","maintainers":[{"uuid":"ljharb","login":"ljharb","name":null,"email":"ljharb@gmail.com","url":null,"packages_count":546,"html_url":"https://www.npmjs.com/~ljharb","role":null,"created_at":"2022-11-14T10:22:01.289Z","updated_at":"2022-11-14T10:22:01.289Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/ljharb/packages"},{"uuid":"karissa","login":"karissa","name":null,"email":"krmckelv@gmail.com","url":null,"packages_count":190,"html_url":"https://www.npmjs.com/~karissa","role":null,"created_at":"2022-11-14T10:22:01.250Z","updated_at":"2022-11-14T10:22:01.250Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/karissa/packages"},{"uuid":"goto-bus-stop","login":"goto-bus-stop","name":null,"email":"renee@kooi.me","url":null,"packages_count":334,"html_url":"https://www.npmjs.com/~goto-bus-stop","role":null,"created_at":"2022-11-14T10:22:01.194Z","updated_at":"2022-11-14T10:22:01.194Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/goto-bus-stop/packages"},{"uuid":"jiwaddell","login":"jiwaddell","name":null,"email":"jacob.im.waddell@gmail.com","url":null,"packages_count":1,"html_url":"https://www.npmjs.com/~jiwaddell","role":null,"created_at":"2022-11-14T10:22:01.381Z","updated_at":"2022-11-14T10:22:01.381Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jiwaddell/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5001845,"maintainers_count":1011767,"namespaces_count":294978,"keywords_count":699119,"github":"npm","metadata":{"funded_packages_count":150111},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2025-06-03T06:12:00.946Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},"unique_repositories_count":58367,"unique_repositories_count_past_30_days":133,"recent_issues":[{"uuid":"6004223840","node_id":"PR_kwDOMdO_Lc8AAAABKVI93w","number":235,"state":"closed","title":"chore(deps): bump shell-quote from 1.8.3 to 1.12.0","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-23T19:32:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-23T19:32:15.000Z","updated_at":"2026-10-23T19:32:40.000Z","time_to_close":19,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.8.3\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/glincker/glin-profanity/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/GLINCKER/glin-profanity/pull/235","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GLINCKER%2Fglin-profanity/issues/235","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/235/packages"},{"uuid":"5998780511","node_id":"PR_kwDOQON_4M8AAAABKQuMOw","number":2,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T13:36:06.000Z","updated_at":"2026-10-23T13:36:45.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":20,"packages":[{"name":"axios","old_version":"1.12.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"baseline-browser-mapping","old_version":"2.8.4","new_version":"2.11.31","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.9","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.26.0","new_version":"4.29.4","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.9","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/form-data/form-data"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"launch-editor","old_version":"2.11.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.13.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"react-router","old_version":"6.30.1","new_version":"7.18.4","repository_url":"https://github.com/remix-run/react-router"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 20 updates in the /frontend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.23` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.8.4` | `2.11.31` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.9` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.26.0` | `4.29.4` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.9` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.4` | `3.0.5` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.11.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.16.1` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `6.30.1` | `7.18.4` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.12.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eMaximum call stack size exceeded\u003c/code\u003e error.\u003c/li\u003e\n\u003cli\u003eFixed Prototype hijacking for \u003ccode\u003epostcss.fromJSON()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e for unmapped end position (by \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eMaximum call stack size exceeded\u003c/code\u003e error.\u003c/li\u003e\n\u003cli\u003eFixed Prototype hijacking for \u003ccode\u003epostcss.fromJSON()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e for unmapped end position (by \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd\"\u003e\u003ccode\u003eeb9e1fe\u003c/code\u003e\u003c/a\u003e Release 8.5.23 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84\"\u003e\u003ccode\u003e9d19c78\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8\"\u003e\u003ccode\u003e7beca13\u003c/code\u003e\u003c/a\u003e Does no load source map file without opts.from\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930\"\u003e\u003ccode\u003edecea51\u003c/code\u003e\u003c/a\u003e Typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae\"\u003e\u003ccode\u003ec18e30d\u003c/code\u003e\u003c/a\u003e Update EM banner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc\"\u003e\u003ccode\u003e98a39ad\u003c/code\u003e\u003c/a\u003e Update EM banner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352\"\u003e\u003ccode\u003ea3e48c4\u003c/code\u003e\u003c/a\u003e Release 8.5.22 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618\"\u003e\u003ccode\u003ef49d691\u003c/code\u003e\u003c/a\u003e Fix custom property losing its semicolon before a comment (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2117\"\u003e#2117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e\"\u003e\u003ccode\u003e28e0daf\u003c/code\u003e\u003c/a\u003e Release 8.5.21 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9\"\u003e\u003ccode\u003e3d2b4e4\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.8.4 to 2.11.31\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.9.3 - remove \u003ccode\u003eprocess.loadEnvFile()\u003c/code\u003e\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove process.loadEnfFile() from main script by \u003ca href=\"https://github.com/tonypconway\"\u003e\u003ccode\u003e@​tonypconway\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/112\"\u003eweb-platform-dx/baseline-browser-mapping#112\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.9.2 - fix browser support bug\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix browser support bug by \u003ca href=\"https://github.com/tonypconway\"\u003e\u003ccode\u003e@​tonypconway\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/111\"\u003eweb-platform-dx/baseline-browser-mapping#111\u003c/a\u003e\n\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.1...v2.9.2\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.1...v2.9.2\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.9.0 - Reduce frequency of data staleness warnings\u003c/h2\u003e\n\u003cp\u003eThis version introduces a number of changes to data staleness warnings in response to \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/105\"\u003e#105\u003c/a\u003e , \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/107\"\u003e#107\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/109\"\u003e#109\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eData staleness warnings are now only shown if the \u003ccode\u003egetCompatibleVersions()\u003c/code\u003e or \u003ccode\u003egetAllVersions()\u003c/code\u003e functions are called - previously they were shown whenever the module was loaded, which meant many \u003ccode\u003ebrowserslist\u003c/code\u003e consumers were seeing the warning despite not targeting Baseline, especially those who were consuming \u003ccode\u003ebrowserslist\u003c/code\u003e in a pre-compiled format via \u003ccode\u003enext.js\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:\n\u003cul\u003e\n\u003cli\u003eThe feature cut off data must be within the last two months, i.e. \u003ccode\u003ewidelyAvailableOnDate: today + \u0026gt;2 years and 4 months\u003c/code\u003e or \u003ccode\u003enewly available\u003c/code\u003e in a \u003ccode\u003ebrowserslist\u003c/code\u003e query.\u003c/li\u003e\n\u003cli\u003eThe module data must be more than 2 months old.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eIntroduces suppression options for these warning via the \u003ccode\u003eoptions\u003c/code\u003e objects and environment variables:\n\u003cul\u003e\n\u003cli\u003eAdds a new \u003ccode\u003esuppressWarnings\u003c/code\u003e boolean to the \u003ccode\u003egetCompatibleVersions()\u003c/code\u003e and \u003ccode\u003egetAllVersions()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRespects the existing \u003ca href=\"https://github.com/browserslist/browserslist/commit/0ae7155a6c7d8f58eaeb3ea450c21bec76de2763\"\u003e\u003ccode\u003eBROWSERSLIST_IGNORE_OLD_DATA\u003c/code\u003e\u003c/a\u003e environment variable.\u003c/li\u003e\n\u003cli\u003eRespects a new \u003ccode\u003eBASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdds \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping?tab=readme-ov-file#keeping-baseline-browser-mapping-up-to-date\"\u003eexplanatory text to the README\u003c/a\u003e for how to avoid such warnings when reproducible builds are a requirement.\u003c/li\u003e\n\u003cli\u003eChange warning text to be package manager agnostic and mention the possibility of pre-compiled data.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/22ea69ac8ce6a1f62b400f5ffaba170a172d7da4\"\u003e\u003ccode\u003e22ea69a\u003c/code\u003e\u003c/a\u003e Patch to 2.11.31 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/aac391770954190bbf5dce838fe1c41d3ee8a1d5\"\u003e\u003ccode\u003eaac3917\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/19670e7ed107c5a3a4205e062719d728fa32b6e7\"\u003e\u003ccode\u003e19670e7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/65822d68d94d62ef7259ab276bc4f5af6da3953e\"\u003e\u003ccode\u003e65822d6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.30 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c074f56f721b23cfd2e9a434040b655c3a485fc5\"\u003e\u003ccode\u003ec074f56\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/4517bea2fdc3971769c6b4f9ba65dba54b049365\"\u003e\u003ccode\u003e4517bea\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/43522080cdda10b8cac5735b6d14c1067e956150\"\u003e\u003ccode\u003e4352208\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/091495e6580b1a7f2af92e867c1b2d536453b980\"\u003e\u003ccode\u003e091495e\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump \u003ccode\u003e@​humanfs/node\u003c/code\u003e from 0.16.6 to 0.16.8 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c69aabad5fc5acaa2f73c33cbf2b2b74c7bfee4a\"\u003e\u003ccode\u003ec69aaba\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump js-yaml from 4.3.1 to 4.3.2 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/151\"\u003e#151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/3fa5618d3150cf8383d49fea0657302eabcba638\"\u003e\u003ccode\u003e3fa5618\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump proxy-addr from 2.0.7 to 2.0.8 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/150\"\u003e#150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.8.4...v2.11.31\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.9\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-111181\"\u003eCVE-2026-111181\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828\"\u003eGHSA-27r3-jxmh-p828\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRelease: 1.20.9 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/779\"\u003eexpressjs/body-parser#779\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.8...1.20.9\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.8...1.20.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.9/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.9\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828\"\u003eGHSA-27r3-jxmh-p828\u003c/a\u003e (CVE-2026-111181)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/a64f1404e256b3f0e3ce633e081a7593fe482203\"\u003e\u003ccode\u003ea64f140\u003c/code\u003e\u003c/a\u003e 1.20.9 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/779\"\u003e#779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7\"\u003e\u003ccode\u003e1260c38\u003c/code\u003e\u003c/a\u003e fix: prevent process crash from trailing bytes after a compressed body\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b4c2112ff66163da4304188edda5690e90f7c8a7\"\u003e\u003ccode\u003eb4c2112\u003c/code\u003e\u003c/a\u003e docs: fix depth error description (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/776\"\u003e#776\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/29ddb9b43385d3b2c16003aeb8934913ec274011\"\u003e\u003ccode\u003e29ddb9b\u003c/code\u003e\u003c/a\u003e docs: improve readability (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/ac9667a35e178f2c4465fb0298679cfb46629584\"\u003e\u003ccode\u003eac9667a\u003c/code\u003e\u003c/a\u003e docs: improve wording (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/755\"\u003e#755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.26.0 to 4.29.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed joined version bounds in version ray and range queries (by \u003ca href=\"https://github.com/ybai08\"\u003e\u003ccode\u003e@​ybai08\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespaces processing (by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed joined version bounds in version ray and range queries (by \u003ca href=\"https://github.com/ybai08\"\u003e\u003ccode\u003e@​ybai08\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespaces processing (by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f7a99b9da8d1e86d04f3fe821ee7ef85e8f8f4d5\"\u003e\u003ccode\u003ef7a99b9\u003c/code\u003e\u003c/a\u003e Release 4.29.4 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/03fc7029dc74eee69e1b0129bde13e1b6dfdf0ca\"\u003e\u003ccode\u003e03fc702\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/efe07e181972a35579bf9f380b514c0ce6f79bc1\"\u003e\u003ccode\u003eefe07e1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/956\"\u003e#956\u003c/a\u003e from ybai08/fix-joined-range-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ef50f5be498c03682c40d9fe895db9f30ae323c5\"\u003e\u003ccode\u003eef50f5b\u003c/code\u003e\u003c/a\u003e Fix joined version bounds in version ray and range queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/8219dd79df0315feaabba302077a66e236822a3a\"\u003e\u003ccode\u003e8219dd7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/954\"\u003e#954\u003c/a\u003e from abhu85/fix-since-extends-whitespace\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/893120be94c923495b2668cad9c5595fc4e4ed3a\"\u003e\u003ccode\u003e893120b\u003c/code\u003e\u003c/a\u003e Allow arbitrary whitespaces in since, extends, config and not queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.26.0...4.29.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"ht...\n\n_Description has been truncated_","html_url":"https://github.com/Vaibhavee89/FullStack-Containerized-App/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vaibhavee89%2FFullStack-Containerized-App/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5992966173","node_id":"PR_kwDOTJ14Gc8AAAABKMEX5g","number":48,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 7 directories with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T06:18:07.000Z","updated_at":"2026-10-23T06:25:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":20,"packages":[{"name":"katex","old_version":"0.16.47","new_version":"0.18.2","repository_url":"https://github.com/KaTeX/KaTeX"},{"name":"vite","old_version":"8.2.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"dompurify","old_version":"3.4.12","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"simple-git","old_version":"3.36.0","new_version":"4.0.1","repository_url":"https://github.com/steveukx/git-js"},{"name":"electron","old_version":"40.10.2","new_version":"42.11.9","repository_url":"https://github.com/electron/electron"},{"name":"undici","old_version":"6.27.0","new_version":"6.29.1","repository_url":"https://github.com/nodejs/undici"},{"name":"undici","old_version":"7.28.0","new_version":"7.30.1","repository_url":"https://github.com/nodejs/undici"},{"name":"@simple-git/argv-parser","old_version":"1.1.1","new_version":"2.0.0","repository_url":"https://github.com/steveukx/git-js"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"4.1.12","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"fast-uri","old_version":"3.1.5","new_version":"3.1.9","repository_url":"https://github.com/fastify/fast-uri"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"18.2.3","new_version":"18.3.0","repository_url":"https://github.com/hapijs/joi"},{"name":"sanitize-html","old_version":"2.17.6","new_version":"2.18.1","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"shell-quote","old_version":"1.9.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.3.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.36.0` | `4.0.1` |\n| [electron](https://github.com/electron/electron) | `40.10.2` | `42.11.9` |\n| [undici](https://github.com/nodejs/undici) | `6.27.0` | `6.29.1` |\n| [undici](https://github.com/nodejs/undici) | `7.28.0` | `7.30.1` |\n| [@simple-git/argv-parser](https://github.com/steveukx/git-js/tree/HEAD/packages/argv-parser) | `1.1.1` | `2.0.0` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `4.1.12` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.5` | `3.1.9` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `18.2.3` | `18.3.0` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.6` | `2.18.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.9.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\nBumps the npm_and_yarn group with 2 updates in the /apps/bootstrap-installer directory: [katex](https://github.com/KaTeX/KaTeX) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 5 updates in the /apps/desktop directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.3.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.36.0` | `4.0.1` |\n| [electron](https://github.com/electron/electron) | `40.10.2` | `42.11.9` |\n\nBumps the npm_and_yarn group with 3 updates in the /scripts/whatsapp-bridge directory: [music-metadata](https://github.com/Borewit/music-metadata), [proxy-addr](https://github.com/jshttp/proxy-addr) and [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 1 update in the /ui-tui directory: [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 1 update in the /web directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 12 updates in the /website directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.10` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [undici](https://github.com/nodejs/undici) | `7.28.0` | `7.30.1` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.4` | `3.1.9` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.4` | `17.13.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n\n\nUpdates `katex` from 0.16.47 to 0.18.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/releases\"\u003ekatex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.18.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.1...v0.18.2\"\u003e0.18.2\u003c/a\u003e (2026-08-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e0adf7e7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.0...v0.18.1\"\u003e0.18.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehtmlData:\u003c/strong\u003e allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e87a2b30\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4204\"\u003e#4204\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4218\"\u003e#4218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.17.0...v0.18.0\"\u003e0.18.0\u003c/a\u003e (2026-07-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprefix css classes (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4229\"\u003e#4229\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/6f5c44f69bae0703877a3a8d934e20c47bbbbc32\"\u003e6f5c44f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eusers who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.17.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.17.0\"\u003e0.17.0\u003c/a\u003e (2026-05-22)\u003c/h1\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify \u003ccode\u003edefineFunction\u003c/code\u003e to avoid destructuring, improve typing (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4222\"\u003e#4222\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/fb604e6ba63e99809e242d37f9c8359209d55431\"\u003efb604e6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe internal API for \u003ccode\u003e__defineFunction\u003c/code\u003e changed: you should no longer wrap properties in \u003ccode\u003eprops\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md\"\u003ekatex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.1...v0.18.2\"\u003e0.18.2\u003c/a\u003e (2026-08-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e0adf7e7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.0...v0.18.1\"\u003e0.18.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehtmlData:\u003c/strong\u003e allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e87a2b30\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4204\"\u003e#4204\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4218\"\u003e#4218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.17.0...v0.18.0\"\u003e0.18.0\u003c/a\u003e (2026-07-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprefix css classes (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4229\"\u003e#4229\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/6f5c44f69bae0703877a3a8d934e20c47bbbbc32\"\u003e6f5c44f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eusers who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.17.0\"\u003e0.17.0\u003c/a\u003e (2026-05-22)\u003c/h1\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify \u003ccode\u003edefineFunction\u003c/code\u003e to avoid destructuring, improve typing (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4222\"\u003e#4222\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/fb604e6ba63e99809e242d37f9c8359209d55431\"\u003efb604e6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe internal API for \u003ccode\u003e__defineFunction\u003c/code\u003e changed: you should no longer wrap properties in \u003ccode\u003eprops\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/93c362b0a57e1e87684f08eb628ef4288938af2f\"\u003e\u003ccode\u003e93c362b\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.2 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e\u003ccode\u003e0adf7e7\u003c/code\u003e\u003c/a\u003e fix: prevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/5a5bf2060431aaed5eb3b549f6fab24f55e9e70a\"\u003e\u003ccode\u003e5a5bf20\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency postcss to v8.5.23 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4259\"\u003e#4259\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/313490889a5f51555cf382097c7e45548c330989\"\u003e\u003ccode\u003e3134908\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4 to 4.37.4 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/69edd93f98dea2e98b831880a9b9dd5a13727165\"\u003e\u003ccode\u003e69edd93\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency js-yaml to v4.3.0 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4253\"\u003e#4253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/b3008858c2b0834725a2fd2370201f2799bd7864\"\u003e\u003ccode\u003eb300885\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency postcss to v8.5.18 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4252\"\u003e#4252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/42d224973604f8f388f3d7ac9ec815e178b180a7\"\u003e\u003ccode\u003e42d2249\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency webpack-dev-server to v5.2.6 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4251\"\u003e#4251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/afbf97ddb48ab48ca9a34ce0d89d24064f9fd85d\"\u003e\u003ccode\u003eafbf97d\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-node from 6 to 7 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/cdf479f6749fd2a04c2ccad9be0ead2ac26c33d2\"\u003e\u003ccode\u003ecdf479f\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.1 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e\u003ccode\u003e87a2b30\u003c/code\u003e\u003c/a\u003e fix(htmlData): allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.18.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 8.2.0 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.12 to 3.4.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with \u003ccode\u003eIN_PLACE\u003c/code\u003e, \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e and shadow roots, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eIN_PLACE\u003c/code\u003e handling of nodes that hooks or custom elements tough during sanitization, thanks \u003ca href=\"https://github.com/uttej-badwane\"\u003e\u003ccode\u003e@​uttej-badwane\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the SMIL \u003ccode\u003eattributeName\u003c/code\u003e guard in XHTML mode, thanks \u003ca href=\"https://github.com/Koukyosyumei\"\u003e\u003ccode\u003e@​Koukyosyumei\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened several smaller edge cases (namespaces, literal-text elements, \u003ccode\u003eisValidAttribute()\u003c/code\u003e), thanks \u003ca href=\"https://github.com/artiphishell\"\u003e\u003ccode\u003e@​artiphishell\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a purify-edge test runner as a compatibility check, thanks \u003ca href=\"https://github.com/anzal1\"\u003e\u003ccode\u003e@​anzal1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClarified the \u003ccode\u003eIN_PLACE\u003c/code\u003e documentation in the README about possible risks\u003c/li\u003e\n\u003cli\u003eUpdated several dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with possible bypasses when risky tags are allow-listed, thanks \u003ca href=\"https://github.com/AlirezaRouhbakhsh\"\u003e\u003ccode\u003e@​AlirezaRouhbakhsh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a couple of edge cases with mixed document contexts, thanks \u003ca href=\"https://github.com/fishjojo1\"\u003e\u003ccode\u003e@​fishjojo1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded the SVG \u003ccode\u003epointer-events\u003c/code\u003e and \u003ccode\u003evector-effect\u003c/code\u003e presentation attributes to the allow-list, thanks \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation\u003c/li\u003e\n\u003cli\u003eUpdated the documentation in several spots, README, wiki, etc., thanks \u003ca href=\"https://github.com/Akokonunes\"\u003e\u003ccode\u003e@​Akokonunes\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated several development dependencies and CI workflow actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with hook removal during \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with hooks potentially bypassing the clone guard, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with DOM clobbering via \u003ccode\u003eownerDocument\u003c/code\u003e during \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a77a3e78b59f72fa4d1c83f22e121ad9cc7d3575\"\u003e\u003ccode\u003ea77a3e7\u003c/code\u003e\u003c/a\u003e release: 3.4.17 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1672\"\u003e#1672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49\"\u003e\u003ccode\u003e4e6fe24\u003c/code\u003e\u003c/a\u003e release: 3.4.14 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1587\"\u003e#1587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f\"\u003e\u003ccode\u003e3067f77\u003c/code\u003e\u003c/a\u003e release: 3.4.13 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1562\"\u003e#1562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `simple-git` from 3.36.0 to 4.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/releases\"\u003esimple-git's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esimple-git@4.0.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e365f52d: Prepare package.json before publishing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e98864c6: Major upgrade to v4. In this version:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved previously available default export, now uses a consistently named \u003ccode\u003esimpleGit\u003c/code\u003e export.\u003c/li\u003e\n\u003cli\u003eRemoved previously deprecated import \u003ccode\u003esimple-git/promise\u003c/code\u003e (change to using the main \u003ccode\u003esimple-git\u003c/code\u003e import).\u003c/li\u003e\n\u003cli\u003eRemoved legacy \u003ccode\u003egitP\u003c/code\u003e export (change to using the main \u003ccode\u003esimpleGit\u003c/code\u003e export).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - previously supported imports\nimport simpleGit from \u0026quot;simple-git\u0026quot;;\nimport { gitP } from \u0026quot;simple-git\u0026quot;;\nimport simpleGit from \u0026quot;simple-git/promise\u0026quot;;\nconst simpleGit = require(\u0026quot;simple-git\u0026quot;);\n\u003cp\u003e// v4 - consolidates to a single supported import\u003cbr /\u003e\nimport { simpleGit } from \u0026quot;simple-git\u0026quot;;\u003cbr /\u003e\nconst { simpleGit } = require(\u0026quot;simple-git\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevents the use of abbreviated long-form \u003ccode\u003egit\u003c/code\u003e options:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - allowed the use of unambiguous long-form options\ngit.raw(\u0026quot;clone\u0026quot;, \u0026quot;--conf=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\n\u003cp\u003e// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError\u003cbr /\u003e\ngit.raw(\u0026quot;fetch\u0026quot;, \u0026quot;--config=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAmbient environment variables are filtered before passing into the \u003ccode\u003egit\u003c/code\u003e child process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process can see both environment variables\n\u003cp\u003e// v4\u003cbr /\u003e\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\u003cbr /\u003e\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\u003cbr /\u003e\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process now sees only FOO\u003c/p\u003e\n\u003cp\u003esimpleGit({\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md\"\u003esimple-git's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e365f52d: Prepare package.json before publishing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e98864c6: Major upgrade to v4. In this version:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved previously available default export, now uses a consistently named \u003ccode\u003esimpleGit\u003c/code\u003e export.\u003c/li\u003e\n\u003cli\u003eRemoved previously deprecated import \u003ccode\u003esimple-git/promise\u003c/code\u003e (change to using the main \u003ccode\u003esimple-git\u003c/code\u003e import).\u003c/li\u003e\n\u003cli\u003eRemoved legacy \u003ccode\u003egitP\u003c/code\u003e export (change to using the main \u003ccode\u003esimpleGit\u003c/code\u003e export).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - previously supported imports\nimport simpleGit from \u0026quot;simple-git\u0026quot;;\nimport { gitP } from \u0026quot;simple-git\u0026quot;;\nimport simpleGit from \u0026quot;simple-git/promise\u0026quot;;\nconst simpleGit = require(\u0026quot;simple-git\u0026quot;);\n\u003cp\u003e// v4 - consolidates to a single supported import\u003cbr /\u003e\nimport { simpleGit } from \u0026quot;simple-git\u0026quot;;\u003cbr /\u003e\nconst { simpleGit } = require(\u0026quot;simple-git\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevents the use of abbreviated long-form \u003ccode\u003egit\u003c/code\u003e options:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - allowed the use of unambiguous long-form options\ngit.raw(\u0026quot;clone\u0026quot;, \u0026quot;--conf=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\n\u003cp\u003e// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError\u003cbr /\u003e\ngit.raw(\u0026quot;fetch\u0026quot;, \u0026quot;--config=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/anir0y\"\u003e\u003ccode\u003e@​anir0y\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/CFionaBF\"\u003e\u003ccode\u003e@​CFionaBF\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Leeziao\"\u003e\u003ccode\u003e@​Leeziao\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/internetteletubbie\"\u003e\u003ccode\u003e@​internetteletubbie\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/idisdi\"\u003e\u003ccode\u003e@​idisdi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/the-vibe-dev\"\u003e\u003ccode\u003e@​the-vibe-dev\u003c/code\u003e\u003c/a\u003e,\n\u003ca href=\"https://github.com/D7EAD\"\u003e\u003ccode\u003e@​D7EAD\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gdegrange\"\u003e\u003ccode\u003e@​gdegrange\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/bilguunbicktivism\"\u003e\u003ccode\u003e@​bilguunbicktivism\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/cruzryan\"\u003e\u003ccode\u003e@​cruzryan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/b1ue0ceanRun\"\u003e\u003ccode\u003e@​b1ue0ceanRun\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/oss-security-shopify\"\u003e\u003ccode\u003e@​oss-security-shopify\u003c/code\u003e\u003c/a\u003e\nfor identifying the vulnerability.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAmbient environment variables are filtered before passing into the \u003ccode\u003egit\u003c/code\u003e child process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process can see both environment variables\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/f26086d0cd649adda54a44f6e20e3e81318c5029\"\u003e\u003ccode\u003ef26086d\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/365f52d4c8deaf55ac88769ca89ce160e7bb1405\"\u003e\u003ccode\u003e365f52d\u003c/code\u003e\u003c/a\u003e Prepare the main \u003ccode\u003esimple-git\u003c/code\u003e \u003ccode\u003epackage.json\u003c/code\u003e immediately before publishing.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/3971917d3c3d65d9935383ed88970a3578cb462d\"\u003e\u003ccode\u003e3971917\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/d762810c13b331ff1e5eb24c0b434646d2a8d1b3\"\u003e\u003ccode\u003ed762810\u003c/code\u003e\u003c/a\u003e Fix/vulnerability rebase exec (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1198\"\u003e#1198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/76f308ed445013d8dd973bc515e7815b59426e3e\"\u003e\u003ccode\u003e76f308e\u003c/code\u003e\u003c/a\u003e Pr/1180 (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1195\"\u003e#1195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/dfeb11648190b2d82a98c91768ec6e3a65bb401c\"\u003e\u003ccode\u003edfeb116\u003c/code\u003e\u003c/a\u003e Fix/exec path vulnerability (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1197\"\u003e#1197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/98864c678444d9336357c844efa4fd5a7984c0d7\"\u003e\u003ccode\u003e98864c6\u003c/code\u003e\u003c/a\u003e V4 (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1193\"\u003e#1193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/steveukx/git-js/commits/simple-git@4.0.1/simple-git\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 40.10.2 to 42.11.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.11.9\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.9\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eclipboard.read()\u003c/code\u003e, \u003ccode\u003ereadText()\u003c/code\u003e and \u003ccode\u003ehas()\u003c/code\u003e resolving seconds late on Linux while the app was idle. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54310\"\u003e#54310\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54309\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54308\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54307\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003efs.rmSync\u003c/code\u003e failing to remove read-only files on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54257\"\u003e#54257\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54256\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54255\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54190\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003epointerLock\u003c/code\u003e permission requests from some iframes reporting the parent frame. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54466\"\u003e#54466\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54465\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54464\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54463\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eutilityProcess\u003c/code\u003e dropping \u003ccode\u003estdout\u003c/code\u003e/\u003ccode\u003estderr\u003c/code\u003e output that the child wrote immediately before exiting. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54332\"\u003e#54332\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54279\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54278\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54335\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed WebAssembly exception handlers failing to catch, or crashing during tier-up, in modules using wasm exceptions. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54236\"\u003e#54236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed WebAssembly modules loaded from the code cache crashing or throwing \u003ccode\u003eRuntimeError: unreachable\u003c/code\u003e after updating between certain patch releases. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54239\"\u003e#54239\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54238\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54246\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54237\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.8\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.8\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, Dawn, PDFium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54223\"\u003e#54223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.7\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.7\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a spurious \u0026quot;\u003ccode\u003esandboxed_renderer.bundle.js\u003c/code\u003e script failed to run\u0026quot; console error when DevTools attached to a sandboxed frame before its first navigation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54175\"\u003e#54175\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54176\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an \u0026quot;Invalid \u003ccode\u003eguestInstanceId\u003c/code\u003e\u0026quot; error when removing a loaded \u003ccode\u003e\u0026lt;webview\u0026gt;\u003c/code\u003e from the DOM. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54098\"\u003e#54098\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54097\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54099\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54096\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.6\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.6\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium, Dawn, PDFium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54083\"\u003e#54083\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.5\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.5\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53986\"\u003e#53986\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.4\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.4\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a renderer crash when an iframe was removed right after loading with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled and \u003ccode\u003esandbox\u003c/code\u003e disabled, e.g. on pages that embed Meta Pixel. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53886\"\u003e#53886\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53884\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53885\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53883\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d460d611a3d76010a3b0e02ca8739ed42ab591de\"\u003e\u003ccode\u003ed460d61\u003c/code\u003e\u003c/a\u003e test: parse all custom page size PDFs in one pdf.js process (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54539\"\u003e#54539\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/05a599ea67c174ae24525affffa4dee85b5abd8e\"\u003e\u003ccode\u003e05a599e\u003c/code\u003e\u003c/a\u003e test: wait for focus before requesting pointer lock in spec (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54531\"\u003e#54531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/00e2f2ed68ca31fbd336061a68455f6c871b8f2a\"\u003e\u003ccode\u003e00e2f2e\u003c/code\u003e\u003c/a\u003e test: wait for earlier Electron workers to exit before serial specs (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54509\"\u003e#54509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5bbb44efe6e5195744ccc55f86e033cd1bc57eea\"\u003e\u003ccode\u003e5bbb44e\u003c/code\u003e\u003c/a\u003e test: fix flaky navigationHistory.restore PageState spec (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54478\"\u003e#54478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/77ffb7bc21337f382fc6db03ffa1386770d8c5e5\"\u003e\u003ccode\u003e77ffb7b\u003c/code\u003e\u003c/a\u003e test: fix chrome.tabs reload spec race with the reload commit (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54477\"\u003e#54477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1755ee598697356959219beefee1e139bc3f8207\"\u003e\u003ccode\u003e1755ee5\u003c/code\u003e\u003c/a\u003e fix: attribute pointer lock requests from in-process iframes to the requestin...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b969f462d3f0f60823f4a3a46e1a7534fbb2eaaf\"\u003e\u003ccode\u003eb969f46\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54472\"\u003e#54472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/759b912b074eed470fbeb8d9ec4cdefd68884705\"\u003e\u003ccode\u003e759b912\u003c/code\u003e\u003c/a\u003e ci: send child-process logging to a file on the Windows test legs (42-x-y) (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/ba665804679753e3dff9fa800f63feb36f495c2e\"\u003e\u003ccode\u003eba66580\u003c/code\u003e\u003c/a\u003e test: run the spec suite with vitest (42-x-y) (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54414\"\u003e#54414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/840f1525b66f44701069d1a88008f6bde3e85ad2\"\u003e\u003ccode\u003e840f152\u003c/code\u003e\u003c/a\u003e ci: minimize the runner agent's terminal window before Windows tests (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54367\"\u003e#54367\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v40.10.2...v42.11.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 6.27.0 to 6.29.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.29.1\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service via TLS 1.2 certificate-changing renegotiation\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-87018 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm\"\u003eGHSA-qrxm-fqhp-jwvm\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.\u003c/p\u003e\n\u003ch4\u003eTLS certificate validation bypass through dropped \u003ccode\u003eAgent\u003c/code\u003e options\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109383 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx\"\u003eGHSA-2m5v-pch6-74hx\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAgent\u003c/code\u003e used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as \u003ccode\u003echeckServerIdentity\u003c/code\u003e. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.\u003c/p\u003e\n\u003ch4\u003eDenial of service through excessive \u003ccode\u003eContent-Encoding\u003c/code\u003e values\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109869 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c\"\u003eGHSA-xjj6-f33q-929c\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although \u003ccode\u003efetch()\u003c/code\u003e rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.\u003c/p\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service through unbounded EventSource parser state\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109924 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685\"\u003eGHSA-4qv8-2p9j-2685\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny \u003ccode\u003edata:\u003c/code\u003e fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.\u003c/p\u003e\n\u003ch4\u003eDenial of service through unbounded automatic WebSocket PONG buffering\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109932 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6\"\u003eGHSA-9fm3-97px-rjf6\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) by \u003ca href=\"https://github.com/mrityunjay-pandey\"\u003e\u003ccode\u003e@​mrityunjay-pandey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/6000\"\u003enodejs/undici#6000\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.29.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(retry): settle exposed body on terminal failure by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5778\"\u003enodejs/undici#5778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v6.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5833\"\u003enodejs/undici#5833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: synchronize the issue-3356 body timeout by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5834\"\u003enodejs/undici#5834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c57f6c68c95465338ae97bfc991cb1513d2f76e\"\u003e\u003ccode\u003e8c57f6c\u003c/code\u003e\u003c/a\u003e [Release] v6.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6023\"\u003e#6023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/39f93e142df03e559fe7c3d1fc7fba9beee2c185\"\u003e\u003ccode\u003e39f93e1\u003c/code\u003e\u003c/a\u003e fix(websocket): bound automatic PONG writes under backpressure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e\"\u003e\u003ccode\u003ec43b23f\u003c/code\u003e\u003c/a\u003e fix(eventsource): bound retained SSE parser state\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436\"\u003e\u003ccode\u003e1325a87\u003c/code\u003e\u003c/a\u003e fix(fetch): abort excessive content encoding responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f\"\u003e\u003ccode\u003e8c59f6b\u003c/code\u003e\u003c/a\u003e fix: preserve Agent connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28\"\u003e\u003ccode\u003eb40fbfc\u003c/code\u003e\u003c/a\u003e fix: handle post-connect TLS certificate errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/407630ac0a2f3bc65c596ed078dcffbeec0285c4\"\u003e\u003ccode\u003e407630a\u003c/code\u003e\u003c/a\u003e [v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6000\"\u003e#6000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e1d0501f8705253c32a8b40bdb3fc0474167c92d\"\u003e\u003ccode\u003ee1d0501\u003c/code\u003e\u003c/a\u003e Bumped v6.29.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5888\"\u003e#5888\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/57ac4dea0d38a0bf068eaf7eda0b8cb9e86f6a99\"\u003e\u003ccode\u003e57ac4de\u003c/code\u003e\u003c/a\u003e test: synchronize the issue-3356 body timeout (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5834\"\u003e#5834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d441740cf5dad3455a7a7881451e802f10b0b2a\"\u003e\u003ccode\u003e6d44174\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v6.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5833\"\u003e#5833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.27.0...v6.29.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.28.0 to 7.30.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.29.1\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service via TLS 1.2 certificate-changing renegotiation\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-87018 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm\"\u003eGHSA-qrxm-fqhp-jwvm\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.\u003c/p\u003e\n\u003ch4\u003eTLS certificate validation bypass through dropped \u003ccode\u003eAgent\u003c/code\u003e options\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109383 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx\"\u003eGHSA-2m5v-pch6-74hx\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAgent\u003c/code\u003e used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as \u003ccode\u003echeckServerIdentity\u003c/code\u003e. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.\u003c/p\u003e\n\u003ch4\u003eDenial of service through excessive \u003ccode\u003eContent-Encoding\u003c/code\u003e values\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109869 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c\"\u003eGHSA-xjj6-f33q-929c\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although \u003ccode\u003efetch()\u003c/code\u003e rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.\u003c/p\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service through unbounded EventSource parser state\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109924 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685\"\u003eGHSA-4qv8-2p9j-2685\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny \u003ccode\u003edata:\u003c/code\u003e fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.\u003c/p\u003e\n\u003ch4\u003eDenial of service through unbounded automatic WebSocket PONG buffering\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109932 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6\"\u003eGHSA-9fm3-97px-rjf6\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) by \u003ca href=\"https://github.com/mrityunjay-pandey\"\u003e\u003ccode\u003e@​mrityunjay-pandey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/6000\"\u003enodejs/undici#6000\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.29.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(retry): settle exposed body on terminal failure by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5778\"\u003enodejs/undici#5778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v6.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5833\"\u003enodejs/undici#5833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: synchronize the issue-3356 body timeout by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5834\"\u003enodejs/undici#5834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c57f6c68c95465338ae97bfc991cb1513d2f76e\"\u003e\u003ccode\u003e8c57f6c\u003c/code\u003e\u003c/a\u003e [Release] v6.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6023\"\u003e#6023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/39f93e142df03e559fe7c3d1fc7fba9beee2c185\"\u003e\u003ccode\u003e39f93e1\u003c/code\u003e\u003c/a\u003e fix(websocket): bound automatic PONG writes under backpressure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e\"\u003e\u003ccode\u003ec43b23f\u003c/code\u003e\u003c/a\u003e fix(eventsource): bound retained SSE parser state\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436\"\u003e\u003ccode\u003e1325a87\u003c/code\u003e\u003c/a\u003e fix(fetch): abort excessive content encoding responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f\"\u003e\u003ccode\u003e8c59f6b\u003c/code\u003e\u003c/a\u003e fix: preserve Agent connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28\"\u003e\u003ccode\u003eb40fbfc\u003c/code\u003e\u003c/a\u003e fix: handle post-connect TLS certificate errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/407630ac0a2f3bc65c596ed078dcffbeec0285c4\"\u003e\u003ccode\u003e407630a\u003c/code\u003e\u003c/a\u003e [v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6000\"\u003e#6000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e1d0501f8705253c32a8b40bdb3fc0474167c92d\"\u003e\u003ccode\u003ee1d0501\u003c/code\u003e\u003c/a\u003e Bumped v6.29.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5888\"\u003e#5888\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/57ac4dea0d38a0bf068eaf7eda0b8cb9e86f6a99\"\u003e\u003ccode\u003e57ac4de\u003c/code\u003e\u003c/a\u003e test: synchronize the issue-3356 body timeout (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5834\"\u003e#5834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d441740cf5dad3455a7a7881451e802f10b0b2a\"\u003e\u003ccode\u003e6d44174\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v6.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5833\"\u003e#5833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6...\n\n_Description has been truncated_","html_url":"https://github.com/nastechai/nastech-agent/pull/48","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nastechai%2Fnastech-agent/issues/48","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/48/packages"},{"uuid":"5992175669","node_id":"PR_kwDOTtBui88AAAABKLcFQQ","number":29,"state":"open","title":"build(deps): bump the npm_and_yarn group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T04:59:52.000Z","updated_at":"2026-10-23T05:00:22.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":8,"packages":[{"name":"vite","old_version":"8.2.1","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"@tanstack/start-server-core","old_version":"1.169.23","new_version":"1.169.45","repository_url":"https://github.com/TanStack/router"},{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"engine.io","old_version":"6.6.9","new_version":"6.6.11","repository_url":"https://github.com/socketio/socket.io"},{"name":"mysql2","old_version":"3.15.3","new_version":"3.24.4","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"seroval","old_version":"1.6.2","new_version":"1.7.1","repository_url":"https://github.com/lxsmnsyc/seroval"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.5` |\n| [@tanstack/start-server-core](https://github.com/TanStack/router/tree/HEAD/packages/start-server-core) | `1.169.23` | `1.169.45` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.18` | `1.1.21` |\n| [engine.io](https://github.com/socketio/socket.io) | `6.6.9` | `6.6.11` |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `3.15.3` | `3.24.4` |\n| [seroval](https://github.com/lxsmnsyc/seroval) | `1.6.2` | `1.7.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `vite` from 8.2.1 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/start-server-core` from 1.169.23 to 1.169.45\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/start-server-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.45\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8670\"\u003e#8670\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e - Reference agent skills in other packages by their \u003ccode\u003eintent load\u003c/code\u003e identifier (\u003ccode\u003e@tanstack/\u0026lt;package\u0026gt;#\u0026lt;skill\u0026gt;\u003c/code\u003e) instead of relative file links that break once packages are installed.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.41\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.44\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8212\"\u003e#8212\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e - Render generated script preloads (\u003ccode\u003emodulepreload\u003c/code\u003e, or \u003ccode\u003epreload as=\u0026quot;script\u0026quot;\u003c/code\u003e for IIFE output) with \u003ccode\u003efetchPriority=\u0026quot;low\u0026quot;\u003c/code\u003e and forward it into static Early Hints, so they no longer compete with render-blocking stylesheets, fonts and images.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.40\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.43\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8710\"\u003e#8710\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e - Update \u003ccode\u003efetchdts\u003c/code\u003e to \u003ccode\u003e^0.2.0\u003c/code\u003e. The typed request and response header helpers keep the same header names and value types.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.42\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8451\"\u003e#8451\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e - Skip request middleware bookkeeping when no request middleware is configured, and stop copying serialization adapters when the router adds none.\u003c/p\u003e\n\u003cp\u003eServer route handlers and route middleware now receive the router's decoded pathname, the same one used for route matching. Characters that would change how the path is read, such as \u003ccode\u003e%2F\u003c/code\u003e, \u003ccode\u003e%3F\u003c/code\u003e, and \u003ccode\u003e%23\u003c/code\u003e, stay encoded.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8441\"\u003e#8441\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e - Reuse the parsed request location during SSR instead of repeating input rewrites. Match server routes against the app router's parsed pathname while preserving encoded pathnames for server handlers and middleware.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.37\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.41\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Return 400 Bad Request for malformed percent-encoded request pathnames before running server entry callbacks. Preserve valid encoded paths and query handling.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Reduce request middleware overhead, reuse loaded entries and transport header requirements, and avoid unnecessary URL normalization for server functions. Preserve response helper writes made during body cancellation and SSR cleanup.\u003c/p\u003e\n\u003cp\u003eAvoid allocating absent middleware headers and reply context, and construct RPC redirects with their final response state. Preserve middleware accessor evaluation and the documented undefined value for absent \u003ccode\u003esendContext\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eReduce synchronous server-function response overhead while preserving cancellation cleanup and middleware response mutations.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/start-server-core/CHANGELOG.md\"\u003e@​tanstack/start-server-core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.169.45\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8670\"\u003e#8670\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e - Reference agent skills in other packages by their \u003ccode\u003eintent load\u003c/code\u003e identifier (\u003ccode\u003e@tanstack/\u0026lt;package\u0026gt;#\u0026lt;skill\u0026gt;\u003c/code\u003e) instead of relative file links that break once packages are installed.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.41\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.44\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8212\"\u003e#8212\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e - Render generated script preloads (\u003ccode\u003emodulepreload\u003c/code\u003e, or \u003ccode\u003epreload as=\u0026quot;script\u0026quot;\u003c/code\u003e for IIFE output) with \u003ccode\u003efetchPriority=\u0026quot;low\u0026quot;\u003c/code\u003e and forward it into static Early Hints, so they no longer compete with render-blocking stylesheets, fonts and images.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.40\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.43\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8710\"\u003e#8710\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e - Update \u003ccode\u003efetchdts\u003c/code\u003e to \u003ccode\u003e^0.2.0\u003c/code\u003e. The typed request and response header helpers keep the same header names and value types.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.42\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8451\"\u003e#8451\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e - Skip request middleware bookkeeping when no request middleware is configured, and stop copying serialization adapters when the router adds none.\u003c/p\u003e\n\u003cp\u003eServer route handlers and route middleware now receive the router's decoded pathname, the same one used for route matching. Characters that would change how the path is read, such as \u003ccode\u003e%2F\u003c/code\u003e, \u003ccode\u003e%3F\u003c/code\u003e, and \u003ccode\u003e%23\u003c/code\u003e, stay encoded.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8441\"\u003e#8441\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e - Reuse the parsed request location during SSR instead of repeating input rewrites. Match server routes against the app router's parsed pathname while preserving encoded pathnames for server handlers and middleware.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.37\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.41\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Return 400 Bad Request for malformed percent-encoded request pathnames before running server entry callbacks. Preserve valid encoded paths and query handling.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Reduce request middleware overhead, reuse loaded entries and transport header requirements, and avoid unnecessary URL normalization for server functions. Preserve response helper writes made during body cancellation and SSR cleanup.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/6b9fe6d29552270836c511bc9b343d73541f4424\"\u003e\u003ccode\u003e6b9fe6d\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8745\"\u003e#8745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e docs(skills): reference cross-package skills by intent ID (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8670\"\u003e#8670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/caaf32da35e250c1344a350fdd80cfc631c24b3c\"\u003e\u003ccode\u003ecaaf32d\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8733\"\u003e#8733\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e perf: lower manifest script preload priority (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8212\"\u003e#8212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/7a0672503857283614799a0b480f4a82110e5ab6\"\u003e\u003ccode\u003e7a06725\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade Vitest to 5 and migrate benchmarks to the bench fixture ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/140efa4347859f04a9d95f8e61031196341d3d78\"\u003e\u003ccode\u003e140efa4\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8701\"\u003e#8701\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e chore(deps): bump fetchdts to ^0.2.0 (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8710\"\u003e#8710\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/4ff63eb8a469d5f318dd31579c03c867c88f0384\"\u003e\u003ccode\u003e4ff63eb\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8700\"\u003e#8700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e perf: skip unused Start request setup (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8451\"\u003e#8451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e perf: reuse prepared SSR request locations (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8441\"\u003e#8441\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/start-server-core@1.169.45/packages/start-server-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `engine.io` from 6.6.9 to 6.6.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/socketio/socket.io/releases\"\u003eengine.io's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eengine.io@6.6.11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefresh ping timeout on incoming packets (\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003eda008a5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eengine.io@6.6.10\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereject protocol mismatch for existing sessions (\u003ca href=\"https://github.com/socketio/socket.io/commit/86db1fc\"\u003e86db1fc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore compatibility with Node.js 10 (\u003ca href=\"https://github.com/socketio/socket.io/commit/ae7fb46\"\u003eae7fb46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erun the polling write callback when the client aborts a compressed response (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5540\"\u003e#5540\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/915a3ed\"\u003e915a3ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eoptimize polling request body buffering (\u003ca href=\"https://github.com/socketio/socket.io/commit/dcbd961\"\u003edcbd961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estream compressed polling responses (\u003ca href=\"https://github.com/socketio/socket.io/commit/91dd763\"\u003e91dd763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/973833304c7c195c2d0d99b72e4ac9f149e3ca94\"\u003e\u003ccode\u003e9738333\u003c/code\u003e\u003c/a\u003e chore(release): engine.io@6.6.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/fc9dd90e2ff26aa358d0cd27bc59ddc93458ae44\"\u003e\u003ccode\u003efc9dd90\u003c/code\u003e\u003c/a\u003e docs(eio): rework README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003e\u003ccode\u003eda008a5\u003c/code\u003e\u003c/a\u003e fix(eio): refresh ping timeout on incoming packets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/3df3fed075fd2312e84481786235aa14d08b8fe7\"\u003e\u003ccode\u003e3df3fed\u003c/code\u003e\u003c/a\u003e fix(eio-client): restore default transport resolution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/aaf2af36ec8ad05910f357a788e0e358bad32738\"\u003e\u003ccode\u003eaaf2af3\u003c/code\u003e\u003c/a\u003e test: upgrade WebdriverIO to v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/b5da079228666fcabd97166486d5f6a110826bc8\"\u003e\u003ccode\u003eb5da079\u003c/code\u003e\u003c/a\u003e refactor(sio): simplify packet handling switch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/45873ca93e6e25ac55dc1ba5c9b87853bf19ffba\"\u003e\u003ccode\u003e45873ca\u003c/code\u003e\u003c/a\u003e docs(protocol): clarify namespace comma restriction for built-in parser (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5545\"\u003e#5545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/551a3dcf0febadf4b5e24e8b44275f9bea559782\"\u003e\u003ccode\u003e551a3dc\u003c/code\u003e\u003c/a\u003e test: use execFile for fixture scripts (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5549\"\u003e#5549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/ea5560c8d08c4de4b5d4d06301b44d23b3cf23c7\"\u003e\u003ccode\u003eea5560c\u003c/code\u003e\u003c/a\u003e docs(examples): update create-react-app example docs links (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5535\"\u003e#5535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/59f4f2413b2cd1d6a1cf91d367bac71af51f4a24\"\u003e\u003ccode\u003e59f4f24\u003c/code\u003e\u003c/a\u003e fix(sio): reject stateful regexps for dynamic namespaces\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/socketio/socket.io/compare/engine.io@6.6.9...engine.io@6.6.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mysql2` from 3.15.3 to 3.24.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/releases\"\u003emysql2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.24.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.3...v3.24.4\"\u003e3.24.4\u003c/a\u003e (2026-09-07)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eper-query overhead, local dates, short strings, TLS context and compression (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4522\"\u003e#4522\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e2387daf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereuse TLS sessions across connections to the same server (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/9178c824cf4a7c04c0e04b0586661c56b694056f\"\u003e9178c82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.2...v3.24.3\"\u003e3.24.3\u003c/a\u003e (2026-09-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypings:\u003c/strong\u003e PoolCluster node events emit a string nodeId (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4513\"\u003e#4513\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1281e1eab672b2bde0b859efa38be5ed5a6946a5\"\u003e1281e1e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.1...v3.24.2\"\u003e3.24.2\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecorrect length-coded number size for the 3-byte range (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4500\"\u003e#4500\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/de5627288bc76be4ec92a8f08796b2814d26e8aa\"\u003ede56272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epromise:\u003c/strong\u003e honour \u003ccode\u003etrace: false\u003c/code\u003e on every promise-API method (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1dcd8efe6c2a7079d3cc1db92e7a94008b7ed5b9\"\u003e1dcd8ef\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4501\"\u003e#4501\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.0...v3.24.1\"\u003e3.24.1\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esingle-pass utf8 string encoding for outgoing packets (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4495\"\u003e#4495\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/183e947e753c6bdd1a0c1d2db84ed6ae2e3000af\"\u003e183e947\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.4...v3.24.0\"\u003e3.24.0\u003c/a\u003e (2026-08-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etyped parameters, and adopt integer types the server reports (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4488\"\u003e#4488\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8ec20f1fa6348b2edd2402e9b7f301d99e2b9b98\"\u003e8ec20f1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ezero dates come back as \u0026quot;undefined 00:00:00\u0026quot; with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4491\"\u003e#4491\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5bf7bda73cca5bbea4cdcd27ad8223a10ae41ecf\"\u003e5bf7bda\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/blob/master/Changelog.md\"\u003emysql2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.3...v3.24.4\"\u003e3.24.4\u003c/a\u003e (2026-09-07)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eper-query overhead, local dates, short strings, TLS context and compression (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4522\"\u003e#4522\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e2387daf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereuse TLS sessions across connections to the same server (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/9178c824cf4a7c04c0e04b0586661c56b694056f\"\u003e9178c82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.2...v3.24.3\"\u003e3.24.3\u003c/a\u003e (2026-09-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypings:\u003c/strong\u003e PoolCluster node events emit a string nodeId (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4513\"\u003e#4513\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1281e1eab672b2bde0b859efa38be5ed5a6946a5\"\u003e1281e1e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.1...v3.24.2\"\u003e3.24.2\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecorrect length-coded number size for the 3-byte range (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4500\"\u003e#4500\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/de5627288bc76be4ec92a8f08796b2814d26e8aa\"\u003ede56272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epromise:\u003c/strong\u003e honour \u003ccode\u003etrace: false\u003c/code\u003e on every promise-API method (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1dcd8efe6c2a7079d3cc1db92e7a94008b7ed5b9\"\u003e1dcd8ef\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4501\"\u003e#4501\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.0...v3.24.1\"\u003e3.24.1\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esingle-pass utf8 string encoding for outgoing packets (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4495\"\u003e#4495\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/183e947e753c6bdd1a0c1d2db84ed6ae2e3000af\"\u003e183e947\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.4...v3.24.0\"\u003e3.24.0\u003c/a\u003e (2026-08-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etyped parameters, and adopt integer types the server reports (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4488\"\u003e#4488\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8ec20f1fa6348b2edd2402e9b7f301d99e2b9b98\"\u003e8ec20f1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ezero dates come back as \u0026quot;undefined 00:00:00\u0026quot; with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4491\"\u003e#4491\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5bf7bda73cca5bbea4cdcd27ad8223a10ae41ecf\"\u003e5bf7bda\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eremove per-query and per-row allocation hotspots (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4486\"\u003e#4486\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/c86fe5a721048a5419e775e3d6ce2defec14a774\"\u003ec86fe5a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eserialize COM_STMT_EXECUTE in a single exact-size pass (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4494\"\u003e#4494\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/f3a60bca1f1b29634e8956116784bfd6e0ab2db6\"\u003ef3a60bc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.3...v3.23.4\"\u003e3.23.4\u003c/a\u003e (2026-08-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a87208ac5d2888a864544c93b6a85d007fb3e2c2\"\u003e\u003ccode\u003ea87208a\u003c/code\u003e\u003c/a\u003e chore(master): release 3.24.4 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4530\"\u003e#4530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e5833be68381370811e9cf8c99bdd22825d97ef4\"\u003e\u003ccode\u003ee5833be\u003c/code\u003e\u003c/a\u003e chore: prepare \u003ccode\u003esrc\u003c/code\u003e for parallel TypeScript transcription (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4538\"\u003e#4538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5f6482fbff089471ea278394a36644136530fbd8\"\u003e\u003ccode\u003e5f6482f\u003c/code\u003e\u003c/a\u003e build(deps): bump sass from 1.103.1 to 1.104.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4537\"\u003e#4537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8e0bd84a1189fac693657235437231a8d005dfe4\"\u003e\u003ccode\u003e8e0bd84\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.38.0 to 1.41.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4536\"\u003e#4536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8b8a9cb0146a426214d107305339b26fb4e2fe9c\"\u003e\u003ccode\u003e8b8a9cb\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 26.4.0 to 26.4.1 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/83854a60ada982a906bac5f4e9ebc93790d659c4\"\u003e\u003ccode\u003e83854a6\u003c/code\u003e\u003c/a\u003e build(deps): bump docusaurus-plugin-sass (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4534\"\u003e#4534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2e9d75ac196bd0fa60eba64c28c85ef49e385285\"\u003e\u003ccode\u003e2e9d75a\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​biomejs/biome\u003c/code\u003e from 2.5.11 to 2.5.12 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4533\"\u003e#4533\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/d6f41729b74bd7a6d9ab3e94f1d940716146b48c\"\u003e\u003ccode\u003ed6f4172\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 26.4.0 to 26.4.1 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4532\"\u003e#4532\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2e1c9e064c348c266fc80bd684893e7c4ed16d7c\"\u003e\u003ccode\u003e2e1c9e0\u003c/code\u003e\u003c/a\u003e build(deps): bump lru.min from 1.1.4 to 1.1.5 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4531\"\u003e#4531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e\u003ccode\u003e2387daf\u003c/code\u003e\u003c/a\u003e perf: per-query overhead, local dates, short strings, TLS context and compres...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.15.3...v3.24.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mysql2 since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `seroval` from 1.6.2 to 1.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxsmnsyc/seroval/releases\"\u003eseroval's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eseroval-plugins@1.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2d03651: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now throw when the value contains an async iterable or a \u003ccode\u003eReadableStream\u003c/code\u003e, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval@1.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb703710: \u003ccode\u003ecreateCrossDeserializer\u003c/code\u003e no longer causes unhandled rejections. This covers a rejected promise that the caller never reads, and a pending promise that \u003ccode\u003eabort\u003c/code\u003e rejects. Code that awaits the promise still gets the rejection.\u003c/li\u003e\n\u003cli\u003e2d03651: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now throw when the value contains an async iterable or a \u003ccode\u003eReadableStream\u003c/code\u003e, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.\u003c/li\u003e\n\u003cli\u003e2c25bf3: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now send a \u003ccode\u003ecreateStream\u003c/code\u003e stream that has ended with all its events. A stream that is still open, or a live stream, now throws. Before, they sent an empty stream that never ended.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval-plugins@1.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e4c0008f: Add \u003ccode\u003ecreateLiveStream()\u003c/code\u003e, a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. \u003ccode\u003ecrossSerializeStream\u003c/code\u003e and \u003ccode\u003etoCrossJSONStream\u003c/code\u003e callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, \u003ccode\u003eonDone\u003c/code\u003e waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and \u003ccode\u003eReadableStream\u003c/code\u003e values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.\u003c/li\u003e\n\u003cli\u003ef2b7d0c: Raise the supported Node.js floor from \u003ccode\u003e\u0026gt;=10\u003c/code\u003e to \u003ccode\u003e\u0026gt;=20\u003c/code\u003e in \u003ccode\u003eengines\u003c/code\u003e, remove the no-op \u003ccode\u003etypesVersions\u003c/code\u003e from seroval, give seroval-plugins \u003ccode\u003emain\u003c/code\u003e, \u003ccode\u003emodule\u003c/code\u003e and \u003ccode\u003etypes\u003c/code\u003e fields plus a \u003ccode\u003etypesVersions\u003c/code\u003e entry that points at the emitted \u003ccode\u003eweb\u003c/code\u003e declarations, and link the plugins package to the workspace copy of seroval.\u003c/li\u003e\n\u003cli\u003e5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec643404: The documentation moved to \u003ca href=\"https://seroval.vercel.app\"\u003ehttps://seroval.vercel.app\u003c/a\u003e. The READMEs and the package homepages now link to it.\u003c/li\u003e\n\u003cli\u003ea1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows \u003ccode\u003eengines.node\u003c/code\u003e, keeping nullish coalescing and optional chaining as written.\u003c/li\u003e\n\u003cli\u003ebe1f32b: Improve tree shaking of web namespace imports in ESM builds while preserving the CommonJS export shape.\u003c/li\u003e\n\u003cli\u003e90e8f73: The web plugins that match instances of a built-in class, such as \u003ccode\u003eURL\u003c/code\u003e, \u003ccode\u003eBlob\u003c/code\u003e and \u003ccode\u003eHeaders\u003c/code\u003e, now set \u003ccode\u003eskipPlainObjects\u003c/code\u003e. With a seroval version that supports it, serializing plain objects with these plugins is faster.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval@1.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9a75aae: Add the \u003ccode\u003eassignSharedRefsOnly\u003c/code\u003e option to \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003ecrossSerializeAsync\u003c/code\u003e. It stores only the values the output reads more than once in \u003ccode\u003e$R\u003c/code\u003e, which makes shorter output when no later script refers back to it.\u003c/li\u003e\n\u003cli\u003ef3f39de: Add \u003ccode\u003ecreateCrossDeserializer\u003c/code\u003e, a session for cross-reference JSON records that tracks unsettled promises and open streams, reports how many are still pending, and can abort them with a caller-supplied reason when the transport fails.\u003c/li\u003e\n\u003cli\u003e2324090: Streams serialized from a live stream in streaming mode are rebuilt with a live receiver: it keeps history only until its first listener subscribes, then forwards each value without retaining it and refuses a second listener. Replay streams and existing serialized data are unchanged, and readers that ignore the marker build a replay receiver.\u003c/li\u003e\n\u003cli\u003e4c0008f: Add \u003ccode\u003ecreateLiveStream()\u003c/code\u003e, a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. \u003ccode\u003ecrossSerializeStream\u003c/code\u003e and \u003ccode\u003etoCrossJSONStream\u003c/code\u003e callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, \u003ccode\u003eonDone\u003c/code\u003e waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and \u003ccode\u003eReadableStream\u003c/code\u003e values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.\u003c/li\u003e\n\u003cli\u003ef2b7d0c: Raise the supported Node.js floor from \u003ccode\u003e\u0026gt;=10\u003c/code\u003e to \u003ccode\u003e\u0026gt;=20\u003c/code\u003e in \u003ccode\u003eengines\u003c/code\u003e, remove the no-op \u003ccode\u003etypesVersions\u003c/code\u003e from seroval, give seroval-plugins \u003ccode\u003emain\u003c/code\u003e, \u003ccode\u003emodule\u003c/code\u003e and \u003ccode\u003etypes\u003c/code\u003e fields plus a \u003ccode\u003etypesVersions\u003c/code\u003e entry that points at the emitted \u003ccode\u003eweb\u003c/code\u003e declarations, and link the plugins package to the workspace copy of seroval.\u003c/li\u003e\n\u003cli\u003e8a95987: Add the optional \u003ccode\u003eskipPlainObjects\u003c/code\u003e plugin field. A plugin that sets it to \u003ccode\u003etrue\u003c/code\u003e is not tested against plain objects, which makes parsing faster when most values are plain objects.\u003c/li\u003e\n\u003cli\u003e5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6d92c38: - Export \u003ccode\u003eSerializeOptions\u003c/code\u003e, \u003ccode\u003eSerializeAsyncOptions\u003c/code\u003e, \u003ccode\u003eToJSONOptions\u003c/code\u003e and \u003ccode\u003eToJSONAsyncOptions\u003c/code\u003e, the option types of \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003eserializeAsync\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e and \u003ccode\u003etoJSONAsync\u003c/code\u003e.\n\u003cul\u003e\n\u003cli\u003eMark \u003ccode\u003eFeature.ArrowFunction\u003c/code\u003e and \u003ccode\u003eSerovalMissingReferenceError\u003c/code\u003e as deprecated. Neither has any effect.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e8b4214f: Reuse the resolved plugin list when the same \u003ccode\u003eplugins\u003c/code\u003e array is passed again, so each call no longer rebuilds it.\u003c/li\u003e\n\u003cli\u003eb7edc16: Create leaf nodes with only their \u003ccode\u003et\u003c/code\u003e, \u003ccode\u003ei\u003c/code\u003e and \u003ccode\u003es\u003c/code\u003e fields, cutting tree memory for primitive-heavy payloads.\u003c/li\u003e\n\u003cli\u003edcf9a69: Report the depth limit error with its own error code.\u003c/li\u003e\n\u003cli\u003ee118511: Derive the well-known symbol name and lookup tables and the error constructor names from their single source tables.\u003c/li\u003e\n\u003cli\u003e1e13e04: Avoid temporary reference lookup wrappers in the parsers and resolve named references with one registry lookup.\u003c/li\u003e\n\u003cli\u003ec643404: The documentation moved to \u003ca href=\"https://seroval.vercel.app\"\u003ehttps://seroval.vercel.app\u003c/a\u003e. The READMEs and the package homepages now link to it.\u003c/li\u003e\n\u003cli\u003e3234e88: Honor \u003ccode\u003edepthLimit\u003c/code\u003e in every serializer entry point and in \u003ccode\u003efromJSON\u003c/code\u003e, wrap failures raised while emitting output in \u003ccode\u003eSerovalSerializationError\u003c/code\u003e, and report a node id that is assigned twice with \u003ccode\u003eSerovalConflictedNodeIdError\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003ea1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows \u003ccode\u003eengines.node\u003c/code\u003e, keeping nullish coalescing and optional chaining as written.\u003c/li\u003e\n\u003cli\u003e3b49dc3: Inline feature bits inside the library with an internal \u003ccode\u003econst enum\u003c/code\u003e. The exported \u003ccode\u003eFeature\u003c/code\u003e enum is unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lxsmnsyc/seroval/commits/seroval@1.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for seroval since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad4...\n\n_Description has been truncated_","html_url":"https://github.com/Hellthefox808/NCC-CRM-V1.0/pull/29","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hellthefox808%2FNCC-CRM-V1.0/issues/29","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/29/packages"},{"uuid":"5989399902","node_id":"PR_kwDOOwehI88AAAABKJQHeA","number":112,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-23T04:34:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T23:58:58.000Z","updated_at":"2026-10-23T04:34:19.000Z","time_to_close":16521,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"@vitest/mocker","old_version":"4.1.8","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"hono","old_version":"4.13.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.8` | `5.0.5` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.13` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n\n\nUpdates `@vitest/mocker` from 4.1.8 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.16.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.13.7 to 4.13.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.13.13\u003c/h2\u003e\n\u003ch2\u003eMount Middleware\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e is now available as the Mount Middleware, \u003ccode\u003ehono/mount\u003c/code\u003e. It is just a handler, so you register it with \u003ccode\u003eapp.all()\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eimport { Router as IttyRouter } from 'itty-router'\r\nimport { Hono } from 'hono'\r\nimport { mount } from 'hono/mount'\r\n\u003cp\u003econst ittyRouter = IttyRouter()\u003cbr /\u003e\nittyRouter.get('/hello', () =\u0026gt; new Response('Hello from itty-router'))\u003c/p\u003e\n\u003cp\u003econst app = new Hono()\u003cbr /\u003e\napp.all('/itty-router/*', mount(ittyRouter.handle))\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e- app.mount('/itty-router', ittyRouter.handle)\r\n+ app.all('/itty-router/*', mount(ittyRouter.handle))\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest(client): simulate network error for undefined route in parseResponse test in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5439\"\u003ehonojs/hono#5439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(request): fix jsdoc comments for some getters in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5445\"\u003ehonojs/hono#5445\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): allow JSXNode function component results in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5476\"\u003ehonojs/hono#5476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5221\"\u003ehonojs/hono#5221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.12...v4.13.13\"\u003ehttps://github.com/honojs/hono/compare/v4.13.12...v4.13.13\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(build): keep internal types private in bundled d.ts and avoid a self-referencing JSX.IntrinsicElements in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5485\"\u003ehonojs/hono#5485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(build): type-check the bundled declarations from a consumer project in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5486\"\u003ehonojs/hono#5486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): correctly match mixed-case header name in retainedHeader option in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5475\"\u003ehonojs/hono#5475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5487\"\u003ehonojs/hono#5487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(combine): return a Response from a short-circuiting middleware in some() in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5391\"\u003ehonojs/hono#5391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): upgrade vite-plus to 1.0.0 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5464\"\u003ehonojs/hono#5464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.11...v4.13.12\"\u003ehttps://github.com/honojs/hono/compare/v4.13.11...v4.13.12\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.11\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/serve-static\u003c/code\u003e and the adapters built on it (\u003ccode\u003ehono/bun\u003c/code\u003e, \u003ccode\u003ehono/deno\u003c/code\u003e, \u003ccode\u003ehono/cloudflare-workers\u003c/code\u003e, \u003ccode\u003e@hono/bun\u003c/code\u003e, \u003ccode\u003e@hono/deno\u003c/code\u003e, \u003ccode\u003e@hono/cloudflare-workers\u003c/code\u003e). Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-5r4p-p66f-jhc7\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/08a023cbfde55b434fb0fb30fae35d42e4bf20aa\"\u003e\u003ccode\u003e08a023c\u003c/code\u003e\u003c/a\u003e 4.13.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ae595de8ae05ea548560da93140ee1d53e5a8202\"\u003e\u003ccode\u003eae595de\u003c/code\u003e\u003c/a\u003e feat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5221\"\u003e#5221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/f23b146afcec63606144cde50b5fbd360dd60238\"\u003e\u003ccode\u003ef23b146\u003c/code\u003e\u003c/a\u003e fix(jsx): allow JSXNode function component results (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5476\"\u003e#5476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6d73a74f9757ed65d6103c0e8375097fa20873c4\"\u003e\u003ccode\u003e6d73a74\u003c/code\u003e\u003c/a\u003e docs(request): fix jsdoc comments for some getters (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5445\"\u003e#5445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/deff529656cff775b35956f7f9071388d4eb55ae\"\u003e\u003ccode\u003edeff529\u003c/code\u003e\u003c/a\u003e test(client): simulate network error for undefined route in parseResponse tes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6abd35b0a5f35f67b6417627d5b0a6c2d266ac04\"\u003e\u003ccode\u003e6abd35b\u003c/code\u003e\u003c/a\u003e 4.13.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/95eb860473d26bd303a2a29716e61a77c8c5e5f5\"\u003e\u003ccode\u003e95eb860\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade vite-plus to 1.0.0 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5464\"\u003e#5464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/afb2068c1c53a530528ac5f237e245793dd03c07\"\u003e\u003ccode\u003eafb2068\u003c/code\u003e\u003c/a\u003e fix(combine): return a Response from a short-circuiting middleware in some() ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e5bb2062a3ddd645e3a16d1300bd76d6c9af33a5\"\u003e\u003ccode\u003ee5bb206\u003c/code\u003e\u003c/a\u003e fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5487\"\u003e#5487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/c3053ccf14f1c4c70a0c2888eed6121b9f6c8f95\"\u003e\u003ccode\u003ec3053cc\u003c/code\u003e\u003c/a\u003e fix(etag): correctly match mixed-case header name in retainedHeader option (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.7...v4.13.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.2.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/taskade/mcp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/taskade/mcp/pull/112","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskade%2Fmcp/issues/112","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/112/packages"},{"uuid":"5951802197","node_id":"PR_kwDOVDNqcs8AAAABJrQhTw","number":3,"state":"closed","title":"chore(deps): bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-21T03:18:18.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-21T00:08:11.000Z","updated_at":"2026-10-21T03:18:28.000Z","time_to_close":11407,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MaxRink/immich/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/MaxRink/immich/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/MaxRink%2Fimmich/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5946381114","node_id":"PR_kwDOJR_33c8AAAABJm4Z-A","number":2,"state":"open","title":"Bump shell-quote from 1.8.1 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-20T17:27:56.000Z","updated_at":"2026-10-20T17:31:03.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"shell-quote","old_version":"1.8.1","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.1...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.8.1\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/b-khadija/NetflixApp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/b-khadija/NetflixApp/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/b-khadija%2FNetflixApp/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5910774544","node_id":"PR_kwDOTziLxc8AAAABJKoAiQ","number":2,"state":"open","title":"build(deps): Bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T14:52:06.000Z","updated_at":"2026-10-18T14:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"body-parser","old_version":"1.20.1","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.21.5","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.8.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"nanoid","old_version":"3.3.4","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.8.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"socket.io-parser","old_version":"4.2.2","new_version":"4.2.7","repository_url":"https://github.com/socketio/socket.io"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.1` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.21.5` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.8.3` | `17.13.8` |\n| [moment](https://github.com/moment/moment) | `2.29.4` | `2.31.0` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.4` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.0` | `1.12.0` |\n| [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.2` | `4.2.7` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.1 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.1...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.21.5 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.21.5...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.8.3 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/850be1ee24be8d548bb09359bdb0cf9fe41635ff\"\u003e\u003ccode\u003e850be1e\u003c/code\u003e\u003c/a\u003e 17.13.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/9faeecc48b18ec40e3881467645ae9074f0dfa3c\"\u003e\u003ccode\u003e9faeecc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3139\"\u003e#3139\u003c/a\u003e from hapijs/chore/backport-messages-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/8d0b808f3e874d28f9078f61b7742290989afb36\"\u003e\u003ccode\u003e8d0b808\u003c/code\u003e\u003c/a\u003e fix: prevent messages proto injection\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.8.3...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.29.4 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.4 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.8\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.4...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d2...\n\n_Description has been truncated_","html_url":"https://github.com/Sawsqr68/nodejs.dev/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sawsqr68%2Fnodejs.dev/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5909779433","node_id":"PR_kwDOSlhZuc8AAAABJJ3NKw","number":14,"state":"closed","title":"chore(deps): bump shell-quote and concurrently","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-20T09:59:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T13:00:36.000Z","updated_at":"2026-10-20T09:59:02.000Z","time_to_close":161904,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","repository_url":"https://github.com/ljharb/shell-quote","old_version":"1.9.0","new_version":"1.12.0"},{"name":"concurrently","repository_url":"https://github.com/open-cli-tools/concurrently","old_version":"10.0.5","new_version":"10.0.6"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.12.0 and updates ancestor dependency [concurrently](https://github.com/open-cli-tools/concurrently). These dependencies need to be updated together.\n\nUpdates `shell-quote` from 1.9.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `concurrently` from 10.0.5 to 10.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-cli-tools/concurrently/releases\"\u003econcurrently's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: update issue link to the transferred repo path by \u003ca href=\"https://github.com/yzxcj797\"\u003e\u003ccode\u003e@​yzxcj797\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/609\"\u003eopen-cli-tools/concurrently#609\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update API example to ESM by \u003ca href=\"https://github.com/Bibin-VR\"\u003e\u003ccode\u003e@​Bibin-VR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/611\"\u003eopen-cli-tools/concurrently#611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: skip force-kill logging when no processes remain by \u003ca href=\"https://github.com/imshunsuke\"\u003e\u003ccode\u003e@​imshunsuke\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/616\"\u003eopen-cli-tools/concurrently#616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: update shell-quote to 1.12.0 by \u003ca href=\"https://github.com/Abicodexi\"\u003e\u003ccode\u003e@​Abicodexi\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Mayvis\"\u003e\u003ccode\u003e@​Mayvis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/622\"\u003eopen-cli-tools/concurrently#622\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yzxcj797\"\u003e\u003ccode\u003e@​yzxcj797\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/609\"\u003eopen-cli-tools/concurrently#609\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Bibin-VR\"\u003e\u003ccode\u003e@​Bibin-VR\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/611\"\u003eopen-cli-tools/concurrently#611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imshunsuke\"\u003e\u003ccode\u003e@​imshunsuke\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/616\"\u003eopen-cli-tools/concurrently#616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Abicodexi\"\u003e\u003ccode\u003e@​Abicodexi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/622\"\u003eopen-cli-tools/concurrently#622\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\"\u003ehttps://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/d84bab65cbfdd8406a457787f71075b31bd6ff3f\"\u003e\u003ccode\u003ed84bab6\u003c/code\u003e\u003c/a\u003e 10.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/d26574e3ab0d831be634b4089a5b4680ba22cd6e\"\u003e\u003ccode\u003ed26574e\u003c/code\u003e\u003c/a\u003e deps: update shell-quote to 1.12.0 (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/13bdff120b52794e5528a185d45bbd96e56e4bf6\"\u003e\u003ccode\u003e13bdff1\u003c/code\u003e\u003c/a\u003e fix: skip force-kill logging when no processes remain (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/b2580cc75389817e19afac2b66fc05ae151e3300\"\u003e\u003ccode\u003eb2580cc\u003c/code\u003e\u003c/a\u003e docs: update API example to ESM (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/611\"\u003e#611\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/3159edbdca97b27c76ada425210011d59ddc02a7\"\u003e\u003ccode\u003e3159edb\u003c/code\u003e\u003c/a\u003e docs: update issue link to the transferred repo path (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/609\"\u003e#609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/piyushdoorwar/yamlet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/piyushdoorwar/yamlet/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/piyushdoorwar%2Fyamlet/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"},{"uuid":"5907180036","node_id":"PR_kwDORzvbXs8AAAABJH4BhQ","number":4,"state":"open","title":"build(deps): bump the npm_and_yarn group across 2 directories with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T07:17:07.000Z","updated_at":"2026-10-18T07:17:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"nuxt","old_version":"4.4.8","new_version":"4.5.1","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/devtools","old_version":"3.2.4","new_version":"3.4.3","repository_url":"https://github.com/nuxt/devtools"},{"name":"baseline-browser-mapping","old_version":"2.10.43","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.6","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"svgo","old_version":"4.0.2","new_version":"4.1.0","repository_url":"https://github.com/svg/svgo"},{"name":"tar","old_version":"7.5.20","new_version":"7.5.22","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.8` | `4.5.1` |\n| [@nuxt/devtools](https://github.com/nuxt/devtools/tree/HEAD/packages/devtools) | `3.2.4` | `3.4.3` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.29.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [svgo](https://github.com/svg/svgo) | `4.0.2` | `4.1.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.20` | `7.5.22` |\n\nBumps the npm_and_yarn group with 7 updates in the /packages/headless directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.8` | `4.5.1` |\n| [@nuxt/devtools](https://github.com/nuxt/devtools/tree/HEAD/packages/devtools) | `3.2.4` | `3.4.3` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.29.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [svgo](https://github.com/svg/svgo) | `4.0.2` | `4.1.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.20` | `7.5.22` |\n\n\nUpdates `nuxt` from 4.4.8 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e⚠️ \u003cstrong\u003eThis is a security release.\u003c/strong\u003e We recommend upgrading as soon as possible with \u003ccode\u003enpx nuxt upgrade --dedupe\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eIt fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in \u003ccode\u003e@nuxt/devtools@3.3.1\u003c/code\u003e, which fixes a separate critical development-only RCE.\u003c/p\u003e\n\u003cp\u003eIf you already upgraded for the earlier route rule advisory (\u003ca href=\"https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47\"\u003eCVE-2026-53721\u003c/a\u003e), you still need this release: one of the fixes addresses a regression introduced by that fix.\u003c/p\u003e\n\u003cp\u003eIf you use the \u003ccode\u003ecache\u003c/code\u003e, \u003ccode\u003eswr\u003c/code\u003e or \u003ccode\u003eisr\u003c/code\u003e route rules, purge any CDN or edge cache after upgrading; a leaked \u003ccode\u003e_payload.json\u003c/code\u003e may already be cached upstream.\u003c/p\u003e\n\u003cp\u003eFull details: \u003ca href=\"https://nuxt.com/blog/v4-5-security\"\u003eNuxt Security Patch Releases\u003c/a\u003e and \u003ca href=\"https://github.com/nuxt/nuxt/security/advisories\"\u003eGitHub Security Advisories\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🔥 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Replace island teleports in a single html pass (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35515\"\u003e#35515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Add \u003ccode\u003evue.optionsApi\u003c/code\u003e and disable it for v5+ (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35791\"\u003e#35791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Without pages, skip client plugins that require routing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35794\"\u003e#35794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Read rspack dev output fs lazily for server entry (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35740\"\u003e#35740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Resolve loaders and runtime deps from nuxt dirs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35568\"\u003e#35568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Return global route for \u003ccode\u003euseRoute\u003c/code\u003e in detached effect scope (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Ignore custom \u003ccode\u003ename\u003c/code\u003e or \u003ccode\u003epath\u003c/code\u003e when reusing an existing page in \u003ccode\u003epages:extend\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35661\"\u003e#35661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render client components in nested server components (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35669\"\u003e#35669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve explicit \u003ccode\u003euseFetch\u003c/code\u003e method inference (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35671\"\u003e#35671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Revalidate cached route payloads instead of using \u003ccode\u003eforce-cache\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35672\"\u003e#35672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Correct default export detection in plugin metadata (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35676\"\u003e#35676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Clear hide/reset timeouts in set() (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35534\"\u003e#35534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit,nuxt,rspack,schema,webpack:\u003c/strong\u003e Add \u003ccode\u003e.mts\u003c/code\u003e file extension in resolver (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/33845\"\u003e#33845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve trailing slash in NuxtLink href when unset (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35501\"\u003e#35501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't cross-pollute useAsyncData cache on reactive key change (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35656\"\u003e#35656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Filter plugin dependencies by build target (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35682\"\u003e#35682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Reload real page module on HMR of JSX render-function pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35678\"\u003e#35678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Resolve \u003ccode\u003e@unhead/vue/*\u003c/code\u003e from nuxt's dependency tree (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35690\"\u003e#35690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Surface module load errors instead of masking as missing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35497\"\u003e#35497\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Type auto-imported \u003ccode\u003e$fetch\u003c/code\u003e with nitro's \u003ccode\u003e$Fetch\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35704\"\u003e#35704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't reference app config sources in shared and node tsconfigs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35673\"\u003e#35673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Resolve SSR inlined CSS module class name mismatch (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35610\"\u003e#35610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Generate layout types even when pages module is disabled (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35717\"\u003e#35717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Skip resource hints for stylesheets already rendered as blocking links (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Dedupe layers that are both auto-scanned and explicitly extended (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35712\"\u003e#35712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't apply scroll behaviour after a subsequent nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35719\"\u003e#35719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Ensure server sourcemap-preserver plugin actually runs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35680\"\u003e#35680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Preserve css suffix when extracting ssr inline styles (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35714\"\u003e#35714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Watch external component directories in development (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35652\"\u003e#35652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't exclude client entry module from style extraction (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Amend cleanup command in NUXT_B7014 error message (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35735\"\u003e#35735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Only pull in \u003ccode\u003evue-router\u003c/code\u003e when there are island pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35739\"\u003e#35739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Suppress external warnings for internal vite-node paths (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35744\"\u003e#35744\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/452dd50d92ccdf6f456b500e71d0f26baaeff796\"\u003e\u003ccode\u003e452dd50\u003c/code\u003e\u003c/a\u003e v4.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/581651ff37471be9af39a68efccb02bafd512a58\"\u003e\u003ccode\u003e581651f\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject top-level \u003ccode\u003eas\u003c/code\u003e prop for islands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ee6c846338f4eb75801815dda86df1f494725859\"\u003e\u003ccode\u003eee6c846\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject reserved \u003ccode\u003etemplate\u003c/code\u003e island prop under runtime compiler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ad624a75ad2d215f43633f6b40be346a7194d34d\"\u003e\u003ccode\u003ead624a7\u003c/code\u003e\u003c/a\u003e fix(nuxt): case-fold route rule keys to match folded lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/4e35ae9babd94be53246e31200232d48438bb34e\"\u003e\u003ccode\u003e4e35ae9\u003c/code\u003e\u003c/a\u003e fix(nitro): bound island props and v-for to prevent unauthenticated DoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/352135f5319440d9e32d2f609cfb1f710e7a7a67\"\u003e\u003ccode\u003e352135f\u003c/code\u003e\u003c/a\u003e fix(nuxt): remove dev error overlay when error is cleared (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35821\"\u003e#35821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/b1a8e931698d8574ffcb1708f47f050352454e01\"\u003e\u003ccode\u003eb1a8e93\u003c/code\u003e\u003c/a\u003e fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35834\"\u003e#35834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/df559025e5895d0320d742d6c520168815e6f3d8\"\u003e\u003ccode\u003edf55902\u003c/code\u003e\u003c/a\u003e fix(nuxt): convert inline route rules exactly or drop with a warning (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35455\"\u003e#35455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/083b7502c8d742e4455f056c048773f31f620535\"\u003e\u003ccode\u003e083b750\u003c/code\u003e\u003c/a\u003e fix(nuxt): warn when an imports preset \u003ccode\u003efrom\u003c/code\u003e cannot be resolved (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35799\"\u003e#35799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/61eb637d41a11365196fedfb4a818de1bef3530c\"\u003e\u003ccode\u003e61eb637\u003c/code\u003e\u003c/a\u003e perf(nuxt): skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nuxt/devtools` from 3.2.4 to 3.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/releases\"\u003e@​nuxt/devtools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require the dev auth token for server config and storage mounts  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003enuxt/devtools#1124\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd75\"\u003e\u003c!-- raw HTML omitted --\u003e(0383c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e  -  by \u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003enuxt/devtools#1102\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b\"\u003e\u003c!-- raw HTML omitted --\u003e(21904)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Update client for unhead v3 and restore $fetch types  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003enuxt/devtools#1077\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a5\"\u003e\u003c!-- raw HTML omitted --\u003e(0fcb5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit\u003c/strong\u003e: Dedupe mkdist so dist ships .vue SFCs  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003enuxt/devtools#1078\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75\"\u003e\u003c!-- raw HTML omitted --\u003e(48a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Prevent StateEditor from freezing the page on live state  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003enuxt/devtools#1058\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/06249195\"\u003e\u003c!-- raw HTML omitted --\u003e(06249)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a16\"\u003e\u003c!-- raw HTML omitted --\u003e(5cea1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Continue hardening the RPC surface  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003enuxt/devtools#1049\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4\"\u003e\u003c!-- raw HTML omitted --\u003e(7f072)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require dev auth token for openInEditor and options RPC methods  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1039\"\u003enuxt/devtools#1039\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/a7b2718b\"\u003e\u003c!-- raw HTML omitted --\u003e(a7b27)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.2.6...v3.3.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/blob/v3.4.3/CHANGELOG.md\"\u003e@​nuxt/devtools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003e3.4.3\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e require the dev auth token for server config and storage mounts (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003e#1124\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e0383cd7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003e#1102\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e21904b9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003e3.4.2\u003c/a\u003e (2026-08-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e update client for unhead v3 and restore $fetch types (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003e#1077\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e0fcb59a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit:\u003c/strong\u003e dedupe mkdist so dist ships .vue SFCs (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003e#1078\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75ec43f9156b03271a11e413d63bcbe728\"\u003e48a93c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003e3.4.1\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e prevent StateEditor from freezing the page on live state (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003e#1058\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e0624919\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003e3.4.0\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e continue hardening the RPC surface (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003e#1049\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4174cd8fd94ef2364d777964bae8e6032\"\u003e7f072dc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10 (\u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a1694299bfcc67f286d4372d429ab3ad76a\"\u003e5cea1a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003e3.3.1\u003c/a\u003e (2026-07-24)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e1589647fd1d72d7b7006fc5a6c5da8b164ca7a5\"\u003e\u003ccode\u003ee158964\u003c/code\u003e\u003c/a\u003e chore: release v3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e\u003ccode\u003e0383cd7\u003c/code\u003e\u003c/a\u003e fix(devtools): require the dev auth token for server config and storage mount...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/be9a4cdd26a45489d37374f540e1b0c9e8176b5a\"\u003e\u003ccode\u003ebe9a4cd\u003c/code\u003e\u003c/a\u003e refactor: replace simple-git with tinyexec (backport \u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/950\"\u003e#950\u003c/a\u003e to v3) (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e\u003ccode\u003e21904b9\u003c/code\u003e\u003c/a\u003e perf: replace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1102\"\u003e#1102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/a9f5ab663a15fb7d74285feef54034703d42e8e6\"\u003e\u003ccode\u003ea9f5ab6\u003c/code\u003e\u003c/a\u003e chore: release v3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e\u003ccode\u003e0fcb59a\u003c/code\u003e\u003c/a\u003e fix(devtools): update client for unhead v3 and restore $fetch types (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1077\"\u003e#1077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/39a6dbb595b966ca73e40ffbc86c5c87124a3c51\"\u003e\u003ccode\u003e39a6dbb\u003c/code\u003e\u003c/a\u003e chore: release v3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e2de55493bff71e763b201d4b8af6ce6cab512ee\"\u003e\u003ccode\u003ee2de554\u003c/code\u003e\u003c/a\u003e chore: update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e\u003ccode\u003e0624919\u003c/code\u003e\u003c/a\u003e fix(devtools): prevent StateEditor from freezing the page on live state (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1058\"\u003e#1058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0ceaa450b8ca5f153f0c39c164502a7063cf90a9\"\u003e\u003ccode\u003e0ceaa45\u003c/code\u003e\u003c/a\u003e chore: release v3.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/devtools/commits/v3.4.3/packages/devtools\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.10.43 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.43...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.6 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.6...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `svgo` from 4.0.2 to 4.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/svg/svgo/releases\"\u003esvgo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.0\u003c/h2\u003e\n\u003cp\u003eThis minor release upgrades the SAX parser and introduces stricter XML validation. It also includes important security hardening for \u003ccode\u003eremoveScripts\u003c/code\u003e, dependency updates, and improvements to the test and regression infrastructure.\u003c/p\u003e\n\u003ch3\u003eSupport SVGO\u003c/h3\u003e\n\u003cp\u003eIf SVGO is valuable to you or your organization, please consider \u003ca href=\"https://opencollective.com/svgo\"\u003esupporting the project on OpenCollective\u003c/a\u003e. Your sponsorship helps fund ongoing maintenance and security work.\u003c/p\u003e\n\u003ch3\u003eStricter XML validation\u003c/h3\u003e\n\u003cp\u003eSVGO now uses \u003ca href=\"https://www.npmjs.com/package/sax\"\u003e\u003ccode\u003esax\u003c/code\u003e 1.6.1\u003c/a\u003e, upgraded from 1.5.0 (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2257\"\u003e#2257\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe new parser version validates numeric character references against the ranges permitted by XML. Invalid references are now rejected in both text and attributes, including:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edisallowed control characters such as \u003ccode\u003e\u0026amp;[#1](https://github.com/svg/svgo/issues/1);\u003c/code\u003e, \u003ccode\u003e\u0026amp;#xB;\u003c/code\u003e, and \u003ccode\u003e\u0026amp;#x1F;\u003c/code\u003e;\u003c/li\u003e\n\u003cli\u003eUTF-16 surrogate code points such as \u003ccode\u003e\u0026amp;#xD800;\u003c/code\u003e;\u003c/li\u003e\n\u003cli\u003einvalid XML code points such as \u003ccode\u003e\u0026amp;#xFFFF;\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eValid boundary values—including \u003ccode\u003eU+0020\u003c/code\u003e, \u003ccode\u003eU+D7FF\u003c/code\u003e, \u003ccode\u003eU+E000\u003c/code\u003e, \u003ccode\u003eU+FFFD\u003c/code\u003e, and characters through \u003ccode\u003eU+10FFFF\u003c/code\u003e—remain supported.\u003c/p\u003e\n\u003cp\u003eParser failures are consistently exposed as \u003ccode\u003eSvgoParserError\u003c/code\u003e errors with an \u003ccode\u003eInvalid character entity\u003c/code\u003e reason.\u003c/p\u003e\n\u003cp\u003eThis is an intentional behavior change: malformed SVGs that were previously accepted may now produce a parser error, while valid XML documents are unaffected.\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003eThe \u003ca href=\"https://svgo.dev/docs/plugins/removeScripts/\"\u003e\u003ccode\u003eremoveScripts\u003c/code\u003e\u003c/a\u003e plugin has been hardened against several script-execution bypasses:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFilters executable \u003ccode\u003edata:\u003c/code\u003e URLs containing HTML, XHTML, or SVG documents while preserving inert data such as PNG images, and filters legacy \u003ccode\u003evbscript:\u003c/code\u003e URLs (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2263\"\u003e#2263\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSanitizes content inside SVG \u003ccode\u003e\u0026lt;foreignObject\u0026gt;\u003c/code\u003e elements by removing HTML event-handler attributes, \u003ccode\u003esrcdoc\u003c/code\u003e, and executable URLs from \u003ccode\u003eaction\u003c/code\u003e, \u003ccode\u003edata\u003c/code\u003e, \u003ccode\u003eformaction\u003c/code\u003e, \u003ccode\u003ehref\u003c/code\u003e, and \u003ccode\u003esrc\u003c/code\u003e, while preserving non-executable HTML and visual content (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2264\"\u003e#2264\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRecognizes namespace-prefixed SVG \u003ccode\u003e\u0026lt;a\u0026gt;\u003c/code\u003e elements and removes ASCII tabs and newlines before checking URL schemes, preventing values such as \u003ccode\u003ejava\u0026amp;[#9](https://github.com/svg/svgo/issues/9);script:\u003c/code\u003e from bypassing detection while preserving elements in unrelated custom namespaces (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2268\"\u003e#2268\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThese changes address:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/security/advisories/GHSA-4vpr-x523-8j87\"\u003eGHSA-4vpr-x523-8j87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/security/advisories/GHSA-w27v-7q3p-w38r\"\u003eGHSA-w27v-7q3p-w38r\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded \u003ccode\u003ecss-select\u003c/code\u003e to v6 and \u003ccode\u003ecss-what\u003c/code\u003e to v7, and updated SVGO's custom selector adapter for \u003ccode\u003ecss-select\u003c/code\u003e v6 (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2244\"\u003e#2244\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eProject maintenance\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/TrySound\"\u003e\u003ccode\u003e@​TrySound\u003c/code\u003e\u003c/a\u003e is back as an active SVGO maintainer.\u003c/p\u003e\n\u003cp\u003eMany thanks to \u003ca href=\"https://github.com/KTibow\"\u003e\u003ccode\u003e@​KTibow\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/SethFalco\"\u003e\u003ccode\u003e@​SethFalco\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/XhmikosR\"\u003e\u003ccode\u003e@​XhmikosR\u003c/code\u003e\u003c/a\u003e for maintaining and improving SVGO over the past several years.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog:\u003c/strong\u003e \u003ca href=\"https://github.com/svg/svgo/compare/v4.0.2...v4.1.0\"\u003ehttps://github.com/svg/svgo/compare/v4.0.2...v4.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/5765cbe4e0a930dca648c6b81d335b1522cd7375\"\u003e\u003ccode\u003e5765cbe\u003c/code\u003e\u003c/a\u003e chore: prepare v4.1.0 release (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2275\"\u003e#2275\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/3db3ef33e409a0bc0fdaf255e46c908b00e93bc2\"\u003e\u003ccode\u003e3db3ef3\u003c/code\u003e\u003c/a\u003e fix(removeScripts): handle anchor URL bypasses (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2268\"\u003e#2268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/4e9b9aed2a4607cf28025871151421d5bfe86484\"\u003e\u003ccode\u003e4e9b9ae\u003c/code\u003e\u003c/a\u003e chore: cache regression screenshots (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2267\"\u003e#2267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/d55270ce17b99ebfe16e4fad028bd162187205a1\"\u003e\u003ccode\u003ed55270c\u003c/code\u003e\u003c/a\u003e chore(regression): migrate comparison workers to Tinypool (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2266\"\u003e#2266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/fd51e474a300417d9361d9302d596b1763146327\"\u003e\u003ccode\u003efd51e47\u003c/code\u003e\u003c/a\u003e fix(removeScripts): sanitize foreignObject content (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2264\"\u003e#2264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/dcaf957c6eb34832844de11ef2792e3e0e8db5dd\"\u003e\u003ccode\u003edcaf957\u003c/code\u003e\u003c/a\u003e chore: optimize fixtures in a bounded worker pool (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2265\"\u003e#2265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/a3542937d9c85debab04b1ff75207768caf8a058\"\u003e\u003ccode\u003ea354293\u003c/code\u003e\u003c/a\u003e fix(removeScripts): filter executable data URLs (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2263\"\u003e#2263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/4e0d2ac5e7abd5f12d650d3e4b4d2500d4944cc5\"\u003e\u003ccode\u003e4e0d2ac\u003c/code\u003e\u003c/a\u003e ci(typecheck): return typechecking on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/0b97fedd00a3001f1da616f61578c2c12e6cde1f\"\u003e\u003ccode\u003e0b97fed\u003c/code\u003e\u003c/a\u003e test(typescript): drop tsd for vitest type testing API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/f6e8ae1afb012c2b47675622728d76b9bfd734f5\"\u003e\u003ccode\u003ef6e8ae1\u003c/code\u003e\u003c/a\u003e chore(pnpm): drop package.json#pnpm.onlyBuiltDependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/svg/svgo/compare/v4.0.2...v4.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for svgo since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.20 to 7.5.22\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2a22bfc5d3a432a606d9da0e2d87ba634aa3b1cb\"\u003e\u003ccode\u003e2a22bfc\u003c/code\u003e\u003c/a\u003e 7.5.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/df1cd8dc09cded47b00c4129698824b3986432ac\"\u003e\u003ccode\u003edf1cd8d\u003c/code\u003e\u003c/a\u003e Allow transform to be falsey\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.20...v7.5.22\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 4.4.8 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e⚠️ \u003cstrong\u003eThis is a security release.\u003c/strong\u003e We recommend upgrading as soon as possible with \u003ccode\u003enpx nuxt upgrade --dedupe\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eIt fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in \u003ccode\u003e@nuxt/devtools@3.3.1\u003c/code\u003e, which fixes a separate critical development-only RCE.\u003c/p\u003e\n\u003cp\u003eIf you already upgraded for the earlier route rule advisory (\u003ca href=\"https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47\"\u003eCVE-2026-53721\u003c/a\u003e), you still need this release: one of the fixes addresses a regression introduced by that fix.\u003c/p\u003e\n\u003cp\u003eIf you use the \u003ccode\u003ecache\u003c/code\u003e, \u003ccode\u003eswr\u003c/code\u003e or \u003ccode\u003eisr\u003c/code\u003e route rules, purge any CDN or edge cache after upgrading; a leaked \u003ccode\u003e_payload.json\u003c/code\u003e may already be cached upstream.\u003c/p\u003e\n\u003cp\u003eFull details: \u003ca href=\"https://nuxt.com/blog/v4-5-security\"\u003eNuxt Security Patch Releases\u003c/a\u003e and \u003ca href=\"https://github.com/nuxt/nuxt/security/advisories\"\u003eGitHub Security Advisories\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🔥 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Replace island teleports in a single html pass (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35515\"\u003e#35515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Add \u003ccode\u003evue.optionsApi\u003c/code\u003e and disable it for v5+ (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35791\"\u003e#35791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Without pages, skip client plugins that require routing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35794\"\u003e#35794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Read rspack dev output fs lazily for server entry (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35740\"\u003e#35740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Resolve loaders and runtime deps from nuxt dirs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35568\"\u003e#35568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Return global route for \u003ccode\u003euseRoute\u003c/code\u003e in detached effect scope (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Ignore custom \u003ccode\u003ename\u003c/code\u003e or \u003ccode\u003epath\u003c/code\u003e when reusing an existing page in \u003ccode\u003epages:extend\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35661\"\u003e#35661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render client components in nested server components (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35669\"\u003e#35669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve explicit \u003ccode\u003euseFetch\u003c/code\u003e method inference (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35671\"\u003e#35671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Revalidate cached route payloads instead of using \u003ccode\u003eforce-cache\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35672\"\u003e#35672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Correct default export detection in plugin metadata (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35676\"\u003e#35676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Clear hide/reset timeouts in set() (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35534\"\u003e#35534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit,nuxt,rspack,schema,webpack:\u003c/strong\u003e Add \u003ccode\u003e.mts\u003c/code\u003e file extension in resolver (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/33845\"\u003e#33845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve trailing slash in NuxtLink href when unset (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35501\"\u003e#35501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't cross-pollute useAsyncData cache on reactive key change (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35656\"\u003e#35656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Filter plugin dependencies by build target (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35682\"\u003e#35682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Reload real page module on HMR of JSX render-function pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35678\"\u003e#35678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Resolve \u003ccode\u003e@unhead/vue/*\u003c/code\u003e from nuxt's dependency tree (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35690\"\u003e#35690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Surface module load errors instead of masking as missing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35497\"\u003e#35497\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Type auto-imported \u003ccode\u003e$fetch\u003c/code\u003e with nitro's \u003ccode\u003e$Fetch\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35704\"\u003e#35704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't reference app config sources in shared and node tsconfigs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35673\"\u003e#35673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Resolve SSR inlined CSS module class name mismatch (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35610\"\u003e#35610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Generate layout types even when pages module is disabled (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35717\"\u003e#35717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Skip resource hints for stylesheets already rendered as blocking links (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Dedupe layers that are both auto-scanned and explicitly extended (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35712\"\u003e#35712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't apply scroll behaviour after a subsequent nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35719\"\u003e#35719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Ensure server sourcemap-preserver plugin actually runs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35680\"\u003e#35680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Preserve css suffix when extracting ssr inline styles (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35714\"\u003e#35714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Watch external component directories in development (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35652\"\u003e#35652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't exclude client entry module from style extraction (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Amend cleanup command in NUXT_B7014 error message (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35735\"\u003e#35735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Only pull in \u003ccode\u003evue-router\u003c/code\u003e when there are island pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35739\"\u003e#35739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Suppress external warnings for internal vite-node paths (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35744\"\u003e#35744\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/452dd50d92ccdf6f456b500e71d0f26baaeff796\"\u003e\u003ccode\u003e452dd50\u003c/code\u003e\u003c/a\u003e v4.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/581651ff37471be9af39a68efccb02bafd512a58\"\u003e\u003ccode\u003e581651f\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject top-level \u003ccode\u003eas\u003c/code\u003e prop for islands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ee6c846338f4eb75801815dda86df1f494725859\"\u003e\u003ccode\u003eee6c846\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject reserved \u003ccode\u003etemplate\u003c/code\u003e island prop under runtime compiler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ad624a75ad2d215f43633f6b40be346a7194d34d\"\u003e\u003ccode\u003ead624a7\u003c/code\u003e\u003c/a\u003e fix(nuxt): case-fold route rule keys to match folded lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/4e35ae9babd94be53246e31200232d48438bb34e\"\u003e\u003ccode\u003e4e35ae9\u003c/code\u003e\u003c/a\u003e fix(nitro): bound island props and v-for to prevent unauthenticated DoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/352135f5319440d9e32d2f609cfb1f710e7a7a67\"\u003e\u003ccode\u003e352135f\u003c/code\u003e\u003c/a\u003e fix(nuxt): remove dev error overlay when error is cleared (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35821\"\u003e#35821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/b1a8e931698d8574ffcb1708f47f050352454e01\"\u003e\u003ccode\u003eb1a8e93\u003c/code\u003e\u003c/a\u003e fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35834\"\u003e#35834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/df559025e5895d0320d742d6c520168815e6f3d8\"\u003e\u003ccode\u003edf55902\u003c/code\u003e\u003c/a\u003e fix(nuxt): convert inline route rules exactly or drop with a warning (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35455\"\u003e#35455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/083b7502c8d742e4455f056c048773f31f620535\"\u003e\u003ccode\u003e083b750\u003c/code\u003e\u003c/a\u003e fix(nuxt): warn when an imports preset \u003ccode\u003efrom\u003c/code\u003e cannot be resolved (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35799\"\u003e#35799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/61eb637d41a11365196fedfb4a818de1bef3530c\"\u003e\u003ccode\u003e61eb637\u003c/code\u003e\u003c/a\u003e perf(nuxt): skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nuxt/devtools` from 3.2.4 to 3.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/releases\"\u003e@​nuxt/devtools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require the dev auth token for server config and storage mounts  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003enuxt/devtools#1124\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd75\"\u003e\u003c!-- raw HTML omitted --\u003e(0383c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e  -  by \u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003enuxt/devtools#1102\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b\"\u003e\u003c!-- raw HTML omitted --\u003e(21904)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Update client for unhead v3 and restore $fetch types  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003enuxt/devtools#1077\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a5\"\u003e\u003c!-- raw HTML omitted --\u003e(0fcb5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit\u003c/strong\u003e: Dedupe mkdist so dist ships .vue SFCs  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003enuxt/devtools#1078\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75\"\u003e\u003c!-- raw HTML omitted --\u003e(48a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Prevent StateEditor from freezing the page on live state  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003enuxt/devtools#1058\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/06249195\"\u003e\u003c!-- raw HTML omitted --\u003e(06249)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a16\"\u003e\u003c!-- raw HTML omitted --\u003e(5cea1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Continue hardening the RPC surface  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003enuxt/devtools#1049\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4\"\u003e\u003c!-- raw HTML omitted --\u003e(7f072)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require dev auth token for openInEditor and options RPC methods  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1039\"\u003enuxt/devtools#1039\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/a7b2718b\"\u003e\u003c!-- raw HTML omitted --\u003e(a7b27)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.2.6...v3.3.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/blob/v3.4.3/CHANGELOG.md\"\u003e@​nuxt/devtools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003e3.4.3\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e require the dev auth token for server config and storage mounts (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003e#1124\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e0383cd7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003e#1102\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e21904b9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003e3.4.2\u003c/a\u003e (2026-08-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e update client for unhead v3 and restore $fetch types (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003e#1077\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e0fcb59a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit:\u003c/strong\u003e dedupe mkdist so dist ships .vue SFCs (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003e#1078\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75ec43f9156b03271a11e413d63bcbe728\"\u003e48a93c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003e3.4.1\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e prevent StateEditor from freezing the page on live state (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003e#1058\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e0624919\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003e3.4.0\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e continue hardening the RPC surface (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003e#1049\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4174cd8fd94ef2364d777964bae8e6032\"\u003e7f072dc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10 (\u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a1694299bfcc67f286d4372d429ab3ad76a\"\u003e5cea1a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003e3.3.1\u003c/a\u003e (2026-07-24)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e1589647fd1d72d7b7006fc5a6c5da8b164ca7a5\"\u003e\u003ccode\u003ee158964\u003c/code\u003e\u003c/a\u003e chore: release v3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e\u003ccode\u003e0383cd7\u003c/code\u003e\u003c/a\u003e fix(devtools): require the dev auth token for server config and storage mount...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/be9a4cdd26a45489d37374f540e1b0c9e8176b5a\"\u003e\u003ccode\u003ebe9a4cd\u003c/code\u003e\u003c/a\u003e refactor: replace simple-git with tinyexec (backport \u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/950\"\u003e#950\u003c/a\u003e to v3) (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e\u003ccode\u003e21904b9\u003c/code\u003e\u003c/a\u003e perf: replace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1102\"\u003e#1102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/a9f5ab663a15fb7d74285feef54034703d42e8e6\"\u003e\u003ccode\u003ea9f5ab6\u003c/code\u003e\u003c/a\u003e chore: release v3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e\u003ccode\u003e0fcb59a\u003c/code\u003e\u003c/a\u003e fix(devtools): update client for unhead v3 and restore $fetch types (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1077\"\u003e#1077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/39a6dbb595b966ca73e40ffbc86c5c87124a3c51\"\u003e\u003ccode\u003e39a6dbb\u003c/code\u003e\u003c/a\u003e chore: release v3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e2de55493bff71e763b201d4b8af6ce6cab512ee\"\u003e\u003ccode\u003ee2de554\u003c/code\u003e\u003c/a\u003e chore: update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e\u003ccode\u003e0624919\u003c/code\u003e\u003c/a\u003e fix(devtools): prevent StateEditor from freezing the page on live state (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1058\"\u003e#1058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0ceaa450b8ca5f153f0c39c164502a7063cf90a9\"\u003e\u003ccode\u003e0ceaa45\u003c/code\u003e\u003c/a\u003e chore: release v3.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/devtools/commits/v3.4.3/packages/devtools\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.10.43 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by b...\n\n_Description has been truncated_","html_url":"https://github.com/TW199501/soybean-ui/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TW199501%2Fsoybean-ui/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"5906038794","node_id":"PR_kwDOLHSps88AAAABJHAMiw","number":256,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T04:13:54.000Z","updated_at":"2026-10-18T04:14:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":22,"packages":[{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@swc/html","old_version":"1.13.19","new_version":"1.16.18","repository_url":"https://github.com/swc-project/swc"},{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.13","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"qs","old_version":"6.13.0","new_version":"6.14.0","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.0.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"image-size","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/image-size/image-size"},{"name":"joi","old_version":"17.13.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"launch-editor","old_version":"2.13.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"sprintf-js","old_version":"1.0.3","new_version":"removed","repository_url":"https://github.com/alexei/sprintf.js"},{"name":"svgo","old_version":"3.3.3","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.13","repository_url":"https://github.com/websockets/ws"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 22 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@swc/html](https://github.com/swc-project/swc/tree/HEAD/packages/html) | `1.13.19` | `1.16.18` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.13` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.3` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [image-size](https://github.com/image-size/image-size) | `2.0.2` | `2.0.4` |\n| [joi](https://github.com/hapijs/joi) | `17.13.3` | `17.13.8` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [sprintf-js](https://github.com/alexei/sprintf.js) | `1.0.3` | `removed` |\n| [svgo](https://github.com/svg/svgo) | `3.3.3` | `3.3.5` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@swc/html` from 1.13.19 to 1.16.18\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swc-project/swc/blob/main/CHANGELOG.md\"\u003e@​swc/html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.18] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a safe cache root on Unix (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12500\"\u003e#12500\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2125403ad6c5cb7b8329852f5f84b797ede99146\"\u003e2125403\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/minifier)\u003c/strong\u003e Check decl for side effect (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12501\"\u003e#12501\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6841927dd3b72b51b7deaa238d88df9ce0f3fb9f\"\u003e6841927\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.17] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a secure Windows profile cache (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12452\"\u003e#12452\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2c0fb896611f5b9d462886db9d8089813a99a4a6\"\u003e2c0fb89\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Allow opting out of Unix cache root security checks (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12469\"\u003e#12469\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/e87fa401933d6c27e5b14f26d9c3381cccc53cdc\"\u003ee87fa40\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Run main CodSpeed benchmarks after policy skips (\u003ca href=\"https://github.com/swc-project/swc/commit/1b6d869ec415609664a06150df8ec4d614fdb3f8\"\u003e1b6d869\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Match Rust's z10 baseline in s390x release builds (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12489\"\u003e#12489\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/b96f92fa6ddafac71133185c7c760855f27b6ed6\"\u003eb96f92f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Raise native addon MSRV to Rust 1.85 (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12491\"\u003e#12491\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/54a232401c81a3c97851128b92904b5b0308c4b4\"\u003e54a2324\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Repair empty crate release changeset (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12499\"\u003e#12499\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6bf5f8cf38e005fd03c2a4bc49d9021432033695\"\u003e6bf5f8c\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(cli)\u003c/strong\u003e Resolve out-dir source map paths relative to output (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12481\"\u003e#12481\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/717914f88f4f19caa1dd93e971628acb4bd608d1\"\u003e717914f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(deps)\u003c/strong\u003e Update cargo (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/10278\"\u003e#10278\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/fc7a9e2c159409d97ae0647534a9b9cdefb6eaed\"\u003efc7a9e2\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/compat)\u003c/strong\u003e Preserve consecutive loop labels (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12472\"\u003e#12472\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/28c33708dc691a64358255b5aec02f1c7eb62cdf\"\u003e28c3370\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/estree)\u003c/strong\u003e Fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/898b5926d17b86e14262437b90ca37b043adecda\"\u003e898b592\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBREAKING\u003c/strong\u003e: fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/fixer)\u003c/strong\u003e Preserve parentheses in JSX sequence expressions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12485\"\u003e#12485\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/7a36735f5636e5880cc4030d3b916dd19cedeb9b\"\u003e7a36735\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/63ced3ba33a9c31737ad056b39c9a8cdb4fcc486\"\u003e\u003ccode\u003e63ced3b\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/ff4257e08f565ef3dea4219a1f9d148c15d7496f\"\u003e\u003ccode\u003eff4257e\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d2bfb947435b19f82532cea721f12fb950ccde7a\"\u003e\u003ccode\u003ed2bfb94\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/52746278c3e2566264370ea072076fad91eadbaf\"\u003e\u003ccode\u003e5274627\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/f8269e6342753d1d859dcf8d932e1bbe2c8592ef\"\u003e\u003ccode\u003ef8269e6\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.16-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/3e034f2b1897174e6d6c53fb9fae6b8cefd717ed\"\u003e\u003ccode\u003e3e034f2\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.15-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d6b897c58d250c4088dbd842d0e8fd318515eb7c\"\u003e\u003ccode\u003ed6b897c\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.14-nightly-20261006.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1391a346e1ba8ef0cbaaa7c1b90c391ad6d150c5\"\u003e\u003ccode\u003e1391a34\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/a006b7fabd19b909c803822360c217706313acbb\"\u003e\u003ccode\u003ea006b7f\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13-nightly-20260930.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1b2c264916cb664d259113717851275fb6b01620\"\u003e\u003ccode\u003e1b2c264\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.12\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swc-project/swc/commits/v1.16.18/packages/html\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.13 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.13.0 to 6.14.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003ethrowOnParameterLimitExceeded\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/517\"\u003e#517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e[patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e[actions] use shared action; re-add finishers\u003c/li\u003e\n\u003cli\u003e[meta] Fix changelog formatting bug\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e, \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cp\u003e[Fix] fix regressions from robustness refactor\n[actions] update reusable workflows\u003c/p\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: avoid a crash when a \u003ccode\u003efilter\u003c/code\u003e key is \u003ccode\u003enull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils.merge\u003c/code\u003e: functions should not be stringified into keys\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ensure a non-string \u003ccode\u003efilter\u003c/code\u003e does not crash\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003e__proto__\u003c/code\u003e syntax instead of \u003ccode\u003eObject.create\u003c/code\u003e for null objects\u003c/li\u003e\n\u003cli\u003e[Refactor] misc cleanup\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils.merge\u003c/code\u003e: add some coverage\u003c/li\u003e\n\u003cli\u003e[Tests] fix a test case\u003c/li\u003e\n\u003cli\u003e[actions] split out node 10-20, and 20+\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003eobject-inspect\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/32dcc637f90be175c0d4617b429263115a87e3a8\"\u003e\u003ccode\u003e32dcc63\u003c/code\u003e\u003c/a\u003e v6.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4ec582b07a411f49b3192ea92562e2ad503a4dc0\"\u003e\u003ccode\u003e4ec582b\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/a240c52c7c48d3ead6bd77c5bc3b1275bab252fc\"\u003e\u003ccode\u003ea240c52\u003c/code\u003e\u003c/a\u003e [Tests] increase coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/25956a73e8cf56d445b0972cc3d9d16eb0958435\"\u003e\u003ccode\u003e25956a7\u003c/code\u003e\u003c/a\u003e [Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b189ed49c8dfe5b41afe6cecabdaa562de56764b\"\u003e\u003ccode\u003eb189ed4\u003c/code\u003e\u003c/a\u003e [patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/1d590de5eb325a6ea332812b260c024e6a58ab8c\"\u003e\u003ccode\u003e1d590de\u003c/code\u003e\u003c/a\u003e [actions] simplify finisher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/6cd60a59aae428123d45810996f4ac6b2c4e5c52\"\u003e\u003ccode\u003e6cd60a5\u003c/code\u003e\u003c/a\u003e [actions] use shared action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/89edfd25f9598b5ccfe7eec9c4c184d5e8854ee2\"\u003e\u003ccode\u003e89edfd2\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e26e7a8946b507c9445e08de04ee1b95c8eb6693\"\u003e\u003ccode\u003ee26e7a8\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51fdc98d72cbfb33f5bab9da1eb8d511b3160249\"\u003e\u003ccode\u003e51fdc98\u003c/code\u003e\u003c/a\u003e [actions] re-add finishers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.13.0...v6.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.0.3 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github...\n\n_Description has been truncated_","html_url":"https://github.com/2000Arion/gsc-docs/pull/256","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/2000Arion%2Fgsc-docs/issues/256","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/256/packages"},{"uuid":"5902711374","node_id":"PR_kwDOQGACbs8AAAABJEc85A","number":55,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T21:26:04.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T20:21:36.000Z","updated_at":"2026-10-17T21:26:07.000Z","time_to_close":3868,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.35.3","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"js-yaml","old_version":"3.15.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.24.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-copy","old_version":"4.0.2","new_version":"4.2.0","repository_url":"https://github.com/planttheidea/fast-copy"},{"name":"fast-uri","old_version":"3.1.7","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"ip-address","old_version":"10.5.0","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.15.1` | `3.15.2` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `5.0.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.24.2` | `4.29.3` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-copy](https://github.com/planttheidea/fast-copy) | `4.0.2` | `4.2.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.7` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.4` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `sharp` from 0.35.3 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.3...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.15.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/mocker` from 4.1.10 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099\"\u003e\u003ccode\u003ef341015\u003c/code\u003e\u003c/a\u003e 5.0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\"\u003e\u003ccode\u003e33a5ef1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568\"\u003e\u003ccode\u003e8247927\u003c/code\u003e\u003c/a\u003e 5.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c\"\u003e\u003ccode\u003e935d78f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f\"\u003e\u003ccode\u003edf7682f\u003c/code\u003e\u003c/a\u003e 5.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02\"\u003e\u003ccode\u003e1ade9de\u003c/code\u003e\u003c/a\u003e npm run format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3\"\u003e\u003ccode\u003e6735c94\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18\"\u003e\u003ccode\u003e4e70465\u003c/code\u003e\u003c/a\u003e chore: ensure prettier formatting (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/154\"\u003e#154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff\"\u003e\u003ccode\u003efd7a5e3\u003c/code\u003e\u003c/a\u003e Bump ip-address from 10.2.0 to 10.4.0 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4\"\u003e\u003ccode\u003e1790143\u003c/code\u003e\u003c/a\u003e Bump uuid and \u003ccode\u003e@​tapjs/processinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.24.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.24.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-copy` from 4.0.2 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/releases\"\u003efast-copy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd test cases requested from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/152\"\u003e#152\u003c/a\u003e) (721c4a1)\u003c/li\u003e\n\u003cli\u003ePreserve own \u003cstrong\u003eproto\u003c/strong\u003e properties when copying objects (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e) (3606924)\u003c/li\u003e\n\u003cli\u003eupdate CHANGELOG (0315cda)\u003c/li\u003e\n\u003cli\u003e[Documentaion] Loose array copies do not maintain sparseness (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/151\"\u003e#151\u003c/a\u003e) (fca2350)\u003c/li\u003e\n\u003cli\u003e[Cleanup] Test suite cleanup from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e (cac4371)\u003c/li\u003e\n\u003cli\u003efix: preserve Date own properties in strict copies (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e) (ec1ff4f)\u003c/li\u003e\n\u003cli\u003eHandle non-function prototype constructors when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/146\"\u003e#146\u003c/a\u003e) (07333a5)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.7.0 to 10.7.3 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/145\"\u003e#145\u003c/a\u003e) (0851ef5)\u003c/li\u003e\n\u003cli\u003eBump serialize-javascript from 7.1.1 to 7.1.2 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/144\"\u003e#144\u003c/a\u003e) (87936ba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate CHANGELOG (2c19569)\u003c/li\u003e\n\u003cli\u003e[Bugfix] Preserve DataView byte offset and length when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/143\"\u003e#143\u003c/a\u003e) (851526c)\u003c/li\u003e\n\u003cli\u003edocs: correct strict and recursive copier examples (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/142\"\u003e#142\u003c/a\u003e) (3b447e0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Bugfix] Audit for edge-case gaps (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/141\"\u003e#141\u003c/a\u003e) (decb094)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/140\"\u003e#140\u003c/a\u003e) (74edf81)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Security] Unbounded recursion on deep instances (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/137\"\u003e#137\u003c/a\u003e) (caa7caa)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Enhancement] Micro-optimizations (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/136\"\u003e#136\u003c/a\u003e) (ceb5366)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/135\"\u003e#135\u003c/a\u003e) (949215c)\u003c/li\u003e\n\u003cli\u003eBump the npm_and_yarn group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/134\"\u003e#134\u003c/a\u003e) (5acb8f5)\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.2 to 7.3.5 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/133\"\u003e#133\u003c/a\u003e) (572108e)\u003c/li\u003e\n\u003cli\u003eBump postcss from 8.5.9 to 8.5.14 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/132\"\u003e#132\u003c/a\u003e) (e82e93c)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.1.0 to 10.2.0 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/131\"\u003e#131\u003c/a\u003e) (c0a0a45)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Issue 128] Incorrect bigint arrays (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/130\"\u003e#130\u003c/a\u003e) (61cf3b2)\u003c/li\u003e\n\u003cli\u003eremove blurb about copying generators (91f692f)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/blob/main/CHANGELOG.md\"\u003efast-copy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/150\"\u003e#150\u003c/a\u003e - Preserve own \u003ccode\u003eDate\u003c/code\u003e properties in \u003ccode\u003estrict\u003c/code\u003e mode (thanks\n\u003ca href=\"https://github.com/xiehuanyi\"\u003e\u003ccode\u003e@​xiehuanyi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/146\"\u003e#146\u003c/a\u003e - Ensure \u003ccode\u003eConstructor\u003c/code\u003e is a function before performing\nnative code check, preventing edge case throw condition (thanks \u003ca href=\"https://github.com/fhgffy\"\u003e\u003ccode\u003e@​fhgffy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/147\"\u003e#147\u003c/a\u003e - Preserve own \u003ccode\u003e__proto__\u003c/code\u003e properties when copying objects\n(thanks \u003ca href=\"https://github.com/feritcemkahraman\"\u003e\u003ccode\u003e@​feritcemkahraman\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/143\"\u003e#143\u003c/a\u003e - Preserve the \u003ccode\u003ebyteOffset\u003c/code\u003e and \u003ccode\u003ebyteLength\u003c/code\u003e of a copied\n\u003ccode\u003eDataView\u003c/code\u003e. The copy previously covered the entire backing buffer, so a view over part of a buffer read from the wrong\nposition, and reads beyond its original bounds no longer threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/pralav-25\"\u003e\u003ccode\u003e@​pralav-25\u003c/code\u003e\u003c/a\u003e for identifying and fixing this.\u003c/p\u003e\n\u003ch2\u003e4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Copy the contents of a \u003ccode\u003eBuffer\u003c/code\u003e into memory it owns,\ninstead of returning a view over the original's memory. \u003ccode\u003eBuffer\u003c/code\u003e overrides \u003ccode\u003eslice\u003c/code\u003e with one that does not copy, so\nmutating the copy previously mutated the original.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Use a \u003ccode\u003enull\u003c/code\u003e prototype for the internal map of\ntag-specific copiers, so that a value carrying a custom \u003ccode\u003eSymbol.toStringTag\u003c/code\u003e cannot resolve to an inherited\n\u003ccode\u003eObject.prototype\u003c/code\u003e member as its copier. Tags such as \u003ccode\u003etoString\u003c/code\u003e, \u003ccode\u003evalueOf\u003c/code\u003e, or \u003ccode\u003ehasOwnProperty\u003c/code\u003e previously produced a\ngarbage copy or threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Add \u003ccode\u003emaxDepth\u003c/code\u003e option to \u003ccode\u003ecreateCopier\u003c/code\u003e, bounding the\nnumber of nested objects traversed (defaults to \u003ccode\u003e1000\u003c/code\u003e, pass \u003ccode\u003eInfinity\u003c/code\u003e to traverse without a limit)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Throw the new \u003ccode\u003eMaxDepthExceededError\u003c/code\u003e when a value is\nnested more deeply than \u003ccode\u003emaxDepth\u003c/code\u003e, instead of exhausting the call stack with a native \u003ccode\u003eRangeError\u003c/code\u003e; the error extends\n\u003ccode\u003eRangeError\u003c/code\u003e, so existing handling continues to work\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lenny-ts\"\u003e\u003ccode\u003e@​lenny-ts\u003c/code\u003e\u003c/a\u003e for identifying this.\u003c/p\u003e\n\u003ch3\u003eInternal changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eState\u003c/code\u003e object passed to custom \u003ccode\u003emethods\u003c/code\u003e now includes a \u003ccode\u003edepth\u003c/code\u003e property. This is maintained internally and\nshould not be modified, but it is a required property on the exported \u003ccode\u003eState\u003c/code\u003e type, so any code constructing a \u003ccode\u003eState\u003c/code\u003e\ndirectly (such as a test mock) will need to provide it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/commit/5c4e3acd3189d7919bcfd4bcf0041e0174cc31ff\"\u003e\u003ccode\u003e5c4e3ac\u003c/code\u003e\u003c/a\u003e Release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/comm...\n\n_Description has been truncated_","html_url":"https://github.com/xavisavvy/toa-website/pull/55","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xavisavvy%2Ftoa-website/issues/55","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/55/packages"},{"uuid":"5897386751","node_id":"PR_kwDOUu4rk88AAAABJAU-eQ","number":2,"state":"open","title":"Bump the npm_and_yarn group across 2 directories with 23 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-17T10:24:37.000Z","updated_at":"2026-10-17T10:24:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":23,"packages":[{"name":"multer","old_version":"2.1.1","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.30","repository_url":"https://github.com/postcss/postcss"},{"name":"vite","old_version":"7.3.0","new_version":"7.3.7","repository_url":"https://github.com/vitejs/vite"},{"name":"@babel/core","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.29.0","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"picomatch","old_version":"4.0.3","new_version":"4.0.7","repository_url":"https://github.com/micromatch/picomatch"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"baseline-browser-mapping","old_version":"2.9.11","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"2.2.2","new_version":"2.3.0","repository_url":"https://github.com/expressjs/body-parser"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"esbuild","old_version":"0.27.2","new_version":"0.28.2","repository_url":"https://github.com/evanw/esbuild"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss-selector-parser","old_version":"6.1.2","new_version":"removed","repository_url":"https://github.com/postcss/postcss-selector-parser"},{"name":"qs","old_version":"6.15.1","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"rollup","old_version":"4.55.1","new_version":"4.64.7","repository_url":"https://github.com/rollup/rollup"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"uuid","old_version":"10.0.0","new_version":"removed","repository_url":"https://github.com/uuidjs/uuid"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 23 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.4.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.30` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.0` | `7.3.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.29.0` | `7.29.8` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.7` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.11` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.28.2` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.4` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `6.1.2` | `removed` |\n| [qs](https://github.com/ljharb/qs) | `6.15.1` | `6.16.1` |\n| [rollup](https://github.com/rollup/rollup) | `4.55.1` | `4.64.7` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [uuid](https://github.com/uuidjs/uuid) | `10.0.0` | `removed` |\n\nBumps the npm_and_yarn group with 7 updates in the /artifacts/mockup-sandbox directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [postcss](https://github.com/postcss/postcss) | `8.5.12` | `8.5.30` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `7.3.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.23` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.2` | `4.29.3` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.27.7` | `0.28.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n\n\nUpdates `multer` from 2.1.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/multer/releases\"\u003emulter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003emulter finally supports Google Cloud Functions and Firebase 🎉\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThese platforms read the request body before your code runs, so multer's classic \u003ccode\u003ereq.pipe(busboy)\u003c/code\u003e received nothing: empty \u003ccode\u003ereq.body\u003c/code\u003e, empty \u003ccode\u003ereq.files\u003c/code\u003e, and nearly a decade of duplicated issues.\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003estreamHandler\u003c/code\u003e option closes that gap: you decide how the body reaches the parser, so the pre-read \u003ccode\u003erawBody\u003c/code\u003e just works (see image).\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst multer = require('multer')\r\n\u003cp\u003econst upload = multer({\u003cbr /\u003e\nstorage: multer.memoryStorage(),\u003cbr /\u003e\nstreamHandler: (req, busboy) =\u0026gt; {\u003cbr /\u003e\n// Cloud Functions / Firebase expose the pre-read body here\u003cbr /\u003e\nif (req.rawBody) busboy.end(req.rawBody)\u003cbr /\u003e\nelse req.pipe(busboy)\u003cbr /\u003e\n}\u003cbr /\u003e\n})\u003c/p\u003e\n\u003cp\u003eapp.post('/upload', upload.single('file'), (req, res) =\u0026gt; {\u003cbr /\u003e\nres.json({ name: req.file.originalname, size: req.file.size })\u003cbr /\u003e\n})\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThis landed thanks to community PRs going back to 2017; their authors are credited as co-authors in the release.\u003c/p\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-88932\"\u003eCVE-2026-88932\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34\"\u003eGHSA-3pph-fpjx-jg34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: remove README translations by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1463\"\u003eexpressjs/multer#1463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add macOS to the test matrix by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1464\"\u003eexpressjs/multer#1464\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat. improve wording for LIMIT_UNEXPECTED_FILE error code by \u003ca href=\"https://github.com/flashbag\"\u003e\u003ccode\u003e@​flashbag\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/426\"\u003eexpressjs/multer#426\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add filename to file errors by \u003ca href=\"https://github.com/UjjwalKumar239\"\u003e\u003ccode\u003e@​UjjwalKumar239\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1416\"\u003eexpressjs/multer#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: remove concat-stream dependency by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1356\"\u003eexpressjs/multer#1356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject non-integer fileSize limits by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1395\"\u003eexpressjs/multer#1395\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: allow exactly limits.parts parts by \u003ca href=\"https://github.com/deepakganesh78\"\u003e\u003ccode\u003e@​deepakganesh78\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1446\"\u003eexpressjs/multer#1446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: do not consume maxCount for files skipped by fileFilter by \u003ca href=\"https://github.com/Sagargupta16\"\u003e\u003ccode\u003e@​Sagargupta16\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1426\"\u003eexpressjs/multer#1426\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate all limits at construction time by \u003ca href=\"https://github.com/ShubhamOulkar\"\u003e\u003ccode\u003e@​ShubhamOulkar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1335\"\u003eexpressjs/multer#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: cover storage engine _removeFile invocation semantics by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1460\"\u003eexpressjs/multer#1460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: accept a function for limits by \u003ca href=\"https://github.com/hossein-zare\"\u003e\u003ccode\u003e@​hossein-zare\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1133\"\u003eexpressjs/multer#1133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add flush option to disk storage to fsync files before completion by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1458\"\u003eexpressjs/multer#1458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: expose busboy defCharset, highWaterMark and fileHwm options by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1465\"\u003eexpressjs/multer#1465\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: describe the file stream contract for storage engines by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1468\"\u003eexpressjs/multer#1468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/multer/blob/main/CHANGELOG.md\"\u003emulter's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-88932\"\u003eCVE-2026-88932\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34\"\u003eGHSA-3pph-fpjx-jg34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003efilename\u003c/code\u003e to \u003ccode\u003eLIMIT_FILE_SIZE\u003c/code\u003e and \u003ccode\u003eLIMIT_UNEXPECTED_FILE\u003c/code\u003e errors (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1416\"\u003e#1416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept a function for \u003ccode\u003elimits\u003c/code\u003e, called with the request, to set limits per request (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1133\"\u003e#1133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd opt-in \u003ccode\u003eflush\u003c/code\u003e option to \u003ccode\u003eDiskStorage\u003c/code\u003e to fsync files before the callback runs (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1458\"\u003e#1458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExpose busboy's \u003ccode\u003edefCharset\u003c/code\u003e, \u003ccode\u003ehighWaterMark\u003c/code\u003e and \u003ccode\u003efileHwm\u003c/code\u003e options (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1465\"\u003e#1465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003estreamHandler\u003c/code\u003e option to feed busboy from pre-consumed bodies (Google Cloud Functions, Firebase) (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1466\"\u003e#1466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003emulter.diskStorage()\u003c/code\u003e to be called without options (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1471\"\u003e#1471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecode WHATWG-escaped characters (\u003ccode\u003e%0A\u003c/code\u003e, \u003ccode\u003e%0D\u003c/code\u003e, \u003ccode\u003e%22\u003c/code\u003e) in field names, matching \u003ccode\u003efile.originalname\u003c/code\u003e since 2.3.0: \u003ccode\u003ereq.body\u003c/code\u003e keys, \u003ccode\u003efile.fieldname\u003c/code\u003e and \u003ccode\u003eerr.field\u003c/code\u003e now carry the real name. If you matched the escaped spelling as a workaround, use the real name now (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1473\"\u003e#1473\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReport the decoded filename in \u003ccode\u003eerr.filename\u003c/code\u003e on \u003ccode\u003eLIMIT_FILE_SIZE\u003c/code\u003e errors, matching \u003ccode\u003efile.originalname\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject non-integer or negative \u003ccode\u003elimits\u003c/code\u003e values at construction time; a float limit silently disabled the check (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1395\"\u003e#1395\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1335\"\u003e#1335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept requests with exactly \u003ccode\u003elimits.parts\u003c/code\u003e parts; \u003ccode\u003eLIMIT_PART_COUNT\u003c/code\u003e now fires only when the limit is exceeded. If you set \u003ccode\u003eparts\u003c/code\u003e one higher to work around this, you can drop the extra one (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1446\"\u003e#1446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFiles skipped by \u003ccode\u003efileFilter\u003c/code\u003e no longer count towards \u003ccode\u003emaxCount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1426\"\u003e#1426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChange the \u003ccode\u003eLIMIT_UNEXPECTED_FILE\u003c/code\u003e message to \u0026quot;Unexpected file field\u0026quot; (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/426\"\u003e#426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the \u003ccode\u003econcat-stream\u003c/code\u003e dependency (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1356\"\u003e#1356\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add JSDoc to the public API and document the storage engine stream contract (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1467\"\u003e#1467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1468\"\u003e#1468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add FormData upload examples (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: remove the translated READMEs (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1463\"\u003e#1463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInternal: run the test suite on macOS (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1464\"\u003e#1464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77078\"\u003eCVE-2026-77078\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-wc9g-mqfw-jrwm\"\u003eGHSA-wc9g-mqfw-jrwm\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77037\"\u003eCVE-2026-77037\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-qfvm-cv95-jqjf\"\u003eGHSA-qfvm-cv95-jqjf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77063\"\u003eCVE-2026-77063\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-qvfw-j98x-7q72\"\u003eGHSA-qvfw-j98x-7q72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82333\"\u003eCVE-2026-82333\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-535w-7cp7-47q4\"\u003eGHSA-535w-7cp7-47q4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMulterError\u003c/code\u003e codes \u003ccode\u003eINVALID_FIELD_NAME\u003c/code\u003e and \u003ccode\u003eSTREAM_DESTROYED\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd opt-in \u003ccode\u003elimits.fieldArrayIndexLimit\u003c/code\u003e to bound numeric array indexes in field names (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1438\"\u003e#1438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept files whose size is exactly \u003ccode\u003elimits.fileSize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1407\"\u003e#1407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve the caller's async context (\u003ccode\u003eAsyncLocalStorage\u003c/code\u003e) when calling \u003ccode\u003enext()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecode WHATWG-escaped characters (\u003ccode\u003e%0A\u003c/code\u003e, \u003ccode\u003e%0D\u003c/code\u003e, \u003ccode\u003e%22\u003c/code\u003e) in \u003ccode\u003efile.originalname\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not crash when \u003ccode\u003efileFilter\u003c/code\u003e invokes its callback more than once (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1427\"\u003e#1427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse a fallback message for \u003ccode\u003eMulterError\u003c/code\u003e codes without a mapping (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1448\"\u003e#1448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: clarify \u003ccode\u003epreservePath\u003c/code\u003e and \u003ccode\u003eparts\u003c/code\u003e, use \u003ccode\u003ecrypto.randomBytes\u003c/code\u003e in the \u003ccode\u003eDiskStorage\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1414\"\u003e#1414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1430\"\u003e#1430\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1436\"\u003e#1436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add Indonesian, Japanese and Tamil translations and refresh all translations from the current README (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1431\"\u003e#1431\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1354\"\u003e#1354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1462\"\u003e#1462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInternal: run the test suite on Windows (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1334\"\u003e#1334\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5038\"\u003eCVE-2026-5038\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3p4h-7m6x-2hcm\"\u003eGHSA-3p4h-7m6x-2hcm\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5079\"\u003eCVE-2026-5079\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-72gw-mp4g-v24j\"\u003eGHSA-72gw-mp4g-v24j\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/35979e5afbb814bdb4b750ce028b125eb84c53af\"\u003e\u003ccode\u003e35979e5\u003c/code\u003e\u003c/a\u003e 2.4.0 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1469\"\u003e#1469\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/b888532fe2e10ceb13da44286448cb2bb4ce9720\"\u003e\u003ccode\u003eb888532\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/upload-sarif to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1474\"\u003e#1474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/e6bcd7db69315714fb9a38b1cd1e0f582cbce65a\"\u003e\u003ccode\u003ee6bcd7d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1475\"\u003e#1475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/00dec43b394c5bfaf4efb6d0fe8467bad05525ed\"\u003e\u003ccode\u003e00dec43\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1476\"\u003e#1476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/8d5c3b72e430e7edaa2749e96dcb75bf18d84733\"\u003e\u003ccode\u003e8d5c3b7\u003c/code\u003e\u003c/a\u003e feat: allow diskStorage without options (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1471\"\u003e#1471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/02f6e8265b6bf6b6921a819db3b84276efa03ed2\"\u003e\u003ccode\u003e02f6e82\u003c/code\u003e\u003c/a\u003e fix: report the decoded filename on LIMIT_FILE_SIZE (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/bc3f72d5edaa19b993771348e3fb47b366316a88\"\u003e\u003ccode\u003ebc3f72d\u003c/code\u003e\u003c/a\u003e fix: decode escaped field names, not just filenames (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1473\"\u003e#1473\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/2661325ba8ca2a72b7fb554b63d2df51da9290c4\"\u003e\u003ccode\u003e2661325\u003c/code\u003e\u003c/a\u003e docs: add JSDoc to the public API (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1467\"\u003e#1467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/53337f9713619ef3381ee6b4e541f926dbaac305\"\u003e\u003ccode\u003e53337f9\u003c/code\u003e\u003c/a\u003e fix: remove late-completing uploads aborted before the engine names them\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/7f2c9ab5f35c0478a7b3bb0f5e1af9b536780132\"\u003e\u003ccode\u003e7f2c9ab\u003c/code\u003e\u003c/a\u003e feat: add streamHandler option to feed busboy from pre-consumed bodies (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1466\"\u003e#1466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/multer/compare/v2.1.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for multer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix broken map on \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/Rufflet\"\u003e\u003ccode\u003e@​Rufflet\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.29\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/choudhryfrompak\"\u003e\u003ccode\u003e@​choudhryfrompak\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed comments support in \u003ccode\u003elist.comma()\u003c/code\u003e and \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed semicolon and custom property (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.28\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes types regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.27\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed removing any comments starting with \u003ccode\u003e/*#\u003c/code\u003e (by \u003ca href=\"https://github.com/dylanpulver\"\u003e\u003ccode\u003e@​dylanpulver\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003e*\u003c/code\u003e hack before a comment in Custom Properties (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed empty values in the middle of \u003ccode\u003elist.comma()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespace-only values in \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed rule’s end position on space before semicolon (by \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed Chinese text in deprecation warning (by \u003ca href=\"https://github.com/Jesse205\"\u003e\u003ccode\u003e@​Jesse205\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.26\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e regression (by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTrack symlinks in path protection in source map loading (by \u003ca href=\"https://github.com/drengir1\"\u003e\u003ccode\u003e@​drengir1\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed 8.5.17 visitor regression.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e for non-string values (by \u003ca href=\"https://github.com/amir-rezaei\"\u003e\u003ccode\u003e@​amir-rezaei\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve the BOM after the processing (by \u003ca href=\"https://github.com/hdimer\"\u003e\u003ccode\u003e@​hdimer\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix broken map on \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/Rufflet\"\u003e\u003ccode\u003e@​Rufflet\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.29\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/choudhryfrompak\"\u003e\u003ccode\u003e@​choudhryfrompak\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed comments support in \u003ccode\u003elist.comma()\u003c/code\u003e and \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed semicolon and custom property (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.28\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes types regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.27\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed removing any comments starting with \u003ccode\u003e/*#\u003c/code\u003e (by \u003ca href=\"https://github.com/dylanpulver\"\u003e\u003ccode\u003e@​dylanpulver\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003e*\u003c/code\u003e hack before a comment in Custom Properties (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed empty values in the middle of \u003ccode\u003elist.comma()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespace-only values in \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed rule’s end position on space before semicolon (by \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed Chinese text in deprecation warning (by \u003ca href=\"https://github.com/Jesse205\"\u003e\u003ccode\u003e@​Jesse205\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.26\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e regression (by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTrack symlinks in path protection in source map loading (by \u003ca href=\"https://github.com/drengir1\"\u003e\u003ccode\u003e@​drengir1\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed 8.5.17 visitor regression.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e for non-string values (by \u003ca href=\"https://github.com/amir-rezaei\"\u003e\u003ccode\u003e@​amir-rezaei\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve the BOM after the processing (by \u003ca href=\"https://github.com/hdimer\"\u003e\u003ccode\u003e@​hdimer\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/f1aca7ec68ab0cfb96cc9e69520a87f641c5a9e4\"\u003e\u003ccode\u003ef1aca7e\u003c/code\u003e\u003c/a\u003e Release 8.5.30 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/9d8344589299ca90f4ec0a4fab899e357995eaad\"\u003e\u003ccode\u003e9d83445\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/6c9bc73d9d2ad2c9c8e998ace707ebe067bc8425\"\u003e\u003ccode\u003e6c9bc73\u003c/code\u003e\u003c/a\u003e Fix invalid source map mapping on escaping before new line (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/1fd8f881875330b284d65961c2c158f61d4e3bab\"\u003e\u003ccode\u003e1fd8f88\u003c/code\u003e\u003c/a\u003e Add missed changes in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/a7a1f3476177d689dff722d3f9f72190ddf93f7e\"\u003e\u003ccode\u003ea7a1f34\u003c/code\u003e\u003c/a\u003e Release 8.5.29 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b55a36d14670cefa838b59a9b68c035b9619e294\"\u003e\u003ccode\u003eb55a36d\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7647a8107ebac8014f1a29ec7e06d3f6ab7c8ac6\"\u003e\u003ccode\u003e7647a81\u003c/code\u003e\u003c/a\u003e Escape \u0026lt;/style\u0026gt; in output of non-Root nodes (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2163\"\u003e#2163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7ac902664902289ea0cb9d6b1096b81e8d33bbf5\"\u003e\u003ccode\u003e7ac9026\u003c/code\u003e\u003c/a\u003e Do not split list.comma() and list.space() on separators inside comments (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2162\"\u003e#2162\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/ebffa97faa305f781a7df5a41ec39f57966b7b6c\"\u003e\u003ccode\u003eebffa97\u003c/code\u003e\u003c/a\u003e Add postcss-smooth-corners plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/57d6401ccca6ce96c9fcdebbdfc30c1ce9e7e797\"\u003e\u003ccode\u003e57d6401\u003c/code\u003e\u003c/a\u003e Speed up source map cleaning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 7.3.0 to 7.3.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.5\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.6...v7.3.7\"\u003e7.3.7\u003c/a\u003e (2026-10-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update launch-editor to v2.14.2 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23654\"\u003e#23654\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a0a33391b1b02b61b5102dd2216934d83b678a73\"\u003ea0a3339\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehtml:\u003c/strong\u003e filename passed to transformIndexHtml should not include queries (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23653\"\u003e#23653\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d479f9dd8cbcb7631aac4a421e09ccd069d4786\"\u003e8d479f9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e store ids to \u003ccode\u003esafeModulePaths\u003c/code\u003e rather than URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23656\"\u003e#23656\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f0d76c7da13d5e794807b82f0b86c1931a8438e3\"\u003ef0d76c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.5...v7.3.6\"\u003e7.3.6\u003c/a\u003e (2026-06-25)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow esbuild 0.28 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22743\"\u003e#22743\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a24931e7934e80eff5895b89d9e612ad3ad3e1f4\"\u003ea24931e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.3...v7.3.5\"\u003e7.3.5\u003c/a\u003e (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22574\"\u003e#22574\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e8c18556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e backport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22573\"\u003e#22573\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003ef20d64b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eskip v7.3.4 release (\u003ca href=\"https://github.com/vitejs/vite/commit/8a6a0c9fc734dbfe293ac33a4954506ee50430e1\"\u003e8a6a0c9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.3...v7.3.4\"\u003e7.3.4\u003c/a\u003e (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22574\"\u003e#22574\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e8c18556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e backport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22573\"\u003e#22573\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003ef20d64b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.2...v7.3.3\"\u003e7.3.3\u003c/a\u003e (2026-05-07)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid destructure lowering for newer safari (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22346\"\u003e#22346\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5ab51c0f76f0896175e02ad797c1f5fe116d02f4\"\u003e5ab51c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.1...v7.3.2\"\u003e7.3.2\u003c/a\u003e (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7\"\u003e09d8c90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e, apply server.fs check to env transport (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22162\"\u003e#22162\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1\"\u003e19db0f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echeck \u003ccode\u003eserver.fs\u003c/code\u003e after stripping query as well (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22160\"\u003e#22160\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6\"\u003ef8103cc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.0...v7.3.1\"\u003e7.3.1\u003c/a\u003e (2026-01-07)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eignoreOutdatedRequests\u003c/code\u003e option to \u003ccode\u003eoptimizeDeps\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/21364\"\u003e#21364\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e\"\u003e9d39d37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/284f6b58d6b511cebdd52ab7731975f385bf3c6b\"\u003e\u003ccode\u003e284f6b5\u003c/code\u003e\u003c/a\u003e release: v7.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f0d76c7da13d5e794807b82f0b86c1931a8438e3\"\u003e\u003ccode\u003ef0d76c7\u003c/code\u003e\u003c/a\u003e fix(server): store ids to \u003ccode\u003esafeModulePaths\u003c/code\u003e rather than URLs (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23656\"\u003e#23656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a0a33391b1b02b61b5102dd2216934d83b678a73\"\u003e\u003ccode\u003ea0a3339\u003c/code\u003e\u003c/a\u003e fix(deps): update launch-editor to v2.14.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23654\"\u003e#23654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8d479f9dd8cbcb7631aac4a421e09ccd069d4786\"\u003e\u003ccode\u003e8d479f9\u003c/code\u003e\u003c/a\u003e fix(html): filename passed to transformIndexHtml should not include queries (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0a7b53ba230c6e68f502a89864534c607d393ab7\"\u003e\u003ccode\u003e0a7b53b\u003c/code\u003e\u003c/a\u003e release: v7.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a24931e7934e80eff5895b89d9e612ad3ad3e1f4\"\u003e\u003ccode\u003ea24931e\u003c/code\u003e\u003c/a\u003e feat: allow esbuild 0.28 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22743\"\u003e#22743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/077945cb60df372a52cf999b6e532ba70fac7423\"\u003e\u003ccode\u003e077945c\u003c/code\u003e\u003c/a\u003e release: v7.3.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8a6a0c9fc734dbfe293ac33a4954506ee50430e1\"\u003e\u003ccode\u003e8a6a0c9\u003c/code\u003e\u003c/a\u003e chore: skip v7.3.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e\u003ccode\u003e8c18556\u003c/code\u003e\u003c/a\u003e fix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22574\"\u003e#22574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003e\u003ccode\u003ef20d64b\u003c/code\u003e\u003c/a\u003e fix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v7.3.7/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.28.5 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/plugin-transform-modules-systemjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.8 (2026-07-31)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e, \u003ccode\u003ebabel-parser\u003c/code\u003e, \u003ccode\u003ebabel-plugin-transform-spread\u003c/code\u003e, \u003ccode\u003ebabel-traverse\u003c/code\u003e, \u003ccode\u003ebabel-types\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17871\"\u003e#17871\u003c/a\u003e Disallow super call after new (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18046\"\u003e#18046\u003c/a\u003e fix(generator): improve new callee parens check (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-node\u003c/code\u003e, \u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18044\"\u003e#18044\u003c/a\u003e fix(systemjs): support \u003ccode\u003e__proto__\u003c/code\u003e as an export name (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 2\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/5de11ca9234379b78ef95df72aebbec93f28bf45\"\u003e\u003ccode\u003e5de11ca\u003c/code\u003e\u003c/a\u003e v7.29.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/f08d4342e1f189a56e7cee46e60a1817af96219e\"\u003e\u003ccode\u003ef08d434\u003c/code\u003e\u003c/a\u003e fix(systemjs): support \u003cstrong\u003eproto\u003c/strong\u003e as an export name (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/18044\"\u003e#18044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a458f66074b97d54773db8159af673d23b26079b\"\u003e\u003ccode\u003ea458f66\u003c/code\u003e\u003c/a\u003e v7.29.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/32ebd5aaf2526ddd176fd6a3d1e3dc594abdc8d9\"\u003e\u003ccode\u003e32ebd5a\u003c/code\u003e\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17974\"\u003e#17974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `picomatch` from 4.0.3 to 4.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/releases\"\u003epicomatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle terminal globstars in parenthesized patterns by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/198\"\u003emicromatch/picomatch#198\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: scan full pattern when tokens are requested by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/197\"\u003emicromatch/picomatch#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return complete pattern parts from scan by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/199\"\u003emicromatch/picomatch#199\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: preserve all branches when rewriting risky repeated extglobs by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor the windows option when matching basenames by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003emicromatch/picomatch#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003cp\u003eThis is a security release fixing several security relevant issues.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md\"\u003epicomatch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed terminal globstars in parenthesized patterns (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/142\"\u003e#142\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7\"\u003ee279bd7\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.6 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/62\"\u003e#62\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819d\"\u003e5f5819d\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/58\"\u003e#58\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/f201165\"\u003ef201165\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.5 (2026-07-02)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserved every branch when safely rewriting repeated extglobs (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003e#182\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/6289307\"\u003e6289307\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHonored the \u003ccode\u003ewindows\u003c/code\u003e option when matching basenames (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003e#183\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/ab8bc4d\"\u003eab8bc4d\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4 (2026-03-23)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevented regular expression denial of service (ReDoS) from crafted repeated or nested extglob quantifiers by safely rewriting or treating risky patterns as literals. The new \u003ccode\u003emaxExtglobRecursion\u003c/code\u003e option defaults to \u003ccode\u003e0\u003c/code\u003e; positive numeric values allow limited nesting, while \u003ccode\u003efalse\u003c/code\u003e disables the safeguard (\u003ca href=\"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5eceecd\"\u003e5eceecd\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePrevented inherited object properties from being interpreted as POSIX character classes (\u003ca href=\"https://github.com/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/4516eb5\"\u003e4516eb5\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/6bb40679c218cefba5d4e9662408c5fdf699a8bb\"\u003e\u003ccode\u003e6bb4067\u003c/code\u003e\u003c/a\u003e 4.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/fdfb1559e4ef761f95c3009c1fd7afceb8830f55\"\u003e\u003ccode\u003efdfb155\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/198\"\u003e#198\u003c/a\u003e from micromatch/issue-142\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/38c6b7aefe50af10cfa978f362120d295d39cfa2\"\u003e\u003ccode\u003e38c6b7a\u003c/code\u003e\u003c/a\u003e 4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/ada9d3fe9eb5a606bb4f6d87bc5cd7ac87fe63a4\"\u003e\u003ccode\u003eada9d3f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/199\"\u003e#199\u003c/a\u003e from micromatch/issue-58\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/9b74f6fc70ed828ea4ef7106833a31428b8d7329\"\u003e\u003ccode\u003e9b74f6f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/197\"\u003e#197\u003c/a\u003e from micromatch/issue-62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/f2011653e8eaa13bae6dffed7e7016ea8e123485\"\u003e\u003ccode\u003ef201165\u003c/code\u003e\u003c/a\u003e fix: return complete pattern parts from scan\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7f34c4f8b5f9d0490cf7810a1f0c2de178\"\u003e\u003ccode\u003ee279bd7\u003c/code\u003e\u003c/a\u003e fix: handle terminal globstars in parenthesized patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819dd4c0572c87df9a8011dffa65df5b6879f\"\u003e\u003ccode\u003e5f5819d\u003c/code\u003e\u003c/a\u003e fix: scan full pattern when tokens are requested\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/4f41a8edade7a5ab19832f7b40ecce46b288767f\"\u003e\u003ccode\u003e4f41a8e\u003c/code\u003e\u003c/a\u003e 4.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/02cfc1bf912c79ea75ef1fe7da2ce4efade39903\"\u003e\u003ccode\u003e02cfc1b\u003c/code\u003e\u003c/a\u003e Update .verb.md and run verb to generate README documentation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `picomatch` from 2.3.1 to 2.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/releases\"\u003epicomatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle terminal globstars in parenthesized patterns by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/198\"\u003emicromatch/picomatch#198\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: scan full pattern when tokens are requested by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/197\"\u003emicromatch/picomatch#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return complete pattern parts from scan by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/199\"\u003emicromatch/picomatch#199\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: preserve all branches when rewriting risky repeated extglobs by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor the windows option when matching basenames by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003emicromatch/picomatch#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003cp\u003eThis is a security release fixing several security relevant issues.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md\"\u003epicomatch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed terminal globstars in parenthesized patterns (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/142\"\u003e#142\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7\"\u003ee279bd7\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.6 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/62\"\u003e#62\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819d\"\u003e5f5819d\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/58\"\u003e#58\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/f201165\"\u003ef201165\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.5 (2026-07-02)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserved every branch when safely rewriting repeated extglobs (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003e#182\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/6289307\"\u003e6289307\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHonored the \u003ccode\u003ewindows\u003c/code\u003e option when matching basenames (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003e#183\u003c/a\u003e, \u003ca href=\"htt...\n\n_Description has been truncated_","html_url":"https://github.com/jasonclarkagain/KimiAgentJacquelin-Memorial-Tribute-Site-2-1zip/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jasonclarkagain%2FKimiAgentJacquelin-Memorial-Tribute-Site-2-1zip/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"5893342006","node_id":"PR_kwDOCr5FnM8AAAABI9NnAg","number":1165,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T01:20:03.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T00:58:43.000Z","updated_at":"2026-10-17T01:20:05.000Z","time_to_close":1280,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":21,"packages":[{"name":"mysql2","old_version":"2.1.0","new_version":"3.23.1","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"compression","old_version":"1.7.4","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"uuid","old_version":"8.3.1","new_version":"14.0.0","repository_url":"https://github.com/uuidjs/uuid"},{"name":"body-parser","old_version":"1.18.3","new_version":"1.20.6","repository_url":"https://github.com/expressjs/body-parser"},{"name":"morgan","old_version":"1.9.1","new_version":"1.12.1","repository_url":"https://github.com/expressjs/morgan"},{"name":"sequelize","old_version":"6.35.2","new_version":"6.37.4","repository_url":"https://github.com/sequelize/sequelize"},{"name":"js-yaml","old_version":"3.13.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@babel/core","old_version":"7.16.12","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.23.3","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"browserslist","old_version":"4.19.1","new_version":"4.22.2","repository_url":"https://github.com/browserslist/browserslist"},{"name":"defu","old_version":"6.1.3","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"flatted","old_version":"3.2.5","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"nanoid","old_version":"3.3.7","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"picomatch","old_version":"2.2.2","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"postcss","old_version":"8.4.32","new_version":"8.5.30","repository_url":"https://github.com/postcss/postcss"},{"name":"protocol-buffers-schema","old_version":"3.3.2","new_version":"3.6.1","repository_url":"https://github.com/mafintosh/protocol-buffers-schema"},{"name":"proxy-addr","old_version":"2.0.4","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"shell-quote","old_version":"1.8.1","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 21 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `2.1.0` | `3.23.1` |\n| [compression](https://github.com/expressjs/compression) | `1.7.4` | `1.8.2` |\n| [uuid](https://github.com/uuidjs/uuid) | `8.3.1` | `14.0.0` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.18.3` | `1.20.6` |\n| [morgan](https://github.com/expressjs/morgan) | `1.9.1` | `1.12.1` |\n| [sequelize](https://github.com/sequelize/sequelize) | `6.35.2` | `6.37.4` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.13.1` | `3.15.2` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.16.12` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.23.3` | `7.29.8` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.19.1` | `4.22.2` |\n| [defu](https://github.com/unjs/defu) | `6.1.3` | `6.1.7` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.2.5` | `3.4.4` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.10` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.20` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.2.2` | `2.3.2` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.32` | `8.5.30` |\n| [protocol-buffers-schema](https://github.com/mafintosh/protocol-buffers-schema) | `3.3.2` | `3.6.1` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.4` | `2.0.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.1` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n\nBumps the npm_and_yarn group with 1 update in the /docs/recipes/docker-server directory: [mysql2](https://github.com/sidorares/node-mysql2).\n\nUpdates `mysql2` from 2.1.0 to 3.23.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/releases\"\u003emysql2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.23.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.0...v3.23.1\"\u003e3.23.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e7c48343\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eparser:\u003c/strong\u003e call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4394\"\u003e#4394\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e01f1092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.23.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.6...v3.23.0\"\u003e3.23.0\u003c/a\u003e (2026-07-13)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereturn unsafe integers inside JSON columns as exact strings with supportBigNumbers (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a26ff14089c093d28522acf7bd8d7dbb827ae0cc\"\u003ea26ff14\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e6b933f6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5034e5771929ce7499f6257035600dc88a442c71\"\u003e5034e57\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.5...v3.22.6\"\u003e3.22.6\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e resolve multi statement and expand object regressions (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1b927a92c1c0e59b00d3552786215fe249ef550f\"\u003e1b927a9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.4...v3.22.5\"\u003e3.22.5\u003c/a\u003e (2026-06-06)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ekeep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4327\"\u003e#4327\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2af33a117ac4fdee1f87537cb876df89a02ab2aa\"\u003e2af33a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.3...v3.22.4\"\u003e3.22.4\u003c/a\u003e (2026-05-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epool:\u003c/strong\u003e reject queued requests on end (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4291\"\u003e#4291\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/fbff09cb58eeae11179c05ef1ef6a07a78d53a29\"\u003efbff09c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.2...v3.22.3\"\u003e3.22.3\u003c/a\u003e (2026-04-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow resetOnRelease in connection config validation (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4278\"\u003e#4278\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e72f923d20bcdf776ee4f29ed48c69ee47ebd483\"\u003ee72f923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/blob/master/Changelog.md\"\u003emysql2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.0...v3.23.1\"\u003e3.23.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e7c48343\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eparser:\u003c/strong\u003e call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4394\"\u003e#4394\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e01f1092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.6...v3.23.0\"\u003e3.23.0\u003c/a\u003e (2026-07-13)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereturn unsafe integers inside JSON columns as exact strings with supportBigNumbers (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a26ff14089c093d28522acf7bd8d7dbb827ae0cc\"\u003ea26ff14\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e6b933f6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5034e5771929ce7499f6257035600dc88a442c71\"\u003e5034e57\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.5...v3.22.6\"\u003e3.22.6\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e resolve multi statement and expand object regressions (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1b927a92c1c0e59b00d3552786215fe249ef550f\"\u003e1b927a9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.4...v3.22.5\"\u003e3.22.5\u003c/a\u003e (2026-06-06)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ekeep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4327\"\u003e#4327\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2af33a117ac4fdee1f87537cb876df89a02ab2aa\"\u003e2af33a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.3...v3.22.4\"\u003e3.22.4\u003c/a\u003e (2026-05-26)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epool:\u003c/strong\u003e reject queued requests on end (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4291\"\u003e#4291\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/fbff09cb58eeae11179c05ef1ef6a07a78d53a29\"\u003efbff09c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.2...v3.22.3\"\u003e3.22.3\u003c/a\u003e (2026-04-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow resetOnRelease in connection config validation (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4278\"\u003e#4278\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e72f923d20bcdf776ee4f29ed48c69ee47ebd483\"\u003ee72f923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.1...v3.22.2\"\u003e3.22.2\u003c/a\u003e (2026-04-21)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/3de28fb3683ce6b5f601d5ab87efd770b9d3d4d4\"\u003e\u003ccode\u003e3de28fb\u003c/code\u003e\u003c/a\u003e chore(master): release 3.23.1 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4408\"\u003e#4408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e\u003ccode\u003e01f1092\u003c/code\u003e\u003c/a\u003e fix(parser): call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/3368\"\u003e#3368\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4\"\u003e#4\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/534c552e1f6964f33387bef4cd6b11756c541dac\"\u003e\u003ccode\u003e534c552\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.24.0 to 1.25.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4407\"\u003e#4407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e\u003ccode\u003e7c48343\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/3e13d7b3bde26eda6d6437b73a06913f0b08a2fd\"\u003e\u003ccode\u003e3e13d7b\u003c/code\u003e\u003c/a\u003e docs: establish security charter (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4404\"\u003e#4404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/26c135ba304c2e563c4e0d4333fb257a45a7ce4d\"\u003e\u003ccode\u003e26c135b\u003c/code\u003e\u003c/a\u003e build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/f86cfb18bb507cbe7cefb29cee849604318d5171\"\u003e\u003ccode\u003ef86cfb1\u003c/code\u003e\u003c/a\u003e chore(master): release 3.23.0 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/631649241506b09703d56e7203408bf17b21ad3a\"\u003e\u003ccode\u003e6316492\u003c/code\u003e\u003c/a\u003e build(deps): bump the docusaurus group in /website with 2 updates (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e\u003ccode\u003e6b933f6\u003c/code\u003e\u003c/a\u003e feat(sql-escaper): add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/457c316248d2efb3bf94d1cfdc3c6dbbc402d729\"\u003e\u003ccode\u003e457c316\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.23.0 to 1.24.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v2.1.0...v3.23.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mysql2 since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.7.4 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.8.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(docs): update multiple links from http to https by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/222\"\u003eexpressjs/compression#222\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add dependabot for github actions by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/207\"\u003eexpressjs/compression#207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/228\"\u003eexpressjs/compression#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/229\"\u003eexpressjs/compression#229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/230\"\u003eexpressjs/compression#230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump supertest from 6.2.3 to 6.3.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/231\"\u003eexpressjs/compression#231\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.8.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: on-headers@~1.1.0\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-7339\"\u003eCVE-2025-7339\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q\"\u003eGHSA-76c9-3jph-rj3q\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.8.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003eres.headersSent\u003c/code\u003e when available\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003e_implicitHeader\u003c/code\u003e with \u003ccode\u003ewriteHead\u003c/code\u003e property\u003c/li\u003e\n\u003cli\u003eadd brotli support for versions of node that support it\u003c/li\u003e\n\u003cli\u003eAdd the enforceEncoding option for requests without \u003ccode\u003eAccept-Encoding\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.7.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: Replace accepts with negotiator@~0.6.4\n\u003cul\u003e\n\u003cli\u003eAdd preference option\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: bytes@3.1.2\n\u003cul\u003e\n\u003cli\u003eAdd petabyte (\u003ccode\u003epb\u003c/code\u003e) support\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;thousandsSeparator\u0026quot; incorrecting formatting fractional part\u003c/li\u003e\n\u003cli\u003eFix return value for un-parsable strings\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: compressible@~2.0.18\n\u003cul\u003e\n\u003cli\u003eMark \u003ccode\u003efont/ttf\u003c/code\u003e as compressible\u003c/li\u003e\n\u003cli\u003eRemove compressible from \u003ccode\u003emultipart/mixed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edeps: mime-db@'\u0026gt;= 1.43.0 \u0026lt; 2'\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: safe-buffer@5.2.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/1.7.4...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 8.3.1 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v12.0.1\"\u003e12.0.1\u003c/a\u003e (2026-04-29)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.1.0...v12.0.0\"\u003e12.0.0\u003c/a\u003e (2025-09-05)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd node@24 to ci matrix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/879\"\u003e#879\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/42b6178aa21a593257f0a72abacd220f0b7b8a92\"\u003e42b6178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f38cf10366ab074f9328ae2021eea04d5f2e530\"\u003e0f38cf1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ae786e27265f50bcf7cead196c29f1869297c42f\"\u003eae786e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/c7ee40598ed78584d81ab78dffded9fe5ff20b01\"\u003ec7ee405\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove v4() performance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/894\"\u003e#894\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/5fd974c12718c8848035650b69b8948f12ace197\"\u003e5fd974c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore node: prefix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/889\"\u003e#889\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/e1f42a354593093ba0479f0b4047dae82d28c507\"\u003ee1f42a3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0\"\u003e11.1.0\u003c/a\u003e (2025-02-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/7c1ea087a8149b57380fc8bb7f68c3a215cb6e4b\"\u003e\u003ccode\u003e7c1ea08\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.0 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34\"\u003e\u003ccode\u003e3d2c5b0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003e\u003ccode\u003ef2c235f\u003c/code\u003e\u003c/a\u003e fix!: expect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/529ef0899f5dd503d2ee90d690585d63d78bc212\"\u003e\u003ccode\u003e529ef08\u003c/code\u003e\u003c/a\u003e chore: upgrade TypeScript and fixup types (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/086fd7976f11433edf9ac80be876b3ad243fe087\"\u003e\u003ccode\u003e086fd79\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/933\"\u003e#933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003e\u003ccode\u003edc4ddb8\u003c/code\u003e\u003c/a\u003e feat!: drop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f1f9c9c9cedbae5a1d363d5406c5dfbabe81404\"\u003e\u003ccode\u003e0f1f9c9\u003c/code\u003e\u003c/a\u003e chore: switch to Biome for parsing and linting (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/e2879e64bf125add903c1eff6e0860542c605013\"\u003e\u003ccode\u003ee2879e6\u003c/code\u003e\u003c/a\u003e chore: use maintained version of npm-run-all (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003e\u003ccode\u003effa3138\u003c/code\u003e\u003c/a\u003e fix: Use GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0423d49df2dc8efc300c804731d25f4d7e0fccc4\"\u003e\u003ccode\u003e0423d49\u003c/code\u003e\u003c/a\u003e docs: remove obsolete v1 option notes (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/915\"\u003e#915\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v8.3.1...v14.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.18.3 to 1.20.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove redundant depth check by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/538\"\u003eexpressjs/body-parser#538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add support for Node.js v23 by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/553\"\u003eexpressjs/body-parser#553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: restore CI for 1.x branch by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/665\"\u003eexpressjs/body-parser#665\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@^6.14.0 by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/664\"\u003eexpressjs/body-parser#664\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation and update certain dependencies by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/668\"\u003eexpressjs/body-parser#668\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove SECURITY.md by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/669\"\u003eexpressjs/body-parser#669\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add CodeQL (SAST) by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/670\"\u003eexpressjs/body-parser#670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.4 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/672\"\u003eexpressjs/body-parser#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eImportant\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eIMPORTANT:\u003c/strong\u003e The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e). \u003ca href=\"https://github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth\"\u003eDocumentation\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/master/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.6 / 2026-07-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5 / 2026-04-24\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4 / 2025-12-01\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3 / 2024-09-10\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2 / 2023-02-21\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.1 / 2022-10-06\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.11.0\u003c/li\u003e\n\u003cli\u003eperf: remove unnecessary object clone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.0 / 2022-04-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix error message for json parse whitespace in \u003ccode\u003estrict\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eFix internal error when inflated body exceeds limit\u003c/li\u003e\n\u003cli\u003ePrevent loss of async hooks context\u003c/li\u003e\n\u003cli\u003ePrevent hanging when request already read\u003c/li\u003e\n\u003cli\u003edeps: depd@2.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd\"\u003e\u003ccode\u003eb849bd5\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.1 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9\"\u003e\u003ccode\u003e2c55e2f\u003c/code\u003e\u003c/a\u003e refactor(json): simplify strict mode error string construction (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/7db202cac84a001e6566c2dc6516b44db98beff3\"\u003e\u003ccode\u003e7db202c\u003c/code\u003e\u003c/a\u003e 1.20.4 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/d8f8adb898676dfdf997b4455e5f9b689b53e989\"\u003e\u003ccode\u003ed8f8adb\u003c/code\u003e\u003c/a\u003e ci: add CodeQL (SAST) (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6d133c19b3e7c0bb8301959ca1dba283d23d23c3\"\u003e\u003ccode\u003e6d133c1\u003c/code\u003e\u003c/a\u003e chore: remove SECURITY.md (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/669\"\u003e#669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.18.3...1.20.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~ulisesgascon\"\u003eulisesgascon\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `morgan` from 1.9.1 to 1.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/morgan/releases\"\u003emorgan's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.1\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87859\"\u003eCVE-2026-87859\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-9f6g-j8ch-79g4\"\u003eGHSA-9f6g-j8ch-79g4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: fix typos across documentation by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/378\"\u003eexpressjs/morgan#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/379\"\u003eexpressjs/morgan#379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/upload-sarif to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/381\"\u003eexpressjs/morgan#381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/autobuild from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/382\"\u003eexpressjs/morgan#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/383\"\u003eexpressjs/morgan#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/384\"\u003eexpressjs/morgan#384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.12.1 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/386\"\u003eexpressjs/morgan#386\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/378\"\u003eexpressjs/morgan#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/379\"\u003eexpressjs/morgan#379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/morgan/compare/1.12.0...1.12.1\"\u003ehttps://github.com/expressjs/morgan/compare/1.12.0...1.12.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: upgrade http:// to https:// in README by \u003ca href=\"https://github.com/hanu-14\"\u003e\u003ccode\u003e@​hanu-14\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/363\"\u003eexpressjs/morgan#363\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: bump github actions and dev dependencies by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/369\"\u003eexpressjs/morgan#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/334\"\u003eexpressjs/morgan#334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add ES modules import example by \u003ca href=\"https://github.com/aladi-debug\"\u003e\u003ccode\u003e@​aladi-debug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/352\"\u003eexpressjs/morgan#352\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix README lint errors by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/373\"\u003eexpressjs/morgan#373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: use latest patch per Node.js major, add 23-26 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/374\"\u003eexpressjs/morgan#374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: pass objects through to streams in objectMode by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/375\"\u003eexpressjs/morgan#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: NO_COLOR env var removes color in dev format by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/377\"\u003eexpressjs/morgan#377\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hanu-14\"\u003e\u003ccode\u003e@​hanu-14\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/363\"\u003eexpressjs/morgan#363\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/369\"\u003eexpressjs/morgan#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aladi-debug\"\u003e\u003ccode\u003e@​aladi-debug\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/352\"\u003eexpressjs/morgan#352\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/morgan/compare/1.11.0...1.12.0\"\u003ehttps://github.com/expressjs/morgan/compare/1.11.0...1.12.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add :pid token by \u003ca href=\"https://github.com/ganesh3367\"\u003e\u003ccode\u003e@​ganesh3367\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/329\"\u003eexpressjs/morgan#329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity Fix:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEscape control characters in \u003ccode\u003e:remote-user\u003c/code\u003e token to prevent log injection\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5078\"\u003eCVE-2026-5078\u003c/a\u003e \u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m\"\u003eGHSA-4vj7-5mj6-jm8m\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/291\"\u003eexpressjs/morgan#291\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/299\"\u003eexpressjs/morgan#299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/morgan/blob/master/HISTORY.md\"\u003emorgan's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87859\"\u003eCVE-2026-87859\u003c/a\u003e(\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-9f6g-j8ch-79g4\"\u003eGHSA-9f6g-j8ch-79g4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-15603\"\u003eCVE-2026-15603\u003c/a\u003e(\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-jxfw-x594-9x9m\"\u003eGHSA-jxfw-x594-9x9m\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow format functions to return objects for streams in \u003ccode\u003eobjectMode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRespect the \u003ccode\u003eNO_COLOR\u003c/code\u003e environment variable in the \u003ccode\u003edev\u003c/code\u003e format\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003e:pid\u003c/code\u003e token\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity Fix:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEscape control characters in \u003ccode\u003e:remote-user\u003c/code\u003e token to prevent log injection\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5078\"\u003eCVE-2026-5078\u003c/a\u003e \u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m\"\u003eGHSA-4vj7-5mj6-jm8m\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.10.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: on-headers@~1.1.0\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-7339\"\u003eCVE-2025-7339\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q\"\u003eGHSA-76c9-3jph-rj3q\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.10.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e:total-time\u003c/code\u003e token\u003c/li\u003e\n\u003cli\u003eFix trailing space in colored status code for \u003ccode\u003edev\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003edeps: basic-auth@~2.0.1\n\u003cul\u003e\n\u003cli\u003edeps: safe-buffer@5.1.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: depd@~2.0.0\n\u003cul\u003e\n\u003cli\u003eReplace internal \u003ccode\u003eeval\u003c/code\u003e usage with \u003ccode\u003eFunction\u003c/code\u003e constructor\u003c/li\u003e\n\u003cli\u003eUse instance methods on \u003ccode\u003eprocess\u003c/code\u003e to check for listeners\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: on-headers@~1.0.2\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eres.writeHead\u003c/code\u003e patch missing return value\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/b1272e70812dbc504321eeb5a43d14b0822c150d\"\u003e\u003ccode\u003eb1272e7\u003c/code\u003e\u003c/a\u003e 1.12.1 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/386\"\u003e#386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/4b695edf967ce179cdf4009fe8cddd184b7511ee\"\u003e\u003ccode\u003e4b695ed\u003c/code\u003e\u003c/a\u003e fix: escape double quotes in log fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/0f74eca337508e006052a0ae48fb2754c076ec76\"\u003e\u003ccode\u003e0f74eca\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/384\"\u003e#384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/e399e3c83f6a83e7e90cb42e77afc9b2674f5209\"\u003e\u003ccode\u003ee399e3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/1e86b348a903cc938a7947e90fc8f87da74e90ed\"\u003e\u003ccode\u003e1e86b34\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/autobuild from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/87c0afd6484da75b217b9c70a3ae08e30199cddc\"\u003e\u003ccode\u003e87c0afd\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/upload-sarif to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/381\"\u003e#381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/286b000228cacba362bfa89791c6268663f86610\"\u003e\u003ccode\u003e286b000\u003c/code\u003e\u003c/a\u003e test: run CI on Windows and macOS (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/5a5902afffca3b945b79ef077ad1208d244f451d\"\u003e\u003ccode\u003e5a5902a\u003c/code\u003e\u003c/a\u003e docs: fix typos across documentation (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/063f084a8de1fe02e52333f0b5df2533ced85e42\"\u003e\u003ccode\u003e063f084\u003c/code\u003e\u003c/a\u003e 1.12.0 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/fbf93833186920cc39bb19b247e4a86b61bef4fe\"\u003e\u003ccode\u003efbf9383\u003c/code\u003e\u003c/a\u003e fix: escape all token values in log output\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/morgan/compare/1.9.1...1.12.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for morgan since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sequelize` from 6.35.2 to 6.37.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sequelize/sequelize/releases\"\u003esequelize's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.37.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.3...v6.37.4\"\u003e6.37.4\u003c/a\u003e (2024-10-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eoracle:\u003c/strong\u003e add support for Oracle Database 23ai (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17345\"\u003e#17345\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/b9e71a7af57568dd85b8a2fdaac59b96ce0f0e95\"\u003eb9e71a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoracle:\u003c/strong\u003e validate input with TO_TIMESTAMP_TZ and TO_DATE (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17516\"\u003e#17516\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26\"\u003e5deadd2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.2...v6.37.3\"\u003e6.37.3\u003c/a\u003e (2024-04-13)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e use schema for foreign key constrains of a table (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17099\"\u003e#17099\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/6aba3826d604a3ba638260bf9437775c59d53144\"\u003e6aba382\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.1...v6.37.2\"\u003e6.37.2\u003c/a\u003e (2024-03-29)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ereadOnly\u003c/code\u003e to the transaction options types and docs (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17226\"\u003e#17226\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/7c8972fa183e064d7f801446c286ded5514f89e9\"\u003e7c8972f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.0...v6.37.1\"\u003e6.37.1\u003c/a\u003e (2024-02-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Add definition of \u003ccode\u003ereturning\u003c/code\u003e in \u003ccode\u003eSaveOptions\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16954\"\u003e#16954\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/505467bd7fb66a0fe3298038307390c597500689\"\u003e505467b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.36.0...v6.37.0\"\u003e6.37.0\u003c/a\u003e (2024-02-11)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e support connectionTimeoutMillis dialectOption (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/14119\"\u003e#14119\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/e81200e272d3bfef15bbd90653e7dcff7ab8fc47\"\u003ee81200e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.36.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.35.2...v6.36.0\"\u003e6.36.0\u003c/a\u003e (2024-02-02)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e backport stream dialectOption to v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16868\"\u003e#16868\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/a25005855b5282533a17235b3dd2d2a5eb8723c2\"\u003ea250058\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/78a9733b2affd22eda2fcdbde67ef6d5b3224ae8\"\u003e\u003ccode\u003e78a9733\u003c/code\u003e\u003c/a\u003e meta: ignore mssql failures for releasing v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17524\"\u003e#17524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26\"\u003e\u003ccode\u003e5deadd2\u003c/code\u003e\u003c/a\u003e fix(oracle): validate input with TO_TIMESTAMP_TZ and TO_DATE (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17516\"\u003e#17516\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/b9e71a7af57568dd85b8a2fdaac59b96ce0f0e95\"\u003e\u003ccode\u003eb9e71a7\u003c/code\u003e\u003c/a\u003e fix(oracle): add support for Oracle Database 23ai (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17345\"\u003e#17345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/6aba3826d604a3ba638260bf9437775c59d53144\"\u003e\u003ccode\u003e6aba382\u003c/code\u003e\u003c/a\u003e fix(postgres): use schema for foreign key constrains of a table (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17099\"\u003e#17099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/7c8972fa183e064d7f801446c286ded5514f89e9\"\u003e\u003ccode\u003e7c8972f\u003c/code\u003e\u003c/a\u003e fix: add \u003ccode\u003ereadOnly\u003c/code\u003e to the transaction options types and docs (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17226\"\u003e#17226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/505467bd7fb66a0fe3298038307390c597500689\"\u003e\u003ccode\u003e505467b\u003c/code\u003e\u003c/a\u003e fix(types): Add definition of \u003ccode\u003ereturning\u003c/code\u003e in \u003ccode\u003eSaveOptions\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16954\"\u003e#16954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/e81200e272d3bfef15bbd90653e7dcff7ab8fc47\"\u003e\u003ccode\u003ee81200e\u003c/code\u003e\u003c/a\u003e feat(postgres): support connectionTimeoutMillis dialectOption (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/14119\"\u003e#14119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/a25005855b5282533a17235b3dd2d2a5eb8723c2\"\u003e\u003ccode\u003ea250058\u003c/code\u003e\u003c/a\u003e feat(postgres): backport stream dialectOption to v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16868\"\u003e#16868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.35.2...v6.37.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.13.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.1] - 2020-12-07\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix possible code execution in (already unsafe) \u003ccode\u003e.load()\u003c/code\u003e (in \u0026amp;anchor).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.0] - 2020-05-22\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport \u003ccode\u003esafe/loadAll(input, options)\u003c/code\u003e variant of call.\u003c/li\u003e\n\u003cli\u003eCI: drop outdated nodejs versions.\u003c/li\u003e\n\u003cli\u003eDev deps bump.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eQuote \u003ccode\u003e=\u003c/code\u003e in plain scalars \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/519\"\u003e#519\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eCheck the node type for \u003ccode\u003e!\u0026lt;?\u0026gt;\u003c/code\u003e tag in case user manually specifies it.\u003c/li\u003e\n\u003cli\u003eVerify that there are no null-bytes in input.\u003c/li\u003e\n\u003cli\u003eFix wrong quote position when writing condensed flow, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/526\"\u003e#526\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yam...\n\n_Description has been truncated_","html_url":"https://github.com/GoogleChrome/lighthouse-ci/pull/1165","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleChrome%2Flighthouse-ci/issues/1165","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1165/packages"},{"uuid":"5882421147","node_id":"PR_kwDOMw1FEs8AAAABI0gj4w","number":1475,"state":"open","title":"chore(deps): bump the npm-security-updates group across 2 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","javascript","cncf-cla: yes","size/L","needs-ok-to-test"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T10:18:34.000Z","updated_at":"2026-10-16T10:18:50.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-security-updates","update_count":12,"packages":[{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"dompurify","old_version":"3.4.14","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.1.6","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.13.6","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"katex","old_version":"0.16.47","new_version":"0.18.10","repository_url":"https://github.com/KaTeX/KaTeX"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-security-updates group with 12 updates in the /website directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.18` | `1.1.21` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.17` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.6` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.6` | `17.13.8` |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.10` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\nBumps the npm-security-updates group with 1 update in the /tools/lsp/client directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.14 to 3.4.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with \u003ccode\u003eIN_PLACE\u003c/code\u003e, \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e and shadow roots, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eIN_PLACE\u003c/code\u003e handling of nodes that hooks or custom elements tough during sanitization, thanks \u003ca href=\"https://github.com/uttej-badwane\"\u003e\u003ccode\u003e@​uttej-badwane\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the SMIL \u003ccode\u003eattributeName\u003c/code\u003e guard in XHTML mode, thanks \u003ca href=\"https://github.com/Koukyosyumei\"\u003e\u003ccode\u003e@​Koukyosyumei\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened several smaller edge cases (namespaces, literal-text elements, \u003ccode\u003eisValidAttribute()\u003c/code\u003e), thanks \u003ca href=\"https://github.com/artiphishell\"\u003e\u003ccode\u003e@​artiphishell\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a purify-edge test runner as a compatibility check, thanks \u003ca href=\"https://github.com/anzal1\"\u003e\u003ccode\u003e@​anzal1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClarified the \u003ccode\u003eIN_PLACE\u003c/code\u003e documentation in the README about possible risks\u003c/li\u003e\n\u003cli\u003eUpdated several dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a77a3e78b59f72fa4d1c83f22e121ad9cc7d3575\"\u003e\u003ccode\u003ea77a3e7\u003c/code\u003e\u003c/a\u003e release: 3.4.17 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1672\"\u003e#1672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.14...3.4.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.15.3 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d219359f5bedc42815190b2448160fae06b7817c\"\u003e\u003ccode\u003ed219359\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/98157dc1b770240ed4fb91da0faa3fb404b80474\"\u003e\u003ccode\u003e98157dc\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when `encodeDot...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/cb075c5c4410c36f3cefc1f11b014537c5bb9558\"\u003e\u003ccode\u003ecb075c5\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments wi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4b89c03f58d61b06636f37b8a1544d4273364620\"\u003e\u003ccode\u003e4b89c03\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/266527db14153527c407fe163331ebe0165a6fd4\"\u003e\u003ccode\u003e266527d\u003c/code\u003e\u003c/a\u003e [Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/82c5bd012c2c9bcf6b81fb62acd9dd3fdb5de674\"\u003e\u003ccode\u003e82c5bd0\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/3ee412caf5fd26abc4f7644c66a8c708187280db\"\u003e\u003ccode\u003e3ee412c\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.15.3...v6.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.1.6 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/ead3ab7bb134c989e972c8174632d0670023f269\"\u003e\u003ccode\u003eead3ab7\u003c/code\u003e\u003c/a\u003e Bumped v3.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c88b59e3e3a20af1d5d6e499f48908d0fb12a66d\"\u003e\u003ccode\u003ec88b59e\u003c/code\u003e\u003c/a\u003e fix: normalize decoded reg-name case\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/412e40abd4eb8beabfb952d80abf949a2baf27a3\"\u003e\u003ccode\u003e412e40a\u003c/code\u003e\u003c/a\u003e Bumped v3.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/9f4c943e4d2133e8d78e0941203879216255bb01\"\u003e\u003ccode\u003e9f4c943\u003c/code\u003e\u003c/a\u003e fix: backport port and IP-literal validation to v3.x (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/216\"\u003e#216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/1eb3ce436fe050807caba79f886ab894f485a588\"\u003e\u003ccode\u003e1eb3ce4\u003c/code\u003e\u003c/a\u003e fix: treat unterminated bracket hosts as reg-names again (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.2.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.13.6 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.13.6...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `katex` from 0.16.47 to 0.18.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/releases\"\u003ekatex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.18.10\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.9...v0.18.10\"\u003e0.18.10\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003ea477b2e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.8...v0.18.9\"\u003e0.18.9\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003eaafa187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.7...v0.18.8\"\u003e0.18.8\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003eddfcc29\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.6...v0.18.7\"\u003e0.18.7\u003c/a\u003e (2026-09-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \\reflectbox and \\mapsfrom support (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4262\"\u003e#4262\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ab509fde2026a355d3c80965213c05a10bf144cb\"\u003eab509fd\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.5...v0.18.6\"\u003e0.18.6\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve tags on empty final rows (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4277\"\u003e#4277\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/02d552ca2198e91fb24cf32fb0a35cf7610a66aa\"\u003e02d552c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.4...v0.18.5\"\u003e0.18.5\u003c/a\u003e (2026-08-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003echar:\u003c/strong\u003e accept U+10FFFF (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4265\"\u003e#4265\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/680553898e23c55fa6cb66052b4b9396cbe857ce\"\u003e6805538\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/2549\"\u003e#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.3...v0.18.4\"\u003e0.18.4\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md\"\u003ekatex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.9...v0.18.10\"\u003e0.18.10\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003ea477b2e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.8...v0.18.9\"\u003e0.18.9\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003eaafa187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.7...v0.18.8\"\u003e0.18.8\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003eddfcc29\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.6...v0.18.7\"\u003e0.18.7\u003c/a\u003e (2026-09-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \\reflectbox and \\mapsfrom support (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4262\"\u003e#4262\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ab509fde2026a355d3c80965213c05a10bf144cb\"\u003eab509fd\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.5...v0.18.6\"\u003e0.18.6\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve tags on empty final rows (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4277\"\u003e#4277\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/02d552ca2198e91fb24cf32fb0a35cf7610a66aa\"\u003e02d552c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.4...v0.18.5\"\u003e0.18.5\u003c/a\u003e (2026-08-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003echar:\u003c/strong\u003e accept U+10FFFF (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4265\"\u003e#4265\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/680553898e23c55fa6cb66052b4b9396cbe857ce\"\u003e6805538\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/2549\"\u003e#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.3...v0.18.4\"\u003e0.18.4\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eenvironment:\u003c/strong\u003e report invalid environment names as ParseError (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4256\"\u003e#4256\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/e507f759f067ad3b9e279837027d4cfb2314915b\"\u003ee507f75\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/3760\"\u003e#3760\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/3760\"\u003e#3760\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.2...v0.18.3\"\u003e0.18.3\u003c/a\u003e (2026-08-09)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/411da7029f5c095943c2805ce6db16c2be5f214d\"\u003e\u003ccode\u003e411da70\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.10 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003e\u003ccode\u003ea477b2e\u003c/code\u003e\u003c/a\u003e feat: make KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/5a6a8f8d26402a1f85e9e79a8f884af8cfcac9a9\"\u003e\u003ccode\u003e5a6a8f8\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4297\"\u003e#4297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/71a7bc02435353b4ed2420bb7b904cae6a0231bc\"\u003e\u003ccode\u003e71a7bc0\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.9 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003e\u003ccode\u003eaafa187\u003c/code\u003e\u003c/a\u003e feat(types): add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/e749fd1582e37ff530e2e3be9c700c5f5b70de08\"\u003e\u003ccode\u003ee749fd1\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.8 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003e\u003ccode\u003eddfcc29\u003c/code\u003e\u003c/a\u003e fix(array): preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/96e751cd609ba7c99244109c85b24ca754eab409\"\u003e\u003ccode\u003e96e751c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4292\"\u003e#4292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/726c2d4e43e8fb0890da19de086893759b1a0936\"\u003e\u003ccode\u003e726c2d4\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4287\"\u003e#4287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/f71045d11261ebcbd52e891b0d5e151fbae02b7c\"\u003e\u003ccode\u003ef71045d\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency js-yaml to v4.3.2 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4286\"\u003e#4286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.18.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6...\n\n_Description has been truncated_","html_url":"https://github.com/kubernetes-sigs/kro/pull/1475","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubernetes-sigs%2Fkro/issues/1475","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1475/packages"},{"uuid":"5874016732","node_id":"PR_kwDOSPRbhc8AAAABIt2r_Q","number":85,"state":"closed","title":"build(deps): bump shell-quote from 1.10.0 to 1.12.0 in /apps/mobile","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-15T21:45:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-15T21:12:20.000Z","updated_at":"2026-10-15T21:45:15.000Z","time_to_close":1965,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":"/apps/mobile","ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LIXBON-FOUNDER/Lixbon/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/LIXBON-FOUNDER/Lixbon/pull/85","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/LIXBON-FOUNDER%2FLixbon/issues/85","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/85/packages"},{"uuid":"5866545716","node_id":"PR_kwDOQLDCTc8AAAABIn15gQ","number":184,"state":"open","title":"Bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-15T12:56:55.000Z","updated_at":"2026-10-15T13:04:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/delucis/fontkitten/pull/184","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/delucis%2Ffontkitten/issues/184","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/184/packages"},{"uuid":"5857126054","node_id":"PR_kwDOSEuU7c8AAAABIgWbiQ","number":1380,"state":"open","title":"deps(npm): bump shell-quote from 1.10.0 to 1.12.0 in /tests/startup_perf/BlankRNW","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T23:06:16.000Z","updated_at":"2026-10-14T23:11:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(npm)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":"/tests/startup_perf/BlankRNW","ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/microsoft-ui-reactor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/microsoft/microsoft-ui-reactor/pull/1380","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fmicrosoft-ui-reactor/issues/1380","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1380/packages"},{"uuid":"5856626395","node_id":"PR_kwDOQRSi3s8AAAABIf9CmA","number":767,"state":"open","title":"chore(deps): bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript","dependabot"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T22:18:55.000Z","updated_at":"2026-10-14T22:19:24.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/codeforamerica/sebt-self-service-portal/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/codeforamerica/sebt-self-service-portal/pull/767","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/codeforamerica%2Fsebt-self-service-portal/issues/767","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/767/packages"},{"uuid":"5856454789","node_id":"PR_kwDOPHmYp88AAAABIf0HJA","number":9,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-16T01:26:06.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-14T22:04:49.000Z","updated_at":"2026-10-16T01:26:09.000Z","time_to_close":98477,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.1.4","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [shell-quote](https://github.com/ljharb/shell-quote).\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.1.4 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/bjohnson1279/permit-tracker-frontend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/bjohnson1279/permit-tracker-frontend/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bjohnson1279%2Fpermit-tracker-frontend/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}],"issue_packages":[{"old_version":"1.8.3","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-23T19:32:15.000Z","version_change":"1.8.3 → 1.12.0","issue":{"uuid":"6004223840","node_id":"PR_kwDOMdO_Lc8AAAABKVI93w","number":235,"state":"closed","title":"chore(deps): bump shell-quote from 1.8.3 to 1.12.0","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-23T19:32:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-23T19:32:15.000Z","updated_at":"2026-10-23T19:32:40.000Z","time_to_close":19,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.8.3\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/glincker/glin-profanity/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/GLINCKER/glin-profanity/pull/235","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GLINCKER%2Fglin-profanity/issues/235","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/235/packages"}},{"old_version":"1.8.3","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-23T13:36:06.000Z","version_change":"1.8.3 → 1.12.0","issue":{"uuid":"5998780511","node_id":"PR_kwDOQON_4M8AAAABKQuMOw","number":2,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T13:36:06.000Z","updated_at":"2026-10-23T13:36:45.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":20,"packages":[{"name":"axios","old_version":"1.12.2","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.23","repository_url":"https://github.com/postcss/postcss"},{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"baseline-browser-mapping","old_version":"2.8.4","new_version":"2.11.31","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.9","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.26.0","new_version":"4.29.4","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-uri","old_version":"3.1.0","new_version":"3.1.9","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"3.0.4","new_version":"3.0.5","repository_url":"https://github.com/form-data/form-data"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"launch-editor","old_version":"2.11.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.13.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"react-router","old_version":"6.30.1","new_version":"7.18.4","repository_url":"https://github.com/remix-run/react-router"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 20 updates in the /frontend directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [axios](https://github.com/axios/axios) | `1.12.2` | `1.20.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.23` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.8.4` | `2.11.31` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.9` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.26.0` | `4.29.4` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.9` |\n| [form-data](https://github.com/form-data/form-data) | `3.0.4` | `3.0.5` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.11.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.16.1` |\n| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `6.30.1` | `7.18.4` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `axios` from 1.12.2 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.12.2...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for axios since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.23\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eMaximum call stack size exceeded\u003c/code\u003e error.\u003c/li\u003e\n\u003cli\u003eFixed Prototype hijacking for \u003ccode\u003epostcss.fromJSON()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e for unmapped end position (by \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003epostcss-scss\u003c/code\u003e commend regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed reading any file via user-generated CSS.\u003c/li\u003e\n\u003cli\u003eAdded \u003ccode\u003eopts.unsafeMap\u003c/code\u003e to disable checks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed nested brackets parsing performance (by \u003ca href=\"https://github.com/offset\"\u003e\u003ccode\u003e@​offset\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed XSS via unescaped \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e in non-bundler cases (by \u003ca href=\"https://github.com/TharVid\"\u003e\u003ccode\u003e@​TharVid\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eMaximum call stack size exceeded\u003c/code\u003e error.\u003c/li\u003e\n\u003cli\u003eFixed Prototype hijacking for \u003ccode\u003epostcss.fromJSON()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e for unmapped end position (by \u003ca href=\"https://github.com/chatman-media\"\u003e\u003ccode\u003e@​chatman-media\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eInput#origin()\u003c/code\u003e position (by \u003ca href=\"https://github.com/mizdra\"\u003e\u003ccode\u003e@​mizdra\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eraws\u003c/code\u003e after rehydrating a JSON AST (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed putting parent-less node in \u003ccode\u003enodes\u003c/code\u003e of new node (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed computing \u003ccode\u003eoffset\u003c/code\u003e in \u003ccode\u003epositionBy()\u003c/code\u003e (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003erangeBy()\u003c/code\u003e on \u003ccode\u003eindex: 0\u003c/code\u003e (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed declaration parsing performance (by \u003ca href=\"https://github.com/homanp\"\u003e\u003ccode\u003e@​homanp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom syntax regression (by \u003ca href=\"https://github.com/43081j\"\u003e\u003ccode\u003e@​43081j\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.13\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd\"\u003e\u003ccode\u003eeb9e1fe\u003c/code\u003e\u003c/a\u003e Release 8.5.23 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84\"\u003e\u003ccode\u003e9d19c78\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8\"\u003e\u003ccode\u003e7beca13\u003c/code\u003e\u003c/a\u003e Does no load source map file without opts.from\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930\"\u003e\u003ccode\u003edecea51\u003c/code\u003e\u003c/a\u003e Typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae\"\u003e\u003ccode\u003ec18e30d\u003c/code\u003e\u003c/a\u003e Update EM banner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc\"\u003e\u003ccode\u003e98a39ad\u003c/code\u003e\u003c/a\u003e Update EM banner\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352\"\u003e\u003ccode\u003ea3e48c4\u003c/code\u003e\u003c/a\u003e Release 8.5.22 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618\"\u003e\u003ccode\u003ef49d691\u003c/code\u003e\u003c/a\u003e Fix custom property losing its semicolon before a comment (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2117\"\u003e#2117\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e\"\u003e\u003ccode\u003e28e0daf\u003c/code\u003e\u003c/a\u003e Release 8.5.21 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9\"\u003e\u003ccode\u003e3d2b4e4\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.23\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.8.4 to 2.11.31\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.9.3 - remove \u003ccode\u003eprocess.loadEnvFile()\u003c/code\u003e\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove process.loadEnfFile() from main script by \u003ca href=\"https://github.com/tonypconway\"\u003e\u003ccode\u003e@​tonypconway\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/112\"\u003eweb-platform-dx/baseline-browser-mapping#112\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.9.2 - fix browser support bug\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix browser support bug by \u003ca href=\"https://github.com/tonypconway\"\u003e\u003ccode\u003e@​tonypconway\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/111\"\u003eweb-platform-dx/baseline-browser-mapping#111\u003c/a\u003e\n\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.1...v2.9.2\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.1...v2.9.2\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.9.0 - Reduce frequency of data staleness warnings\u003c/h2\u003e\n\u003cp\u003eThis version introduces a number of changes to data staleness warnings in response to \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/105\"\u003e#105\u003c/a\u003e , \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/107\"\u003e#107\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/109\"\u003e#109\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eData staleness warnings are now only shown if the \u003ccode\u003egetCompatibleVersions()\u003c/code\u003e or \u003ccode\u003egetAllVersions()\u003c/code\u003e functions are called - previously they were shown whenever the module was loaded, which meant many \u003ccode\u003ebrowserslist\u003c/code\u003e consumers were seeing the warning despite not targeting Baseline, especially those who were consuming \u003ccode\u003ebrowserslist\u003c/code\u003e in a pre-compiled format via \u003ccode\u003enext.js\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:\n\u003cul\u003e\n\u003cli\u003eThe feature cut off data must be within the last two months, i.e. \u003ccode\u003ewidelyAvailableOnDate: today + \u0026gt;2 years and 4 months\u003c/code\u003e or \u003ccode\u003enewly available\u003c/code\u003e in a \u003ccode\u003ebrowserslist\u003c/code\u003e query.\u003c/li\u003e\n\u003cli\u003eThe module data must be more than 2 months old.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eIntroduces suppression options for these warning via the \u003ccode\u003eoptions\u003c/code\u003e objects and environment variables:\n\u003cul\u003e\n\u003cli\u003eAdds a new \u003ccode\u003esuppressWarnings\u003c/code\u003e boolean to the \u003ccode\u003egetCompatibleVersions()\u003c/code\u003e and \u003ccode\u003egetAllVersions()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRespects the existing \u003ca href=\"https://github.com/browserslist/browserslist/commit/0ae7155a6c7d8f58eaeb3ea450c21bec76de2763\"\u003e\u003ccode\u003eBROWSERSLIST_IGNORE_OLD_DATA\u003c/code\u003e\u003c/a\u003e environment variable.\u003c/li\u003e\n\u003cli\u003eRespects a new \u003ccode\u003eBASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAdds \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping?tab=readme-ov-file#keeping-baseline-browser-mapping-up-to-date\"\u003eexplanatory text to the README\u003c/a\u003e for how to avoid such warnings when reproducible builds are a requirement.\u003c/li\u003e\n\u003cli\u003eChange warning text to be package manager agnostic and mention the possibility of pre-compiled data.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/22ea69ac8ce6a1f62b400f5ffaba170a172d7da4\"\u003e\u003ccode\u003e22ea69a\u003c/code\u003e\u003c/a\u003e Patch to 2.11.31 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/aac391770954190bbf5dce838fe1c41d3ee8a1d5\"\u003e\u003ccode\u003eaac3917\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/19670e7ed107c5a3a4205e062719d728fa32b6e7\"\u003e\u003ccode\u003e19670e7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/65822d68d94d62ef7259ab276bc4f5af6da3953e\"\u003e\u003ccode\u003e65822d6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.30 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c074f56f721b23cfd2e9a434040b655c3a485fc5\"\u003e\u003ccode\u003ec074f56\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/4517bea2fdc3971769c6b4f9ba65dba54b049365\"\u003e\u003ccode\u003e4517bea\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/43522080cdda10b8cac5735b6d14c1067e956150\"\u003e\u003ccode\u003e4352208\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/091495e6580b1a7f2af92e867c1b2d536453b980\"\u003e\u003ccode\u003e091495e\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump \u003ccode\u003e@​humanfs/node\u003c/code\u003e from 0.16.6 to 0.16.8 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c69aabad5fc5acaa2f73c33cbf2b2b74c7bfee4a\"\u003e\u003ccode\u003ec69aaba\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump js-yaml from 4.3.1 to 4.3.2 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/151\"\u003e#151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/3fa5618d3150cf8383d49fea0657302eabcba638\"\u003e\u003ccode\u003e3fa5618\u003c/code\u003e\u003c/a\u003e build(deps-dev): Bump proxy-addr from 2.0.7 to 2.0.8 (\u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/150\"\u003e#150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.8.4...v2.11.31\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.9\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-111181\"\u003eCVE-2026-111181\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828\"\u003eGHSA-27r3-jxmh-p828\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRelease: 1.20.9 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/779\"\u003eexpressjs/body-parser#779\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.8...1.20.9\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.8...1.20.9\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.9/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.9\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828\"\u003eGHSA-27r3-jxmh-p828\u003c/a\u003e (CVE-2026-111181)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/a64f1404e256b3f0e3ce633e081a7593fe482203\"\u003e\u003ccode\u003ea64f140\u003c/code\u003e\u003c/a\u003e 1.20.9 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/779\"\u003e#779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7\"\u003e\u003ccode\u003e1260c38\u003c/code\u003e\u003c/a\u003e fix: prevent process crash from trailing bytes after a compressed body\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b4c2112ff66163da4304188edda5690e90f7c8a7\"\u003e\u003ccode\u003eb4c2112\u003c/code\u003e\u003c/a\u003e docs: fix depth error description (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/776\"\u003e#776\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/29ddb9b43385d3b2c16003aeb8934913ec274011\"\u003e\u003ccode\u003e29ddb9b\u003c/code\u003e\u003c/a\u003e docs: improve readability (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/ac9667a35e178f2c4465fb0298679cfb46629584\"\u003e\u003ccode\u003eac9667a\u003c/code\u003e\u003c/a\u003e docs: improve wording (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/755\"\u003e#755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.26.0 to 4.29.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed joined version bounds in version ray and range queries (by \u003ca href=\"https://github.com/ybai08\"\u003e\u003ccode\u003e@​ybai08\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespaces processing (by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed joined version bounds in version ray and range queries (by \u003ca href=\"https://github.com/ybai08\"\u003e\u003ccode\u003e@​ybai08\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespaces processing (by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f7a99b9da8d1e86d04f3fe821ee7ef85e8f8f4d5\"\u003e\u003ccode\u003ef7a99b9\u003c/code\u003e\u003c/a\u003e Release 4.29.4 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/03fc7029dc74eee69e1b0129bde13e1b6dfdf0ca\"\u003e\u003ccode\u003e03fc702\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/efe07e181972a35579bf9f380b514c0ce6f79bc1\"\u003e\u003ccode\u003eefe07e1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/956\"\u003e#956\u003c/a\u003e from ybai08/fix-joined-range-bounds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ef50f5be498c03682c40d9fe895db9f30ae323c5\"\u003e\u003ccode\u003eef50f5b\u003c/code\u003e\u003c/a\u003e Fix joined version bounds in version ray and range queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/8219dd79df0315feaabba302077a66e236822a3a\"\u003e\u003ccode\u003e8219dd7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/954\"\u003e#954\u003c/a\u003e from abhu85/fix-since-extends-whitespace\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/893120be94c923495b2668cad9c5595fc4e4ed3a\"\u003e\u003ccode\u003e893120b\u003c/code\u003e\u003c/a\u003e Allow arbitrary whitespaces in since, extends, config and not queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.26.0...4.29.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"ht...\n\n_Description has been truncated_","html_url":"https://github.com/Vaibhavee89/FullStack-Containerized-App/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vaibhavee89%2FFullStack-Containerized-App/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.9.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-23T06:18:07.000Z","version_change":"1.9.0 → 1.12.0","issue":{"uuid":"5992966173","node_id":"PR_kwDOTJ14Gc8AAAABKMEX5g","number":48,"state":"open","title":"chore(deps): bump the npm_and_yarn group across 7 directories with 20 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T06:18:07.000Z","updated_at":"2026-10-23T06:25:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":20,"packages":[{"name":"katex","old_version":"0.16.47","new_version":"0.18.2","repository_url":"https://github.com/KaTeX/KaTeX"},{"name":"vite","old_version":"8.2.0","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"dompurify","old_version":"3.4.12","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"simple-git","old_version":"3.36.0","new_version":"4.0.1","repository_url":"https://github.com/steveukx/git-js"},{"name":"electron","old_version":"40.10.2","new_version":"42.11.9","repository_url":"https://github.com/electron/electron"},{"name":"undici","old_version":"6.27.0","new_version":"6.29.1","repository_url":"https://github.com/nodejs/undici"},{"name":"undici","old_version":"7.28.0","new_version":"7.30.1","repository_url":"https://github.com/nodejs/undici"},{"name":"@simple-git/argv-parser","old_version":"1.1.1","new_version":"2.0.0","repository_url":"https://github.com/steveukx/git-js"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"4.1.12","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"fast-uri","old_version":"3.1.5","new_version":"3.1.9","repository_url":"https://github.com/fastify/fast-uri"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"18.2.3","new_version":"18.3.0","repository_url":"https://github.com/hapijs/joi"},{"name":"sanitize-html","old_version":"2.17.6","new_version":"2.18.1","repository_url":"https://github.com/apostrophecms/apostrophe"},{"name":"shell-quote","old_version":"1.9.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.3.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.36.0` | `4.0.1` |\n| [electron](https://github.com/electron/electron) | `40.10.2` | `42.11.9` |\n| [undici](https://github.com/nodejs/undici) | `6.27.0` | `6.29.1` |\n| [undici](https://github.com/nodejs/undici) | `7.28.0` | `7.30.1` |\n| [@simple-git/argv-parser](https://github.com/steveukx/git-js/tree/HEAD/packages/argv-parser) | `1.1.1` | `2.0.0` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `4.1.12` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.5` | `3.1.9` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `18.2.3` | `18.3.0` |\n| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.6` | `2.18.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.9.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\nBumps the npm_and_yarn group with 2 updates in the /apps/bootstrap-installer directory: [katex](https://github.com/KaTeX/KaTeX) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 5 updates in the /apps/desktop directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.2` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.3.5` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.36.0` | `4.0.1` |\n| [electron](https://github.com/electron/electron) | `40.10.2` | `42.11.9` |\n\nBumps the npm_and_yarn group with 3 updates in the /scripts/whatsapp-bridge directory: [music-metadata](https://github.com/Borewit/music-metadata), [proxy-addr](https://github.com/jshttp/proxy-addr) and [sharp](https://github.com/lovell/sharp).\nBumps the npm_and_yarn group with 1 update in the /ui-tui directory: [undici](https://github.com/nodejs/undici).\nBumps the npm_and_yarn group with 1 update in the /web directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\nBumps the npm_and_yarn group with 12 updates in the /website directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.10` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.17` |\n| [undici](https://github.com/nodejs/undici) | `7.28.0` | `7.30.1` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.4` | `3.1.9` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.4` | `17.13.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n\n\nUpdates `katex` from 0.16.47 to 0.18.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/releases\"\u003ekatex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.18.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.1...v0.18.2\"\u003e0.18.2\u003c/a\u003e (2026-08-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e0adf7e7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.0...v0.18.1\"\u003e0.18.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehtmlData:\u003c/strong\u003e allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e87a2b30\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4204\"\u003e#4204\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4218\"\u003e#4218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.17.0...v0.18.0\"\u003e0.18.0\u003c/a\u003e (2026-07-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprefix css classes (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4229\"\u003e#4229\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/6f5c44f69bae0703877a3a8d934e20c47bbbbc32\"\u003e6f5c44f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eusers who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.17.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.17.0\"\u003e0.17.0\u003c/a\u003e (2026-05-22)\u003c/h1\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify \u003ccode\u003edefineFunction\u003c/code\u003e to avoid destructuring, improve typing (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4222\"\u003e#4222\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/fb604e6ba63e99809e242d37f9c8359209d55431\"\u003efb604e6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe internal API for \u003ccode\u003e__defineFunction\u003c/code\u003e changed: you should no longer wrap properties in \u003ccode\u003eprops\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md\"\u003ekatex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.1...v0.18.2\"\u003e0.18.2\u003c/a\u003e (2026-08-08)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e0adf7e7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.0...v0.18.1\"\u003e0.18.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehtmlData:\u003c/strong\u003e allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e87a2b30\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4204\"\u003e#4204\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4218\"\u003e#4218\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.17.0...v0.18.0\"\u003e0.18.0\u003c/a\u003e (2026-07-17)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eprefix css classes (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4229\"\u003e#4229\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/6f5c44f69bae0703877a3a8d934e20c47bbbbc32\"\u003e6f5c44f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eusers who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.17.0\"\u003e0.17.0\u003c/a\u003e (2026-05-22)\u003c/h1\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esimplify \u003ccode\u003edefineFunction\u003c/code\u003e to avoid destructuring, improve typing (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4222\"\u003e#4222\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/fb604e6ba63e99809e242d37f9c8359209d55431\"\u003efb604e6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe internal API for \u003ccode\u003e__defineFunction\u003c/code\u003e changed: you should no longer wrap properties in \u003ccode\u003eprops\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/93c362b0a57e1e87684f08eb628ef4288938af2f\"\u003e\u003ccode\u003e93c362b\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.2 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/0adf7e77db6915d991803b29699f82b1ccf8d4f4\"\u003e\u003ccode\u003e0adf7e7\u003c/code\u003e\u003c/a\u003e fix: prevent prototype pollution in settings (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4260\"\u003e#4260\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/5a5bf2060431aaed5eb3b549f6fab24f55e9e70a\"\u003e\u003ccode\u003e5a5bf20\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency postcss to v8.5.23 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4259\"\u003e#4259\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/313490889a5f51555cf382097c7e45548c330989\"\u003e\u003ccode\u003e3134908\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4 to 4.37.4 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/69edd93f98dea2e98b831880a9b9dd5a13727165\"\u003e\u003ccode\u003e69edd93\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency js-yaml to v4.3.0 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4253\"\u003e#4253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/b3008858c2b0834725a2fd2370201f2799bd7864\"\u003e\u003ccode\u003eb300885\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency postcss to v8.5.18 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4252\"\u003e#4252\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/42d224973604f8f388f3d7ac9ec815e178b180a7\"\u003e\u003ccode\u003e42d2249\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency webpack-dev-server to v5.2.6 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4251\"\u003e#4251\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/afbf97ddb48ab48ca9a34ce0d89d24064f9fd85d\"\u003e\u003ccode\u003eafbf97d\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-node from 6 to 7 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/cdf479f6749fd2a04c2ccad9be0ead2ac26c33d2\"\u003e\u003ccode\u003ecdf479f\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.1 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/87a2b304aff601ad1c3d930d47d6833d123ad210\"\u003e\u003ccode\u003e87a2b30\u003c/code\u003e\u003c/a\u003e fix(htmlData): allow escaped commas in \\htmlData (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4236\"\u003e#4236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.18.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 8.2.0 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.12 to 3.4.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with \u003ccode\u003eIN_PLACE\u003c/code\u003e, \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e and shadow roots, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eIN_PLACE\u003c/code\u003e handling of nodes that hooks or custom elements tough during sanitization, thanks \u003ca href=\"https://github.com/uttej-badwane\"\u003e\u003ccode\u003e@​uttej-badwane\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the SMIL \u003ccode\u003eattributeName\u003c/code\u003e guard in XHTML mode, thanks \u003ca href=\"https://github.com/Koukyosyumei\"\u003e\u003ccode\u003e@​Koukyosyumei\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened several smaller edge cases (namespaces, literal-text elements, \u003ccode\u003eisValidAttribute()\u003c/code\u003e), thanks \u003ca href=\"https://github.com/artiphishell\"\u003e\u003ccode\u003e@​artiphishell\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a purify-edge test runner as a compatibility check, thanks \u003ca href=\"https://github.com/anzal1\"\u003e\u003ccode\u003e@​anzal1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClarified the \u003ccode\u003eIN_PLACE\u003c/code\u003e documentation in the README about possible risks\u003c/li\u003e\n\u003cli\u003eUpdated several dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with possible bypasses when risky tags are allow-listed, thanks \u003ca href=\"https://github.com/AlirezaRouhbakhsh\"\u003e\u003ccode\u003e@​AlirezaRouhbakhsh\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a couple of edge cases with mixed document contexts, thanks \u003ca href=\"https://github.com/fishjojo1\"\u003e\u003ccode\u003e@​fishjojo1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded the SVG \u003ccode\u003epointer-events\u003c/code\u003e and \u003ccode\u003evector-effect\u003c/code\u003e presentation attributes to the allow-list, thanks \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation\u003c/li\u003e\n\u003cli\u003eUpdated the documentation in several spots, README, wiki, etc., thanks \u003ca href=\"https://github.com/Akokonunes\"\u003e\u003ccode\u003e@​Akokonunes\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdated several development dependencies and CI workflow actions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with hook removal during \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization, thanks \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with hooks potentially bypassing the clone guard, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed an issue with DOM clobbering via \u003ccode\u003eownerDocument\u003c/code\u003e during \u003ccode\u003eIN_PLACE\u003c/code\u003e, thanks \u003ca href=\"https://github.com/AkshayjainG\"\u003e\u003ccode\u003e@​AkshayjainG\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a77a3e78b59f72fa4d1c83f22e121ad9cc7d3575\"\u003e\u003ccode\u003ea77a3e7\u003c/code\u003e\u003c/a\u003e release: 3.4.17 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1672\"\u003e#1672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49\"\u003e\u003ccode\u003e4e6fe24\u003c/code\u003e\u003c/a\u003e release: 3.4.14 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1587\"\u003e#1587\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f\"\u003e\u003ccode\u003e3067f77\u003c/code\u003e\u003c/a\u003e release: 3.4.13 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1562\"\u003e#1562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `simple-git` from 3.36.0 to 4.0.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/releases\"\u003esimple-git's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esimple-git@4.0.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e365f52d: Prepare package.json before publishing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esimple-git@4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e98864c6: Major upgrade to v4. In this version:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved previously available default export, now uses a consistently named \u003ccode\u003esimpleGit\u003c/code\u003e export.\u003c/li\u003e\n\u003cli\u003eRemoved previously deprecated import \u003ccode\u003esimple-git/promise\u003c/code\u003e (change to using the main \u003ccode\u003esimple-git\u003c/code\u003e import).\u003c/li\u003e\n\u003cli\u003eRemoved legacy \u003ccode\u003egitP\u003c/code\u003e export (change to using the main \u003ccode\u003esimpleGit\u003c/code\u003e export).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - previously supported imports\nimport simpleGit from \u0026quot;simple-git\u0026quot;;\nimport { gitP } from \u0026quot;simple-git\u0026quot;;\nimport simpleGit from \u0026quot;simple-git/promise\u0026quot;;\nconst simpleGit = require(\u0026quot;simple-git\u0026quot;);\n\u003cp\u003e// v4 - consolidates to a single supported import\u003cbr /\u003e\nimport { simpleGit } from \u0026quot;simple-git\u0026quot;;\u003cbr /\u003e\nconst { simpleGit } = require(\u0026quot;simple-git\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevents the use of abbreviated long-form \u003ccode\u003egit\u003c/code\u003e options:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - allowed the use of unambiguous long-form options\ngit.raw(\u0026quot;clone\u0026quot;, \u0026quot;--conf=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\n\u003cp\u003e// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError\u003cbr /\u003e\ngit.raw(\u0026quot;fetch\u0026quot;, \u0026quot;--config=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAmbient environment variables are filtered before passing into the \u003ccode\u003egit\u003c/code\u003e child process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process can see both environment variables\n\u003cp\u003e// v4\u003cbr /\u003e\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\u003cbr /\u003e\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\u003cbr /\u003e\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process now sees only FOO\u003c/p\u003e\n\u003cp\u003esimpleGit({\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md\"\u003esimple-git's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e365f52d: Prepare package.json before publishing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.0\u003c/h2\u003e\n\u003ch3\u003eMajor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e98864c6: Major upgrade to v4. In this version:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved previously available default export, now uses a consistently named \u003ccode\u003esimpleGit\u003c/code\u003e export.\u003c/li\u003e\n\u003cli\u003eRemoved previously deprecated import \u003ccode\u003esimple-git/promise\u003c/code\u003e (change to using the main \u003ccode\u003esimple-git\u003c/code\u003e import).\u003c/li\u003e\n\u003cli\u003eRemoved legacy \u003ccode\u003egitP\u003c/code\u003e export (change to using the main \u003ccode\u003esimpleGit\u003c/code\u003e export).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - previously supported imports\nimport simpleGit from \u0026quot;simple-git\u0026quot;;\nimport { gitP } from \u0026quot;simple-git\u0026quot;;\nimport simpleGit from \u0026quot;simple-git/promise\u0026quot;;\nconst simpleGit = require(\u0026quot;simple-git\u0026quot;);\n\u003cp\u003e// v4 - consolidates to a single supported import\u003cbr /\u003e\nimport { simpleGit } from \u0026quot;simple-git\u0026quot;;\u003cbr /\u003e\nconst { simpleGit } = require(\u0026quot;simple-git\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrevents the use of abbreviated long-form \u003ccode\u003egit\u003c/code\u003e options:\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3 - allowed the use of unambiguous long-form options\ngit.raw(\u0026quot;clone\u0026quot;, \u0026quot;--conf=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\n\u003cp\u003e// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError\u003cbr /\u003e\ngit.raw(\u0026quot;fetch\u0026quot;, \u0026quot;--config=user.name=me\u0026quot;, \u0026quot;...\u0026quot;);\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/anir0y\"\u003e\u003ccode\u003e@​anir0y\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/CFionaBF\"\u003e\u003ccode\u003e@​CFionaBF\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/Leeziao\"\u003e\u003ccode\u003e@​Leeziao\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/internetteletubbie\"\u003e\u003ccode\u003e@​internetteletubbie\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/idisdi\"\u003e\u003ccode\u003e@​idisdi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/the-vibe-dev\"\u003e\u003ccode\u003e@​the-vibe-dev\u003c/code\u003e\u003c/a\u003e,\n\u003ca href=\"https://github.com/D7EAD\"\u003e\u003ccode\u003e@​D7EAD\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/dellalibera\"\u003e\u003ccode\u003e@​dellalibera\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/gdegrange\"\u003e\u003ccode\u003e@​gdegrange\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/bilguunbicktivism\"\u003e\u003ccode\u003e@​bilguunbicktivism\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/cruzryan\"\u003e\u003ccode\u003e@​cruzryan\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/b1ue0ceanRun\"\u003e\u003ccode\u003e@​b1ue0ceanRun\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/oss-security-shopify\"\u003e\u003ccode\u003e@​oss-security-shopify\u003c/code\u003e\u003c/a\u003e\nfor identifying the vulnerability.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAmbient environment variables are filtered before passing into the \u003ccode\u003egit\u003c/code\u003e child process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"typescript\"\u003e\u003ccode\u003e// v3\nprocess.env.FOO = \u0026quot;bar\u0026quot;;\nprocess.env.GIT_TEMPLATE_DIR = \u0026quot;./some/path\u0026quot;;\nsimpleGit().raw(\u0026quot;clone\u0026quot;); // git child process can see both environment variables\n\u003cp\u003e\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/f26086d0cd649adda54a44f6e20e3e81318c5029\"\u003e\u003ccode\u003ef26086d\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/365f52d4c8deaf55ac88769ca89ce160e7bb1405\"\u003e\u003ccode\u003e365f52d\u003c/code\u003e\u003c/a\u003e Prepare the main \u003ccode\u003esimple-git\u003c/code\u003e \u003ccode\u003epackage.json\u003c/code\u003e immediately before publishing.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/3971917d3c3d65d9935383ed88970a3578cb462d\"\u003e\u003ccode\u003e3971917\u003c/code\u003e\u003c/a\u003e Version Packages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/d762810c13b331ff1e5eb24c0b434646d2a8d1b3\"\u003e\u003ccode\u003ed762810\u003c/code\u003e\u003c/a\u003e Fix/vulnerability rebase exec (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1198\"\u003e#1198\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/76f308ed445013d8dd973bc515e7815b59426e3e\"\u003e\u003ccode\u003e76f308e\u003c/code\u003e\u003c/a\u003e Pr/1180 (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1195\"\u003e#1195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/dfeb11648190b2d82a98c91768ec6e3a65bb401c\"\u003e\u003ccode\u003edfeb116\u003c/code\u003e\u003c/a\u003e Fix/exec path vulnerability (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1197\"\u003e#1197\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/steveukx/git-js/commit/98864c678444d9336357c844efa4fd5a7984c0d7\"\u003e\u003ccode\u003e98864c6\u003c/code\u003e\u003c/a\u003e V4 (\u003ca href=\"https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1193\"\u003e#1193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/steveukx/git-js/commits/simple-git@4.0.1/simple-git\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `electron` from 40.10.2 to 42.11.9\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/electron/electron/releases\"\u003eelectron's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eelectron v42.11.9\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.9\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eclipboard.read()\u003c/code\u003e, \u003ccode\u003ereadText()\u003c/code\u003e and \u003ccode\u003ehas()\u003c/code\u003e resolving seconds late on Linux while the app was idle. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54310\"\u003e#54310\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54309\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54308\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54307\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003efs.rmSync\u003c/code\u003e failing to remove read-only files on Windows. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54257\"\u003e#54257\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54256\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54255\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54190\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003epointerLock\u003c/code\u003e permission requests from some iframes reporting the parent frame. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54466\"\u003e#54466\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54465\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54464\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54463\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eutilityProcess\u003c/code\u003e dropping \u003ccode\u003estdout\u003c/code\u003e/\u003ccode\u003estderr\u003c/code\u003e output that the child wrote immediately before exiting. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54332\"\u003e#54332\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54279\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54278\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54335\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed WebAssembly exception handlers failing to catch, or crashing during tier-up, in modules using wasm exceptions. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54236\"\u003e#54236\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed WebAssembly modules loaded from the code cache crashing or throwing \u003ccode\u003eRuntimeError: unreachable\u003c/code\u003e after updating between certain patch releases. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54239\"\u003e#54239\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54238\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54246\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54237\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.8\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.8\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, Dawn, PDFium and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54223\"\u003e#54223\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.7\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.7\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a spurious \u0026quot;\u003ccode\u003esandboxed_renderer.bundle.js\u003c/code\u003e script failed to run\u0026quot; console error when DevTools attached to a sandboxed frame before its first navigation. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54175\"\u003e#54175\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54176\"\u003e43\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003cli\u003eFixed an \u0026quot;Invalid \u003ccode\u003eguestInstanceId\u003c/code\u003e\u0026quot; error when removing a loaded \u003ccode\u003e\u0026lt;webview\u0026gt;\u003c/code\u003e from the DOM. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54098\"\u003e#54098\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/54097\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54099\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/54096\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.6\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.6\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream Chromium, Dawn, PDFium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/54083\"\u003e#54083\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.5\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.5\u003c/h1\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackported fixes from upstream ANGLE, Chromium, Skia and V8. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53986\"\u003e#53986\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eelectron v42.11.4\u003c/h2\u003e\n\u003ch1\u003eRelease Notes for v42.11.4\u003c/h1\u003e\n\u003ch2\u003eFixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a renderer crash when an iframe was removed right after loading with \u003ccode\u003enodeIntegrationInSubFrames\u003c/code\u003e enabled and \u003ccode\u003esandbox\u003c/code\u003e disabled, e.g. on pages that embed Meta Pixel. \u003ca href=\"https://redirect.github.com/electron/electron/pull/53886\"\u003e#53886\u003c/a\u003e \u003c!-- raw HTML omitted --\u003e(Also in \u003ca href=\"https://redirect.github.com/electron/electron/pull/53884\"\u003e43\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53885\"\u003e44\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/electron/electron/pull/53883\"\u003e45\u003c/a\u003e)\u003c!-- raw HTML omitted --\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther Changes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/d460d611a3d76010a3b0e02ca8739ed42ab591de\"\u003e\u003ccode\u003ed460d61\u003c/code\u003e\u003c/a\u003e test: parse all custom page size PDFs in one pdf.js process (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54539\"\u003e#54539\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/05a599ea67c174ae24525affffa4dee85b5abd8e\"\u003e\u003ccode\u003e05a599e\u003c/code\u003e\u003c/a\u003e test: wait for focus before requesting pointer lock in spec (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54531\"\u003e#54531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/00e2f2ed68ca31fbd336061a68455f6c871b8f2a\"\u003e\u003ccode\u003e00e2f2e\u003c/code\u003e\u003c/a\u003e test: wait for earlier Electron workers to exit before serial specs (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54509\"\u003e#54509\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/5bbb44efe6e5195744ccc55f86e033cd1bc57eea\"\u003e\u003ccode\u003e5bbb44e\u003c/code\u003e\u003c/a\u003e test: fix flaky navigationHistory.restore PageState spec (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54478\"\u003e#54478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/77ffb7bc21337f382fc6db03ffa1386770d8c5e5\"\u003e\u003ccode\u003e77ffb7b\u003c/code\u003e\u003c/a\u003e test: fix chrome.tabs reload spec race with the reload commit (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54477\"\u003e#54477\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/1755ee598697356959219beefee1e139bc3f8207\"\u003e\u003ccode\u003e1755ee5\u003c/code\u003e\u003c/a\u003e fix: attribute pointer lock requests from in-process iframes to the requestin...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/b969f462d3f0f60823f4a3a46e1a7534fbb2eaaf\"\u003e\u003ccode\u003eb969f46\u003c/code\u003e\u003c/a\u003e build: update PGO profiles (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54472\"\u003e#54472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/759b912b074eed470fbeb8d9ec4cdefd68884705\"\u003e\u003ccode\u003e759b912\u003c/code\u003e\u003c/a\u003e ci: send child-process logging to a file on the Windows test legs (42-x-y) (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/ba665804679753e3dff9fa800f63feb36f495c2e\"\u003e\u003ccode\u003eba66580\u003c/code\u003e\u003c/a\u003e test: run the spec suite with vitest (42-x-y) (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54414\"\u003e#54414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/electron/electron/commit/840f1525b66f44701069d1a88008f6bde3e85ad2\"\u003e\u003ccode\u003e840f152\u003c/code\u003e\u003c/a\u003e ci: minimize the runner agent's terminal window before Windows tests (\u003ca href=\"https://redirect.github.com/electron/electron/issues/54367\"\u003e#54367\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/electron/electron/compare/v40.10.2...v42.11.9\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 6.27.0 to 6.29.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.29.1\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service via TLS 1.2 certificate-changing renegotiation\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-87018 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm\"\u003eGHSA-qrxm-fqhp-jwvm\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.\u003c/p\u003e\n\u003ch4\u003eTLS certificate validation bypass through dropped \u003ccode\u003eAgent\u003c/code\u003e options\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109383 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx\"\u003eGHSA-2m5v-pch6-74hx\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAgent\u003c/code\u003e used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as \u003ccode\u003echeckServerIdentity\u003c/code\u003e. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.\u003c/p\u003e\n\u003ch4\u003eDenial of service through excessive \u003ccode\u003eContent-Encoding\u003c/code\u003e values\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109869 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c\"\u003eGHSA-xjj6-f33q-929c\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although \u003ccode\u003efetch()\u003c/code\u003e rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.\u003c/p\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service through unbounded EventSource parser state\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109924 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685\"\u003eGHSA-4qv8-2p9j-2685\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny \u003ccode\u003edata:\u003c/code\u003e fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.\u003c/p\u003e\n\u003ch4\u003eDenial of service through unbounded automatic WebSocket PONG buffering\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109932 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6\"\u003eGHSA-9fm3-97px-rjf6\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) by \u003ca href=\"https://github.com/mrityunjay-pandey\"\u003e\u003ccode\u003e@​mrityunjay-pandey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/6000\"\u003enodejs/undici#6000\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.29.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(retry): settle exposed body on terminal failure by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5778\"\u003enodejs/undici#5778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v6.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5833\"\u003enodejs/undici#5833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: synchronize the issue-3356 body timeout by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5834\"\u003enodejs/undici#5834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c57f6c68c95465338ae97bfc991cb1513d2f76e\"\u003e\u003ccode\u003e8c57f6c\u003c/code\u003e\u003c/a\u003e [Release] v6.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6023\"\u003e#6023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/39f93e142df03e559fe7c3d1fc7fba9beee2c185\"\u003e\u003ccode\u003e39f93e1\u003c/code\u003e\u003c/a\u003e fix(websocket): bound automatic PONG writes under backpressure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e\"\u003e\u003ccode\u003ec43b23f\u003c/code\u003e\u003c/a\u003e fix(eventsource): bound retained SSE parser state\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436\"\u003e\u003ccode\u003e1325a87\u003c/code\u003e\u003c/a\u003e fix(fetch): abort excessive content encoding responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f\"\u003e\u003ccode\u003e8c59f6b\u003c/code\u003e\u003c/a\u003e fix: preserve Agent connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28\"\u003e\u003ccode\u003eb40fbfc\u003c/code\u003e\u003c/a\u003e fix: handle post-connect TLS certificate errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/407630ac0a2f3bc65c596ed078dcffbeec0285c4\"\u003e\u003ccode\u003e407630a\u003c/code\u003e\u003c/a\u003e [v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6000\"\u003e#6000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e1d0501f8705253c32a8b40bdb3fc0474167c92d\"\u003e\u003ccode\u003ee1d0501\u003c/code\u003e\u003c/a\u003e Bumped v6.29.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5888\"\u003e#5888\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/57ac4dea0d38a0bf068eaf7eda0b8cb9e86f6a99\"\u003e\u003ccode\u003e57ac4de\u003c/code\u003e\u003c/a\u003e test: synchronize the issue-3356 body timeout (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5834\"\u003e#5834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d441740cf5dad3455a7a7881451e802f10b0b2a\"\u003e\u003ccode\u003e6d44174\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v6.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5833\"\u003e#5833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6.27.0...v6.29.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `undici` from 7.28.0 to 7.30.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodejs/undici/releases\"\u003eundici's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.29.1\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003eHigh severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service via TLS 1.2 certificate-changing renegotiation\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-87018 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm\"\u003eGHSA-qrxm-fqhp-jwvm\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.\u003c/p\u003e\n\u003ch4\u003eTLS certificate validation bypass through dropped \u003ccode\u003eAgent\u003c/code\u003e options\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109383 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx\"\u003eGHSA-2m5v-pch6-74hx\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAgent\u003c/code\u003e used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as \u003ccode\u003echeckServerIdentity\u003c/code\u003e. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.\u003c/p\u003e\n\u003ch4\u003eDenial of service through excessive \u003ccode\u003eContent-Encoding\u003c/code\u003e values\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109869 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c\"\u003eGHSA-xjj6-f33q-929c\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although \u003ccode\u003efetch()\u003c/code\u003e rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.\u003c/p\u003e\n\u003ch3\u003eMedium severity\u003c/h3\u003e\n\u003ch4\u003eDenial of service through unbounded EventSource parser state\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109924 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685\"\u003eGHSA-4qv8-2p9j-2685\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny \u003ccode\u003edata:\u003c/code\u003e fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.\u003c/p\u003e\n\u003ch4\u003eDenial of service through unbounded automatic WebSocket PONG buffering\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-109932 · \u003ca href=\"https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6\"\u003eGHSA-9fm3-97px-rjf6\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eA malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) by \u003ca href=\"https://github.com/mrityunjay-pandey\"\u003e\u003ccode\u003e@​mrityunjay-pandey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/6000\"\u003enodejs/undici#6000\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\"\u003ehttps://github.com/nodejs/undici/compare/v6.29.0...v6.29.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.29.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v6.x] fix(retry): settle exposed body on terminal failure by \u003ca href=\"https://github.com/mcollina\"\u003e\u003ccode\u003e@​mcollina\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5778\"\u003enodejs/undici#5778\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport upgrade diagnostics lifecycle fixes to v6.x by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5833\"\u003enodejs/undici#5833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: synchronize the issue-3356 body timeout by \u003ca href=\"https://github.com/BridgeAR\"\u003e\u003ccode\u003e@​BridgeAR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nodejs/undici/pull/5834\"\u003enodejs/undici#5834\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c57f6c68c95465338ae97bfc991cb1513d2f76e\"\u003e\u003ccode\u003e8c57f6c\u003c/code\u003e\u003c/a\u003e [Release] v6.29.1 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6023\"\u003e#6023\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/39f93e142df03e559fe7c3d1fc7fba9beee2c185\"\u003e\u003ccode\u003e39f93e1\u003c/code\u003e\u003c/a\u003e fix(websocket): bound automatic PONG writes under backpressure\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e\"\u003e\u003ccode\u003ec43b23f\u003c/code\u003e\u003c/a\u003e fix(eventsource): bound retained SSE parser state\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436\"\u003e\u003ccode\u003e1325a87\u003c/code\u003e\u003c/a\u003e fix(fetch): abort excessive content encoding responses\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f\"\u003e\u003ccode\u003e8c59f6b\u003c/code\u003e\u003c/a\u003e fix: preserve Agent connection options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28\"\u003e\u003ccode\u003eb40fbfc\u003c/code\u003e\u003c/a\u003e fix: handle post-connect TLS certificate errors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/407630ac0a2f3bc65c596ed078dcffbeec0285c4\"\u003e\u003ccode\u003e407630a\u003c/code\u003e\u003c/a\u003e [v6.x] fix(fetch): fix aborting Streams (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/3754\"\u003e#3754\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/6000\"\u003e#6000\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/e1d0501f8705253c32a8b40bdb3fc0474167c92d\"\u003e\u003ccode\u003ee1d0501\u003c/code\u003e\u003c/a\u003e Bumped v6.29.0 (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5888\"\u003e#5888\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/57ac4dea0d38a0bf068eaf7eda0b8cb9e86f6a99\"\u003e\u003ccode\u003e57ac4de\u003c/code\u003e\u003c/a\u003e test: synchronize the issue-3356 body timeout (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5834\"\u003e#5834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodejs/undici/commit/6d441740cf5dad3455a7a7881451e802f10b0b2a\"\u003e\u003ccode\u003e6d44174\u003c/code\u003e\u003c/a\u003e Backport upgrade diagnostics lifecycle fixes to v6.x (\u003ca href=\"https://redirect.github.com/nodejs/undici/issues/5833\"\u003e#5833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodejs/undici/compare/v6...\n\n_Description has been truncated_","html_url":"https://github.com/nastechai/nastech-agent/pull/48","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nastechai%2Fnastech-agent/issues/48","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/48/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-23T04:59:52.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5992175669","node_id":"PR_kwDOTtBui88AAAABKLcFQQ","number":29,"state":"open","title":"build(deps): bump the npm_and_yarn group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-23T04:59:52.000Z","updated_at":"2026-10-23T05:00:22.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":8,"packages":[{"name":"vite","old_version":"8.2.1","new_version":"8.3.5","repository_url":"https://github.com/vitejs/vite"},{"name":"@tanstack/start-server-core","old_version":"1.169.23","new_version":"1.169.45","repository_url":"https://github.com/TanStack/router"},{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"engine.io","old_version":"6.6.9","new_version":"6.6.11","repository_url":"https://github.com/socketio/socket.io"},{"name":"mysql2","old_version":"3.15.3","new_version":"3.24.4","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"seroval","old_version":"1.6.2","new_version":"1.7.1","repository_url":"https://github.com/lxsmnsyc/seroval"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.5` |\n| [@tanstack/start-server-core](https://github.com/TanStack/router/tree/HEAD/packages/start-server-core) | `1.169.23` | `1.169.45` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.18` | `1.1.21` |\n| [engine.io](https://github.com/socketio/socket.io) | `6.6.9` | `6.6.11` |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `3.15.3` | `3.24.4` |\n| [seroval](https://github.com/lxsmnsyc/seroval) | `1.6.2` | `1.7.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `vite` from 8.2.1 to 8.3.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.3.5\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev8.3.4\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5\"\u003e8.3.5\u003c/a\u003e (2026-10-21)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e handle missing chunk import maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23777\"\u003e#23777\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229\"\u003e8d7623d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebuild:\u003c/strong\u003e include preload dependencies to chunk import map hashing (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23793\"\u003e#23793\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e4d16e7c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e apply \u003ccode\u003eserver.origin\u003c/code\u003e to asset URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23683\"\u003e#23683\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5\"\u003e52ba877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e declare utf-8 charset in fallback page (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23846\"\u003e#23846\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e197daf6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e ignore build.chunkImportMap (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23685\"\u003e#23685\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07\"\u003ecfe917d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e include user \u003ccode\u003eimport.meta.env.*\u003c/code\u003e defines in the \u003ccode\u003eimport.meta.env\u003c/code\u003e object (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23713\"\u003e#23713\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25\"\u003e6019aa7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e map forwarded error stacks through the bundle source maps (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23741\"\u003e#23741\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18\"\u003e11fe1e4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e normalize served output files (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23684\"\u003e#23684\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3\"\u003edf4e02c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e stop hmr propagation at modules that are no longer imported (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23839\"\u003e#23839\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212\"\u003e7471e8c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecss:\u003c/strong\u003e don't fail on a literal \u003ccode\u003e%\u003c/code\u003e in \u003ccode\u003eurl()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23676\"\u003e#23676\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261\"\u003e50b382d\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23731\"\u003e#23731\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29\"\u003ecf80aa5\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update all non-major dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23826\"\u003e#23826\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9\"\u003e77d8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23733\"\u003e#23733\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48\"\u003e43f0d05\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update rolldown-related dependencies (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23827\"\u003e#23827\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab\"\u003ec2e0418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e fall back to yarn.lock for lockfile hash (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23667\"\u003e#23667\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e\"\u003ef206096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e scan \u003ccode\u003eoxc.jsxInject\u003c/code\u003e imports (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23758\"\u003e#23758\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714\"\u003e38f3cb4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir check for yarn.lock fallback (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23725\"\u003e#23725\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e8e890e1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptimizer:\u003c/strong\u003e skip patches dir hash for nub lockfile (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23761\"\u003e#23761\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486\"\u003ea7d5696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23631\"\u003e#23631\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e0d86b34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eresolve:\u003c/strong\u003e update resolve.exports to 2.0.4 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23739\"\u003e#23739\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5\"\u003e4ea708a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e handle socket errors on upgrade requests not taken by the HMR server (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23728\"\u003e#23728\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5\"\u003ec2c9ef4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e only strip base when path matches a full segment (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23641\"\u003e#23641\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6\"\u003e3dfde87\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003essr:\u003c/strong\u003e extract inline source maps without a regexp (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23775\"\u003e#23775\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e6a02780\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emigrate to Oxlint (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23746\"\u003e#23746\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92\"\u003e5b73935\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCode Refactoring\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e replace \u003ccode\u003e@vercel/detect-agent\u003c/code\u003e with \u003ccode\u003estd-env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23744\"\u003e#23744\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5\"\u003ece4293f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e consolidate moduleURL to file path utilities (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23828\"\u003e#23828\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003edf7b40e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e separate import resolution from URL conversion (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23791\"\u003e#23791\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e6116689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e share ModuleURL and BrowserURL conversions (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23790\"\u003e#23790\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e446954c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edev:\u003c/strong\u003e use ModuleURLs throughout HTML transforms (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23815\"\u003e#23815\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003ea162990\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4\"\u003e8.3.4\u003c/a\u003e (2026-10-08)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ebundled-dev:\u003c/strong\u003e support \u003ccode\u003eimport.meta.hot.acceptExports\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23463\"\u003e#23463\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e\"\u003ebc0f21c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid mutating hmr defaults (fix \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23575\"\u003e#23575\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23576\"\u003e#23576\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd\"\u003e574d5e3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82\"\u003e\u003ccode\u003e981f07f\u003c/code\u003e\u003c/a\u003e release: v8.3.5 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856\"\u003e#23856\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1\"\u003e\u003ccode\u003e0d86b34\u003c/code\u003e\u003c/a\u003e fix(resolve): support subpath imports with multiple \u003ccode\u003e#\u003c/code\u003e (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631\"\u003e#23631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a\"\u003e\u003ccode\u003e6a02780\u003c/code\u003e\u003c/a\u003e perf(ssr): extract inline source maps without a regexp (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775\"\u003e#23775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa\"\u003e\u003ccode\u003e8e890e1\u003c/code\u003e\u003c/a\u003e fix(optimizer): skip patches dir check for yarn.lock fallback (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725\"\u003e#23725\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6\"\u003e\u003ccode\u003e197daf6\u003c/code\u003e\u003c/a\u003e fix(bundled-dev): declare utf-8 charset in fallback page (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846\"\u003e#23846\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9\"\u003e\u003ccode\u003e4d16e7c\u003c/code\u003e\u003c/a\u003e fix(build): include preload dependencies to chunk import map hashing (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793\"\u003e#23793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3\"\u003e\u003ccode\u003edf7b40e\u003c/code\u003e\u003c/a\u003e refactor(dev): consolidate moduleURL to file path utilities (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828\"\u003e#23828\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52\"\u003e\u003ccode\u003ea162990\u003c/code\u003e\u003c/a\u003e refactor(dev): use ModuleURLs throughout HTML transforms (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815\"\u003e#23815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7\"\u003e\u003ccode\u003e6116689\u003c/code\u003e\u003c/a\u003e refactor(dev): separate import resolution from URL conversion (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791\"\u003e#23791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731\"\u003e\u003ccode\u003e446954c\u003c/code\u003e\u003c/a\u003e refactor(dev): share ModuleURL and BrowserURL conversions (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790\"\u003e#23790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v8.3.5/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@tanstack/start-server-core` from 1.169.23 to 1.169.45\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/releases\"\u003e@​tanstack/start-server-core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.45\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8670\"\u003e#8670\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e - Reference agent skills in other packages by their \u003ccode\u003eintent load\u003c/code\u003e identifier (\u003ccode\u003e@tanstack/\u0026lt;package\u0026gt;#\u0026lt;skill\u0026gt;\u003c/code\u003e) instead of relative file links that break once packages are installed.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.41\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.44\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8212\"\u003e#8212\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e - Render generated script preloads (\u003ccode\u003emodulepreload\u003c/code\u003e, or \u003ccode\u003epreload as=\u0026quot;script\u0026quot;\u003c/code\u003e for IIFE output) with \u003ccode\u003efetchPriority=\u0026quot;low\u0026quot;\u003c/code\u003e and forward it into static Early Hints, so they no longer compete with render-blocking stylesheets, fonts and images.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.40\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.43\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8710\"\u003e#8710\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e - Update \u003ccode\u003efetchdts\u003c/code\u003e to \u003ccode\u003e^0.2.0\u003c/code\u003e. The typed request and response header helpers keep the same header names and value types.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.42\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8451\"\u003e#8451\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e - Skip request middleware bookkeeping when no request middleware is configured, and stop copying serialization adapters when the router adds none.\u003c/p\u003e\n\u003cp\u003eServer route handlers and route middleware now receive the router's decoded pathname, the same one used for route matching. Characters that would change how the path is read, such as \u003ccode\u003e%2F\u003c/code\u003e, \u003ccode\u003e%3F\u003c/code\u003e, and \u003ccode\u003e%23\u003c/code\u003e, stay encoded.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8441\"\u003e#8441\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e - Reuse the parsed request location during SSR instead of repeating input rewrites. Match server routes against the app router's parsed pathname while preserving encoded pathnames for server handlers and middleware.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.37\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ccode\u003e@​tanstack/start-server-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.169.41\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Return 400 Bad Request for malformed percent-encoded request pathnames before running server entry callbacks. Preserve valid encoded paths and query handling.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Reduce request middleware overhead, reuse loaded entries and transport header requirements, and avoid unnecessary URL normalization for server functions. Preserve response helper writes made during body cancellation and SSR cleanup.\u003c/p\u003e\n\u003cp\u003eAvoid allocating absent middleware headers and reply context, and construct RPC redirects with their final response state. Preserve middleware accessor evaluation and the documented undefined value for absent \u003ccode\u003esendContext\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eReduce synchronous server-function response overhead while preserving cancellation cleanup and middleware response mutations.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/TanStack/router/blob/main/packages/start-server-core/CHANGELOG.md\"\u003e@​tanstack/start-server-core's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.169.45\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8670\"\u003e#8670\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e - Reference agent skills in other packages by their \u003ccode\u003eintent load\u003c/code\u003e identifier (\u003ccode\u003e@tanstack/\u0026lt;package\u0026gt;#\u0026lt;skill\u0026gt;\u003c/code\u003e) instead of relative file links that break once packages are installed.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.41\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.44\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8212\"\u003e#8212\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e - Render generated script preloads (\u003ccode\u003emodulepreload\u003c/code\u003e, or \u003ccode\u003epreload as=\u0026quot;script\u0026quot;\u003c/code\u003e for IIFE output) with \u003ccode\u003efetchPriority=\u0026quot;low\u0026quot;\u003c/code\u003e and forward it into static Early Hints, so they no longer compete with render-blocking stylesheets, fonts and images.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.38\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.40\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.43\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8710\"\u003e#8710\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e - Update \u003ccode\u003efetchdts\u003c/code\u003e to \u003ccode\u003e^0.2.0\u003c/code\u003e. The typed request and response header helpers keep the same header names and value types.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.42\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8451\"\u003e#8451\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e - Skip request middleware bookkeeping when no request middleware is configured, and stop copying serialization adapters when the router adds none.\u003c/p\u003e\n\u003cp\u003eServer route handlers and route middleware now receive the router's decoded pathname, the same one used for route matching. Characters that would change how the path is read, such as \u003ccode\u003e%2F\u003c/code\u003e, \u003ccode\u003e%3F\u003c/code\u003e, and \u003ccode\u003e%23\u003c/code\u003e, stay encoded.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/8441\"\u003e#8441\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e - Reuse the parsed request location during SSR instead of repeating input rewrites. Match server routes against the app router's parsed pathname while preserving encoded pathnames for server handlers and middleware.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eUpdated dependencies [\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e]:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-storage-context\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.167.39\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/router-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.171.37\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e@​tanstack/start-client-core\u003c/code\u003e\u003ca href=\"https://github.com/1\"\u003e\u003ccode\u003e@​1\u003c/code\u003e\u003c/a\u003e.170.37\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.169.41\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Return 400 Bad Request for malformed percent-encoded request pathnames before running server entry callbacks. Preserve valid encoded paths and query handling.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://redirect.github.com/TanStack/router/pull/7588\"\u003e#7588\u003c/a\u003e \u003ca href=\"https://github.com/TanStack/router/commit/94d6d8e49694e225cb07e2a6777633d08aeeb3c5\"\u003e\u003ccode\u003e94d6d8e\u003c/code\u003e\u003c/a\u003e - Reduce request middleware overhead, reuse loaded entries and transport header requirements, and avoid unnecessary URL normalization for server functions. Preserve response helper writes made during body cancellation and SSR cleanup.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/6b9fe6d29552270836c511bc9b343d73541f4424\"\u003e\u003ccode\u003e6b9fe6d\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8745\"\u003e#8745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/32a3360cba0e0f884b3215813a48c63467f5a53c\"\u003e\u003ccode\u003e32a3360\u003c/code\u003e\u003c/a\u003e docs(skills): reference cross-package skills by intent ID (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8670\"\u003e#8670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/caaf32da35e250c1344a350fdd80cfc631c24b3c\"\u003e\u003ccode\u003ecaaf32d\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8733\"\u003e#8733\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/18154b1c45454a70aa77e9d6d27c8a6e0733d031\"\u003e\u003ccode\u003e18154b1\u003c/code\u003e\u003c/a\u003e perf: lower manifest script preload priority (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8212\"\u003e#8212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/7a0672503857283614799a0b480f4a82110e5ab6\"\u003e\u003ccode\u003e7a06725\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade Vitest to 5 and migrate benchmarks to the bench fixture ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/140efa4347859f04a9d95f8e61031196341d3d78\"\u003e\u003ccode\u003e140efa4\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8701\"\u003e#8701\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/71d9694da6346fbece2cda4ecde92b0b12a7ee08\"\u003e\u003ccode\u003e71d9694\u003c/code\u003e\u003c/a\u003e chore(deps): bump fetchdts to ^0.2.0 (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8710\"\u003e#8710\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/4ff63eb8a469d5f318dd31579c03c867c88f0384\"\u003e\u003ccode\u003e4ff63eb\u003c/code\u003e\u003c/a\u003e ci: Version Packages (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8700\"\u003e#8700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/740b0ce17737d1f7398740136acdbeabe80df7d8\"\u003e\u003ccode\u003e740b0ce\u003c/code\u003e\u003c/a\u003e perf: skip unused Start request setup (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8451\"\u003e#8451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/TanStack/router/commit/d6ba115d5751c75e20943f0062577cf17b446d82\"\u003e\u003ccode\u003ed6ba115\u003c/code\u003e\u003c/a\u003e perf: reuse prepared SSR request locations (\u003ca href=\"https://github.com/TanStack/router/tree/HEAD/packages/start-server-core/issues/8441\"\u003e#8441\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/TanStack/router/commits/@tanstack/start-server-core@1.169.45/packages/start-server-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `engine.io` from 6.6.9 to 6.6.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/socketio/socket.io/releases\"\u003eengine.io's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eengine.io@6.6.11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erefresh ping timeout on incoming packets (\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003eda008a5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eengine.io@6.6.10\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereject protocol mismatch for existing sessions (\u003ca href=\"https://github.com/socketio/socket.io/commit/86db1fc\"\u003e86db1fc\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore compatibility with Node.js 10 (\u003ca href=\"https://github.com/socketio/socket.io/commit/ae7fb46\"\u003eae7fb46\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erun the polling write callback when the client aborts a compressed response (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5540\"\u003e#5540\u003c/a\u003e) (\u003ca href=\"https://github.com/socketio/socket.io/commit/915a3ed\"\u003e915a3ed\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eoptimize polling request body buffering (\u003ca href=\"https://github.com/socketio/socket.io/commit/dcbd961\"\u003edcbd961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estream compressed polling responses (\u003ca href=\"https://github.com/socketio/socket.io/commit/91dd763\"\u003e91dd763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/websockets/ws/releases/tag/8.21.0\"\u003e\u003ccode\u003ews@~8.21.0\u003c/code\u003e\u003c/a\u003e (no change)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/973833304c7c195c2d0d99b72e4ac9f149e3ca94\"\u003e\u003ccode\u003e9738333\u003c/code\u003e\u003c/a\u003e chore(release): engine.io@6.6.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/fc9dd90e2ff26aa358d0cd27bc59ddc93458ae44\"\u003e\u003ccode\u003efc9dd90\u003c/code\u003e\u003c/a\u003e docs(eio): rework README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/da008a514ded71e3058a964c831c69abe417b2f5\"\u003e\u003ccode\u003eda008a5\u003c/code\u003e\u003c/a\u003e fix(eio): refresh ping timeout on incoming packets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/3df3fed075fd2312e84481786235aa14d08b8fe7\"\u003e\u003ccode\u003e3df3fed\u003c/code\u003e\u003c/a\u003e fix(eio-client): restore default transport resolution\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/aaf2af36ec8ad05910f357a788e0e358bad32738\"\u003e\u003ccode\u003eaaf2af3\u003c/code\u003e\u003c/a\u003e test: upgrade WebdriverIO to v9\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/b5da079228666fcabd97166486d5f6a110826bc8\"\u003e\u003ccode\u003eb5da079\u003c/code\u003e\u003c/a\u003e refactor(sio): simplify packet handling switch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/45873ca93e6e25ac55dc1ba5c9b87853bf19ffba\"\u003e\u003ccode\u003e45873ca\u003c/code\u003e\u003c/a\u003e docs(protocol): clarify namespace comma restriction for built-in parser (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5545\"\u003e#5545\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/551a3dcf0febadf4b5e24e8b44275f9bea559782\"\u003e\u003ccode\u003e551a3dc\u003c/code\u003e\u003c/a\u003e test: use execFile for fixture scripts (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5549\"\u003e#5549\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/ea5560c8d08c4de4b5d4d06301b44d23b3cf23c7\"\u003e\u003ccode\u003eea5560c\u003c/code\u003e\u003c/a\u003e docs(examples): update create-react-app example docs links (\u003ca href=\"https://redirect.github.com/socketio/socket.io/issues/5535\"\u003e#5535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/socketio/socket.io/commit/59f4f2413b2cd1d6a1cf91d367bac71af51f4a24\"\u003e\u003ccode\u003e59f4f24\u003c/code\u003e\u003c/a\u003e fix(sio): reject stateful regexps for dynamic namespaces\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/socketio/socket.io/compare/engine.io@6.6.9...engine.io@6.6.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mysql2` from 3.15.3 to 3.24.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/releases\"\u003emysql2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.24.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.3...v3.24.4\"\u003e3.24.4\u003c/a\u003e (2026-09-07)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eper-query overhead, local dates, short strings, TLS context and compression (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4522\"\u003e#4522\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e2387daf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereuse TLS sessions across connections to the same server (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/9178c824cf4a7c04c0e04b0586661c56b694056f\"\u003e9178c82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.2...v3.24.3\"\u003e3.24.3\u003c/a\u003e (2026-09-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypings:\u003c/strong\u003e PoolCluster node events emit a string nodeId (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4513\"\u003e#4513\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1281e1eab672b2bde0b859efa38be5ed5a6946a5\"\u003e1281e1e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.1...v3.24.2\"\u003e3.24.2\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecorrect length-coded number size for the 3-byte range (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4500\"\u003e#4500\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/de5627288bc76be4ec92a8f08796b2814d26e8aa\"\u003ede56272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epromise:\u003c/strong\u003e honour \u003ccode\u003etrace: false\u003c/code\u003e on every promise-API method (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1dcd8efe6c2a7079d3cc1db92e7a94008b7ed5b9\"\u003e1dcd8ef\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4501\"\u003e#4501\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.0...v3.24.1\"\u003e3.24.1\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esingle-pass utf8 string encoding for outgoing packets (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4495\"\u003e#4495\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/183e947e753c6bdd1a0c1d2db84ed6ae2e3000af\"\u003e183e947\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.24.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.4...v3.24.0\"\u003e3.24.0\u003c/a\u003e (2026-08-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etyped parameters, and adopt integer types the server reports (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4488\"\u003e#4488\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8ec20f1fa6348b2edd2402e9b7f301d99e2b9b98\"\u003e8ec20f1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ezero dates come back as \u0026quot;undefined 00:00:00\u0026quot; with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4491\"\u003e#4491\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5bf7bda73cca5bbea4cdcd27ad8223a10ae41ecf\"\u003e5bf7bda\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/blob/master/Changelog.md\"\u003emysql2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.3...v3.24.4\"\u003e3.24.4\u003c/a\u003e (2026-09-07)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eper-query overhead, local dates, short strings, TLS context and compression (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4522\"\u003e#4522\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e2387daf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ereuse TLS sessions across connections to the same server (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4529\"\u003e#4529\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/9178c824cf4a7c04c0e04b0586661c56b694056f\"\u003e9178c82\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.2...v3.24.3\"\u003e3.24.3\u003c/a\u003e (2026-09-01)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypings:\u003c/strong\u003e PoolCluster node events emit a string nodeId (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4513\"\u003e#4513\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1281e1eab672b2bde0b859efa38be5ed5a6946a5\"\u003e1281e1e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.1...v3.24.2\"\u003e3.24.2\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecorrect length-coded number size for the 3-byte range (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4500\"\u003e#4500\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/de5627288bc76be4ec92a8f08796b2814d26e8aa\"\u003ede56272\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epromise:\u003c/strong\u003e honour \u003ccode\u003etrace: false\u003c/code\u003e on every promise-API method (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4502\"\u003e#4502\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1dcd8efe6c2a7079d3cc1db92e7a94008b7ed5b9\"\u003e1dcd8ef\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4501\"\u003e#4501\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.24.0...v3.24.1\"\u003e3.24.1\u003c/a\u003e (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esingle-pass utf8 string encoding for outgoing packets (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4495\"\u003e#4495\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/183e947e753c6bdd1a0c1d2db84ed6ae2e3000af\"\u003e183e947\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.4...v3.24.0\"\u003e3.24.0\u003c/a\u003e (2026-08-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003etyped parameters, and adopt integer types the server reports (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4488\"\u003e#4488\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8ec20f1fa6348b2edd2402e9b7f301d99e2b9b98\"\u003e8ec20f1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ezero dates come back as \u0026quot;undefined 00:00:00\u0026quot; with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4491\"\u003e#4491\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5bf7bda73cca5bbea4cdcd27ad8223a10ae41ecf\"\u003e5bf7bda\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eremove per-query and per-row allocation hotspots (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4486\"\u003e#4486\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/c86fe5a721048a5419e775e3d6ce2defec14a774\"\u003ec86fe5a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eserialize COM_STMT_EXECUTE in a single exact-size pass (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4494\"\u003e#4494\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/f3a60bca1f1b29634e8956116784bfd6e0ab2db6\"\u003ef3a60bc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.3...v3.23.4\"\u003e3.23.4\u003c/a\u003e (2026-08-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a87208ac5d2888a864544c93b6a85d007fb3e2c2\"\u003e\u003ccode\u003ea87208a\u003c/code\u003e\u003c/a\u003e chore(master): release 3.24.4 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4530\"\u003e#4530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e5833be68381370811e9cf8c99bdd22825d97ef4\"\u003e\u003ccode\u003ee5833be\u003c/code\u003e\u003c/a\u003e chore: prepare \u003ccode\u003esrc\u003c/code\u003e for parallel TypeScript transcription (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4538\"\u003e#4538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5f6482fbff089471ea278394a36644136530fbd8\"\u003e\u003ccode\u003e5f6482f\u003c/code\u003e\u003c/a\u003e build(deps): bump sass from 1.103.1 to 1.104.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4537\"\u003e#4537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8e0bd84a1189fac693657235437231a8d005dfe4\"\u003e\u003ccode\u003e8e0bd84\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.38.0 to 1.41.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4536\"\u003e#4536\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/8b8a9cb0146a426214d107305339b26fb4e2fe9c\"\u003e\u003ccode\u003e8b8a9cb\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 26.4.0 to 26.4.1 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4535\"\u003e#4535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/83854a60ada982a906bac5f4e9ebc93790d659c4\"\u003e\u003ccode\u003e83854a6\u003c/code\u003e\u003c/a\u003e build(deps): bump docusaurus-plugin-sass (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4534\"\u003e#4534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2e9d75ac196bd0fa60eba64c28c85ef49e385285\"\u003e\u003ccode\u003e2e9d75a\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​biomejs/biome\u003c/code\u003e from 2.5.11 to 2.5.12 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4533\"\u003e#4533\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/d6f41729b74bd7a6d9ab3e94f1d940716146b48c\"\u003e\u003ccode\u003ed6f4172\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump \u003ccode\u003e@​types/node\u003c/code\u003e from 26.4.0 to 26.4.1 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4532\"\u003e#4532\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2e1c9e064c348c266fc80bd684893e7c4ed16d7c\"\u003e\u003ccode\u003e2e1c9e0\u003c/code\u003e\u003c/a\u003e build(deps): bump lru.min from 1.1.4 to 1.1.5 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4531\"\u003e#4531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2387daf8dc8403783f4238aef4ba22e103cc2fec\"\u003e\u003ccode\u003e2387daf\u003c/code\u003e\u003c/a\u003e perf: per-query overhead, local dates, short strings, TLS context and compres...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.15.3...v3.24.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mysql2 since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `seroval` from 1.6.2 to 1.7.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lxsmnsyc/seroval/releases\"\u003eseroval's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eseroval-plugins@1.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e2d03651: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now throw when the value contains an async iterable or a \u003ccode\u003eReadableStream\u003c/code\u003e, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval@1.7.1\u003c/h2\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eb703710: \u003ccode\u003ecreateCrossDeserializer\u003c/code\u003e no longer causes unhandled rejections. This covers a rejected promise that the caller never reads, and a pending promise that \u003ccode\u003eabort\u003c/code\u003e rejects. Code that awaits the promise still gets the rejection.\u003c/li\u003e\n\u003cli\u003e2d03651: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now throw when the value contains an async iterable or a \u003ccode\u003eReadableStream\u003c/code\u003e, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.\u003c/li\u003e\n\u003cli\u003e2c25bf3: \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e, \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003etoCrossJSON\u003c/code\u003e now send a \u003ccode\u003ecreateStream\u003c/code\u003e stream that has ended with all its events. A stream that is still open, or a live stream, now throws. Before, they sent an empty stream that never ended.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval-plugins@1.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e4c0008f: Add \u003ccode\u003ecreateLiveStream()\u003c/code\u003e, a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. \u003ccode\u003ecrossSerializeStream\u003c/code\u003e and \u003ccode\u003etoCrossJSONStream\u003c/code\u003e callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, \u003ccode\u003eonDone\u003c/code\u003e waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and \u003ccode\u003eReadableStream\u003c/code\u003e values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.\u003c/li\u003e\n\u003cli\u003ef2b7d0c: Raise the supported Node.js floor from \u003ccode\u003e\u0026gt;=10\u003c/code\u003e to \u003ccode\u003e\u0026gt;=20\u003c/code\u003e in \u003ccode\u003eengines\u003c/code\u003e, remove the no-op \u003ccode\u003etypesVersions\u003c/code\u003e from seroval, give seroval-plugins \u003ccode\u003emain\u003c/code\u003e, \u003ccode\u003emodule\u003c/code\u003e and \u003ccode\u003etypes\u003c/code\u003e fields plus a \u003ccode\u003etypesVersions\u003c/code\u003e entry that points at the emitted \u003ccode\u003eweb\u003c/code\u003e declarations, and link the plugins package to the workspace copy of seroval.\u003c/li\u003e\n\u003cli\u003e5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ec643404: The documentation moved to \u003ca href=\"https://seroval.vercel.app\"\u003ehttps://seroval.vercel.app\u003c/a\u003e. The READMEs and the package homepages now link to it.\u003c/li\u003e\n\u003cli\u003ea1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows \u003ccode\u003eengines.node\u003c/code\u003e, keeping nullish coalescing and optional chaining as written.\u003c/li\u003e\n\u003cli\u003ebe1f32b: Improve tree shaking of web namespace imports in ESM builds while preserving the CommonJS export shape.\u003c/li\u003e\n\u003cli\u003e90e8f73: The web plugins that match instances of a built-in class, such as \u003ccode\u003eURL\u003c/code\u003e, \u003ccode\u003eBlob\u003c/code\u003e and \u003ccode\u003eHeaders\u003c/code\u003e, now set \u003ccode\u003eskipPlainObjects\u003c/code\u003e. With a seroval version that supports it, serializing plain objects with these plugins is faster.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eseroval@1.7.0\u003c/h2\u003e\n\u003ch3\u003eMinor Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e9a75aae: Add the \u003ccode\u003eassignSharedRefsOnly\u003c/code\u003e option to \u003ccode\u003ecrossSerialize\u003c/code\u003e and \u003ccode\u003ecrossSerializeAsync\u003c/code\u003e. It stores only the values the output reads more than once in \u003ccode\u003e$R\u003c/code\u003e, which makes shorter output when no later script refers back to it.\u003c/li\u003e\n\u003cli\u003ef3f39de: Add \u003ccode\u003ecreateCrossDeserializer\u003c/code\u003e, a session for cross-reference JSON records that tracks unsettled promises and open streams, reports how many are still pending, and can abort them with a caller-supplied reason when the transport fails.\u003c/li\u003e\n\u003cli\u003e2324090: Streams serialized from a live stream in streaming mode are rebuilt with a live receiver: it keeps history only until its first listener subscribes, then forwards each value without retaining it and refuses a second listener. Replay streams and existing serialized data are unchanged, and readers that ignore the marker build a replay receiver.\u003c/li\u003e\n\u003cli\u003e4c0008f: Add \u003ccode\u003ecreateLiveStream()\u003c/code\u003e, a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. \u003ccode\u003ecrossSerializeStream\u003c/code\u003e and \u003ccode\u003etoCrossJSONStream\u003c/code\u003e callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, \u003ccode\u003eonDone\u003c/code\u003e waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and \u003ccode\u003eReadableStream\u003c/code\u003e values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.\u003c/li\u003e\n\u003cli\u003ef2b7d0c: Raise the supported Node.js floor from \u003ccode\u003e\u0026gt;=10\u003c/code\u003e to \u003ccode\u003e\u0026gt;=20\u003c/code\u003e in \u003ccode\u003eengines\u003c/code\u003e, remove the no-op \u003ccode\u003etypesVersions\u003c/code\u003e from seroval, give seroval-plugins \u003ccode\u003emain\u003c/code\u003e, \u003ccode\u003emodule\u003c/code\u003e and \u003ccode\u003etypes\u003c/code\u003e fields plus a \u003ccode\u003etypesVersions\u003c/code\u003e entry that points at the emitted \u003ccode\u003eweb\u003c/code\u003e declarations, and link the plugins package to the workspace copy of seroval.\u003c/li\u003e\n\u003cli\u003e8a95987: Add the optional \u003ccode\u003eskipPlainObjects\u003c/code\u003e plugin field. A plugin that sets it to \u003ccode\u003etrue\u003c/code\u003e is not tested against plain objects, which makes parsing faster when most values are plain objects.\u003c/li\u003e\n\u003cli\u003e5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePatch Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e6d92c38: - Export \u003ccode\u003eSerializeOptions\u003c/code\u003e, \u003ccode\u003eSerializeAsyncOptions\u003c/code\u003e, \u003ccode\u003eToJSONOptions\u003c/code\u003e and \u003ccode\u003eToJSONAsyncOptions\u003c/code\u003e, the option types of \u003ccode\u003eserialize\u003c/code\u003e, \u003ccode\u003eserializeAsync\u003c/code\u003e, \u003ccode\u003etoJSON\u003c/code\u003e and \u003ccode\u003etoJSONAsync\u003c/code\u003e.\n\u003cul\u003e\n\u003cli\u003eMark \u003ccode\u003eFeature.ArrowFunction\u003c/code\u003e and \u003ccode\u003eSerovalMissingReferenceError\u003c/code\u003e as deprecated. Neither has any effect.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e8b4214f: Reuse the resolved plugin list when the same \u003ccode\u003eplugins\u003c/code\u003e array is passed again, so each call no longer rebuilds it.\u003c/li\u003e\n\u003cli\u003eb7edc16: Create leaf nodes with only their \u003ccode\u003et\u003c/code\u003e, \u003ccode\u003ei\u003c/code\u003e and \u003ccode\u003es\u003c/code\u003e fields, cutting tree memory for primitive-heavy payloads.\u003c/li\u003e\n\u003cli\u003edcf9a69: Report the depth limit error with its own error code.\u003c/li\u003e\n\u003cli\u003ee118511: Derive the well-known symbol name and lookup tables and the error constructor names from their single source tables.\u003c/li\u003e\n\u003cli\u003e1e13e04: Avoid temporary reference lookup wrappers in the parsers and resolve named references with one registry lookup.\u003c/li\u003e\n\u003cli\u003ec643404: The documentation moved to \u003ca href=\"https://seroval.vercel.app\"\u003ehttps://seroval.vercel.app\u003c/a\u003e. The READMEs and the package homepages now link to it.\u003c/li\u003e\n\u003cli\u003e3234e88: Honor \u003ccode\u003edepthLimit\u003c/code\u003e in every serializer entry point and in \u003ccode\u003efromJSON\u003c/code\u003e, wrap failures raised while emitting output in \u003ccode\u003eSerovalSerializationError\u003c/code\u003e, and report a node id that is assigned twice with \u003ccode\u003eSerovalConflictedNodeIdError\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003ea1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows \u003ccode\u003eengines.node\u003c/code\u003e, keeping nullish coalescing and optional chaining as written.\u003c/li\u003e\n\u003cli\u003e3b49dc3: Inline feature bits inside the library with an internal \u003ccode\u003econst enum\u003c/code\u003e. The exported \u003ccode\u003eFeature\u003c/code\u003e enum is unchanged.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/lxsmnsyc/seroval/commits/seroval@1.7.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for seroval since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad4...\n\n_Description has been truncated_","html_url":"https://github.com/Hellthefox808/NCC-CRM-V1.0/pull/29","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hellthefox808%2FNCC-CRM-V1.0/issues/29","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/29/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-22T23:58:58.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5989399902","node_id":"PR_kwDOOwehI88AAAABKJQHeA","number":112,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-23T04:34:19.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-22T23:58:58.000Z","updated_at":"2026-10-23T04:34:19.000Z","time_to_close":16521,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":5,"packages":[{"name":"@vitest/mocker","old_version":"4.1.8","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"follow-redirects","old_version":"1.16.0","new_version":"1.16.1","repository_url":"https://github.com/follow-redirects/follow-redirects"},{"name":"hono","old_version":"4.13.7","new_version":"4.13.13","repository_url":"https://github.com/honojs/hono"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.8` | `5.0.5` |\n| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |\n| [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.13` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n\n\nUpdates `@vitest/mocker` from 4.1.8 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `follow-redirects` from 1.16.0 to 1.16.1\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e\"\u003e\u003ccode\u003e4630125\u003c/code\u003e\u003c/a\u003e Release version 1.16.1 of the npm package.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff\"\u003e\u003ccode\u003e9865ca4\u003c/code\u003e\u003c/a\u003e Support key/value header arrays.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8\"\u003e\u003ccode\u003e080a76d\u003c/code\u003e\u003c/a\u003e Escape all RegExp modifiers.\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `hono` from 4.13.7 to 4.13.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/honojs/hono/releases\"\u003ehono's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.13.13\u003c/h2\u003e\n\u003ch2\u003eMount Middleware\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e is now available as the Mount Middleware, \u003ccode\u003ehono/mount\u003c/code\u003e. It is just a handler, so you register it with \u003ccode\u003eapp.all()\u003c/code\u003e:\u003c/p\u003e\n\u003cpre lang=\"ts\"\u003e\u003ccode\u003eimport { Router as IttyRouter } from 'itty-router'\r\nimport { Hono } from 'hono'\r\nimport { mount } from 'hono/mount'\r\n\u003cp\u003econst ittyRouter = IttyRouter()\u003cbr /\u003e\nittyRouter.get('/hello', () =\u0026gt; new Response('Hello from itty-router'))\u003c/p\u003e\n\u003cp\u003econst app = new Hono()\u003cbr /\u003e\napp.all('/itty-router/*', mount(ittyRouter.handle))\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eapp.mount()\u003c/code\u003e still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:\u003c/p\u003e\n\u003cpre lang=\"diff\"\u003e\u003ccode\u003e- app.mount('/itty-router', ittyRouter.handle)\r\n+ app.all('/itty-router/*', mount(ittyRouter.handle))\r\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest(client): simulate network error for undefined route in parseResponse test in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5439\"\u003ehonojs/hono#5439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs(request): fix jsdoc comments for some getters in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5445\"\u003ehonojs/hono#5445\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): allow JSXNode function component results in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5476\"\u003ehonojs/hono#5476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5221\"\u003ehonojs/hono#5221\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.12...v4.13.13\"\u003ehttps://github.com/honojs/hono/compare/v4.13.12...v4.13.13\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.12\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(build): keep internal types private in bundled d.ts and avoid a self-referencing JSX.IntrinsicElements in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5485\"\u003ehonojs/hono#5485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest(build): type-check the bundled declarations from a consumer project in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5486\"\u003ehonojs/hono#5486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(etag): correctly match mixed-case header name in retainedHeader option in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5475\"\u003ehonojs/hono#5475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5487\"\u003ehonojs/hono#5487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(combine): return a Response from a short-circuiting middleware in some() in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5391\"\u003ehonojs/hono#5391\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): upgrade vite-plus to 1.0.0 in \u003ca href=\"https://redirect.github.com/honojs/hono/pull/5464\"\u003ehonojs/hono#5464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.11...v4.13.12\"\u003ehttps://github.com/honojs/hono/compare/v4.13.11...v4.13.12\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.13.11\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003ch3\u003e\u003ccode\u003eserveStatic\u003c/code\u003e decodes the request path a second time, leading to bypass of middleware on static paths\u003c/h3\u003e\n\u003cp\u003eAffects: \u003ccode\u003ehono/serve-static\u003c/code\u003e and the adapters built on it (\u003ccode\u003ehono/bun\u003c/code\u003e, \u003ccode\u003ehono/deno\u003c/code\u003e, \u003ccode\u003ehono/cloudflare-workers\u003c/code\u003e, \u003ccode\u003e@hono/bun\u003c/code\u003e, \u003ccode\u003e@hono/deno\u003c/code\u003e, \u003ccode\u003e@hono/cloudflare-workers\u003c/code\u003e). Fixes \u003ccode\u003eserveStatic\u003c/code\u003e decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-5r4p-p66f-jhc7\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/08a023cbfde55b434fb0fb30fae35d42e4bf20aa\"\u003e\u003ccode\u003e08a023c\u003c/code\u003e\u003c/a\u003e 4.13.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/ae595de8ae05ea548560da93140ee1d53e5a8202\"\u003e\u003ccode\u003eae595de\u003c/code\u003e\u003c/a\u003e feat(mount): introduce Mount Middleware and deprecate \u003ccode\u003eapp.mount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5221\"\u003e#5221\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/f23b146afcec63606144cde50b5fbd360dd60238\"\u003e\u003ccode\u003ef23b146\u003c/code\u003e\u003c/a\u003e fix(jsx): allow JSXNode function component results (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5476\"\u003e#5476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6d73a74f9757ed65d6103c0e8375097fa20873c4\"\u003e\u003ccode\u003e6d73a74\u003c/code\u003e\u003c/a\u003e docs(request): fix jsdoc comments for some getters (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5445\"\u003e#5445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/deff529656cff775b35956f7f9071388d4eb55ae\"\u003e\u003ccode\u003edeff529\u003c/code\u003e\u003c/a\u003e test(client): simulate network error for undefined route in parseResponse tes...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/6abd35b0a5f35f67b6417627d5b0a6c2d266ac04\"\u003e\u003ccode\u003e6abd35b\u003c/code\u003e\u003c/a\u003e 4.13.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/95eb860473d26bd303a2a29716e61a77c8c5e5f5\"\u003e\u003ccode\u003e95eb860\u003c/code\u003e\u003c/a\u003e chore(deps): upgrade vite-plus to 1.0.0 (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5464\"\u003e#5464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/afb2068c1c53a530528ac5f237e245793dd03c07\"\u003e\u003ccode\u003eafb2068\u003c/code\u003e\u003c/a\u003e fix(combine): return a Response from a short-circuiting middleware in some() ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/e5bb2062a3ddd645e3a16d1300bd76d6c9af33a5\"\u003e\u003ccode\u003ee5bb206\u003c/code\u003e\u003c/a\u003e fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap (\u003ca href=\"https://redirect.github.com/honojs/hono/issues/5487\"\u003e#5487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/honojs/hono/commit/c3053ccf14f1c4c70a0c2888eed6121b9f6c8f95\"\u003e\u003ccode\u003ec3053cc\u003c/code\u003e\u003c/a\u003e fix(etag): correctly match mixed-case header name in retainedHeader option (#...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/honojs/hono/compare/v4.13.7...v4.13.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.2.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/taskade/mcp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/taskade/mcp/pull/112","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskade%2Fmcp/issues/112","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/112/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-21T00:08:11.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5951802197","node_id":"PR_kwDOVDNqcs8AAAABJrQhTw","number":3,"state":"closed","title":"chore(deps): bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-21T03:18:18.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-21T00:08:11.000Z","updated_at":"2026-10-21T03:18:28.000Z","time_to_close":11407,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MaxRink/immich/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/MaxRink/immich/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/MaxRink%2Fimmich/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"1.8.1","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-20T17:27:56.000Z","version_change":"1.8.1 → 1.12.0","issue":{"uuid":"5946381114","node_id":"PR_kwDOJR_33c8AAAABJm4Z-A","number":2,"state":"open","title":"Bump shell-quote from 1.8.1 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-20T17:27:56.000Z","updated_at":"2026-10-20T17:31:03.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"shell-quote","old_version":"1.8.1","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.8.1...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.8.1\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/b-khadija/NetflixApp/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/b-khadija/NetflixApp/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/b-khadija%2FNetflixApp/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.8.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T14:52:06.000Z","version_change":"1.8.0 → 1.12.0","issue":{"uuid":"5910774544","node_id":"PR_kwDOTziLxc8AAAABJKoAiQ","number":2,"state":"open","title":"build(deps): Bump the npm_and_yarn group across 1 directory with 15 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T14:52:06.000Z","updated_at":"2026-10-18T14:52:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","group_name":"npm_and_yarn","update_count":15,"packages":[{"name":"js-yaml","old_version":"3.14.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"body-parser","old_version":"1.20.1","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.11","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.21.5","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"http-cache-semantics","old_version":"4.1.1","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.8.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"moment","old_version":"2.29.4","new_version":"2.31.0","repository_url":"https://github.com/moment/moment"},{"name":"nanoid","old_version":"3.3.4","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.11.0","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.8.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"socket.io-parser","old_version":"4.2.2","new_version":"4.2.7","repository_url":"https://github.com/socketio/socket.io"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"},{"name":"svgo","old_version":"2.8.0","new_version":"2.8.4","repository_url":"https://github.com/svg/svgo"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 15 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.2` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.1` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.21.5` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.1` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.8.3` | `17.13.8` |\n| [moment](https://github.com/moment/moment) | `2.29.4` | `2.31.0` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.4` | `3.3.20` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.11.0` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.0` | `1.12.0` |\n| [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.2` | `4.2.7` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n| [svgo](https://github.com/svg/svgo) | `2.8.0` | `2.8.4` |\n\n\nUpdates `js-yaml` from 3.14.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/ab85ae2c622bc6d8cdbceccafe9f9b7df80463ed\"\u003e\u003ccode\u003eab85ae2\u003c/code\u003e\u003c/a\u003e 3.15.1 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/30a5e7647a4454f7bac969bfbbe7eac9921a4279\"\u003e\u003ccode\u003e30a5e76\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded\"\u003e\u003ccode\u003e22a8071\u003c/code\u003e\u003c/a\u003e Backport quadratic complexity fix for !!omap\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54\"\u003e\u003ccode\u003ec34b6c4\u003c/code\u003e\u003c/a\u003e 3.15.0 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72\"\u003e\u003ccode\u003e21e13d3\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c\"\u003e\u003ccode\u003e4165c62\u003c/code\u003e\u003c/a\u003e Add v3-legacy tag for publish\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.14.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.1 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.1...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.11 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.1.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003epkg: publish on tag 1.x  c460dbd\u003c/li\u003e\n\u003cli\u003efmt  ccb8ac6\u003c/li\u003e\n\u003cli\u003eFix potential ReDoS Vulnerability or Inefficient Regular Expression (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/65\"\u003e#65\u003c/a\u003e)  c3c73c8\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.21.5 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.21.5...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.1.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.8.3 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/850be1ee24be8d548bb09359bdb0cf9fe41635ff\"\u003e\u003ccode\u003e850be1e\u003c/code\u003e\u003c/a\u003e 17.13.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/9faeecc48b18ec40e3881467645ae9074f0dfa3c\"\u003e\u003ccode\u003e9faeecc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3139\"\u003e#3139\u003c/a\u003e from hapijs/chore/backport-messages-proto\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/8d0b808f3e874d28f9078f61b7742290989afb36\"\u003e\u003ccode\u003e8d0b808\u003c/code\u003e\u003c/a\u003e fix: prevent messages proto injection\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.8.3...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `moment` from 2.29.4 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/releases\"\u003emoment's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.30.1\u003c/h2\u003e\n\u003cp\u003eNote - this was not a new release, but rather just updating GitHub's \u003ccode\u003elatest\u003c/code\u003e release to indicate the existing version \u003ccode\u003e2.30.1\u003c/code\u003e from Dec 27, 2023.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/moment/moment/blob/develop/CHANGELOG.md\"\u003emoment's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.31.0\u003c/h3\u003e\n\u003cp\u003e\u003cem\u003eReleased Sep 14, 2026\u003c/em\u003e\u003c/p\u003e\n\u003ch4\u003eSecurity fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-17495\"\u003eCVE-2026-17495\u003c/a\u003e (\u003ca href=\"https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw\"\u003eGHSA-4p3w-j4w9-5jqw\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eBug fixes\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6376\"\u003e#6376\u003c/a\u003e Prevent object prototype properties from being used as format tokens\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6386\"\u003e#6386\u003c/a\u003e Normalize lazy-loaded locale names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6404\"\u003e#6404\u003c/a\u003e Fix parsing issue with \u003ccode\u003eeHHmm\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6433\"\u003e#6433\u003c/a\u003e Ignore non-Moment arguments in min and max\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6434\"\u003e#6434\u003c/a\u003e Fix inherited lowercase long date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6436\"\u003e#6436\u003c/a\u003e Reset locale parsing caches after updates\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6437\"\u003e#6437\u003c/a\u003e Fix weekday mismatch when the format only has part of a date\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6442\"\u003e#6442\u003c/a\u003e Fix \u003ccode\u003elocale('__proto__')\u003c/code\u003e corrupting the global locale\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6443\"\u003e#6443\u003c/a\u003e Avoid \u003ccode\u003eObject.assign\u003c/code\u003e in \u003ccode\u003eduration.humanize\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6446\"\u003e#6446\u003c/a\u003e Validate range when parsing a time zone offset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6447\"\u003e#6447\u003c/a\u003e Include metadata in all-locales bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6448\"\u003e#6448\u003c/a\u003e Apply postformat to locale relative time methods\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6450\"\u003e#6450\u003c/a\u003e Add stack traces to conditional deprecation warnings\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eNew features\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6451\"\u003e#6451\u003c/a\u003e Add internal date-default hook for Moment Timezone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eNew locales\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6000\"\u003e#6000\u003c/a\u003e: Pashto ('ps')\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6278\"\u003e#6278\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/moment/moment/pull/6379\"\u003e#6379\u003c/a\u003e: Amharic (Ethiopia) ('am-et')\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eUpdates to existing locales\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/5404\"\u003e#5404\u003c/a\u003e Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6197\"\u003e#6197\u003c/a\u003e Indonesian ('id'): Correct the abbreviation for August\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6217\"\u003e#6217\u003c/a\u003e Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct \u003ccode\u003eL\u003c/code\u003e date formats\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6289\"\u003e#6289\u003c/a\u003e Swedish ('sv'): Correct the abbreviation for Thursday\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6306\"\u003e#6306\u003c/a\u003e Catalan ('ca'): Use typographic apostrophes in relative time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6347\"\u003e#6347\u003c/a\u003e Swahili ('sw'): Correct the spelling of hour in calendar output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6360\"\u003e#6360\u003c/a\u003e Ukrainian ('uk'): Use ISO week numbering\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6370\"\u003e#6370\u003c/a\u003e Ukrainian ('uk'): Use U+02BC apostrophes in Friday names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6371\"\u003e#6371\u003c/a\u003e Hungarian ('hu'): Preserve numeric values in relative seconds\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6391\"\u003e#6391\u003c/a\u003e Swahili ('sw'): Fix weekday and relative-time grammar\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6396\"\u003e#6396\u003c/a\u003e German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6409\"\u003e#6409\u003c/a\u003e Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/moment/moment/pull/6410\"\u003e#6410\u003c/a\u003e Polish ('pl'): Use genitive month names in dotted day formats\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.30.1\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/15b45d48a176312e8f34143c5a800090abf4787f\"\u003e\u003ccode\u003e15b45d4\u003c/code\u003e\u003c/a\u003e [pkg] Build 2.31.0 (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6452\"\u003e#6452\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/631cd81454ee001e1f508e21270eae0b6bb62974\"\u003e\u003ccode\u003e631cd81\u003c/code\u003e\u003c/a\u003e [pkg] Update changelog for upcoming release (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6394\"\u003e#6394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/6caff9e0d54e85a63a6eb97d7361f1da35bc58f4\"\u003e\u003ccode\u003e6caff9e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/710703b7eac93535ad125cbf4feb3d42afed6fb3\"\u003e\u003ccode\u003e710703b\u003c/code\u003e\u003c/a\u003e [feature] Add internal date-default hook for Moment Timezone (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6451\"\u003e#6451\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/863ed940556e6e63c43de23981a4853036a003ac\"\u003e\u003ccode\u003e863ed94\u003c/code\u003e\u003c/a\u003e [bugfix] Add stack traces to conditional deprecation warnings (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6450\"\u003e#6450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/2c7abe1c42ee15445d30c2c5d536750a1e43a09a\"\u003e\u003ccode\u003e2c7abe1\u003c/code\u003e\u003c/a\u003e [bugfix] Apply postformat to locale relative time methods (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6448\"\u003e#6448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/9c45ac38690c649c95e19923276b63da5fe2be26\"\u003e\u003ccode\u003e9c45ac3\u003c/code\u003e\u003c/a\u003e [bugfix] Include metadata in all-locales bundle (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6447\"\u003e#6447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/f6eefc5fc7b44ceccbd007aeffc48ebc5eac30fa\"\u003e\u003ccode\u003ef6eefc5\u003c/code\u003e\u003c/a\u003e [bugfix] Validate timezone offset range (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6446\"\u003e#6446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/136b441794a3bb207d593add3b59e9de0e062523\"\u003e\u003ccode\u003e136b441\u003c/code\u003e\u003c/a\u003e [bugfix] Avoid Object.assign in duration.humanize (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6443\"\u003e#6443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/moment/moment/commit/0d1050437b40f66ac47e14b285bb3d09676cf2e0\"\u003e\u003ccode\u003e0d10504\u003c/code\u003e\u003c/a\u003e [bugfix] Fix locale('\u003cstrong\u003eproto\u003c/strong\u003e') corrupting the global locale (\u003ca href=\"https://redirect.github.com/moment/moment/issues/6442\"\u003e#6442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/moment/moment/compare/2.29.4...2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for moment since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nanoid` from 3.3.4 to 3.3.20\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/releases\"\u003enanoid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ai/nanoid/blob/main/CHANGELOG.md\"\u003enanoid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.3.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/johnemau\"\u003e\u003ccode\u003e@​johnemau\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed killing the app by setting huge user ID (by \u003ca href=\"https://github.com/geoffrey-diederichs\"\u003e\u003ccode\u003e@​geoffrey-diederichs\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on async for React Native (by \u003ca href=\"https://github.com/OvergrowthBeards-JB\"\u003e\u003ccode\u003e@​OvergrowthBeards-JB\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on zero size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed infinite loop on negative size (by \u003ca href=\"https://github.com/greymoth-jp\"\u003e\u003ccode\u003e@​greymoth-jp\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed npm provenance error.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.14\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed random pool corruption on big ID sizes.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.13\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.12\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed breaking Nano ID by requesting big ID.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.11\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed React Native support (by \u003ca href=\"https://github.com/steida\"\u003e\u003ccode\u003e@​steida\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduced npm package size.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.3.8\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/d76f633e0201c1299d735a6544c4c4a05c882f0b\"\u003e\u003ccode\u003ed76f633\u003c/code\u003e\u003c/a\u003e Release 3.3.20 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/ac09ff646dd64de1d03827c288ce30bb26c4315c\"\u003e\u003ccode\u003eac09ff6\u003c/code\u003e\u003c/a\u003e Fix: async return types are synchronous in v3 (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/615\"\u003e#615\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/eb63bd6775188dc35d143bf24868be094f19b5ee\"\u003e\u003ccode\u003eeb63bd6\u003c/code\u003e\u003c/a\u003e Release 3.3.19 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9067e0361a643ab2c94ddd67606efbf275f6c0dd\"\u003e\u003ccode\u003e9067e03\u003c/code\u003e\u003c/a\u003e Sync CJS and ESM\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9ad98052b316c5e707f8098ace509d2ae165e54d\"\u003e\u003ccode\u003e9ad9805\u003c/code\u003e\u003c/a\u003e Release 3.3.18 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/55e50a0621ec084b4bb4000ea4e86e1191bd3da8\"\u003e\u003ccode\u003e55e50a0\u003c/code\u003e\u003c/a\u003e Update CI action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0\"\u003e\u003ccode\u003ee10f8d4\u003c/code\u003e\u003c/a\u003e Update index.native.js (\u003ca href=\"https://redirect.github.com/ai/nanoid/issues/606\"\u003e#606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/73d67168136b36fd3b644159b0cff149da4905d9\"\u003e\u003ccode\u003e73d6716\u003c/code\u003e\u003c/a\u003e Release 3.3.17 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b\"\u003e\u003ccode\u003ef9d13f1\u003c/code\u003e\u003c/a\u003e Sync 0 size behaviour with PostCSS 5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ai/nanoid/commit/9760e112757cf7d46a79abd7a133bc4958757bb8\"\u003e\u003ccode\u003e9760e11\u003c/code\u003e\u003c/a\u003e Release 3.3.16 version\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ai/nanoid/compare/3.3.4...3.3.20\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for nanoid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.11.0 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.15.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e for cumulative array growth via \u003ccode\u003ecombine\u003c/code\u003e/\u003ccode\u003emerge\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: respect encoding of surrogate pairs across chunks (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/559\"\u003e#559\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: throw the \u003ccode\u003earrayLimit\u003c/code\u003e error before splitting oversized comma values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils.merge\u003c/code\u003e / \u003ccode\u003eutils.assign\u003c/code\u003e: avoid invoking \u003ccode\u003e__proto__\u003c/code\u003e setter when copying own properties\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e consistently across \u003ccode\u003emerge\u003c/code\u003e's array paths\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003eutils\u003c/code\u003e: make \u003ccode\u003ecompact\u003c/code\u003e O(n) via a side-channel visited-set instead of \u003ccode\u003eArray.indexOf\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize current lenient handling of unbalanced bracket keys (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/558\"\u003e#558\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d2...\n\n_Description has been truncated_","html_url":"https://github.com/Sawsqr68/nodejs.dev/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sawsqr68%2Fnodejs.dev/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.9.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T13:00:36.000Z","version_change":"1.9.0 → 1.12.0","issue":{"uuid":"5909779433","node_id":"PR_kwDOSlhZuc8AAAABJJ3NKw","number":14,"state":"closed","title":"chore(deps): bump shell-quote and concurrently","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-20T09:59:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-18T13:00:36.000Z","updated_at":"2026-10-20T09:59:02.000Z","time_to_close":161904,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","repository_url":"https://github.com/ljharb/shell-quote","old_version":"1.9.0","new_version":"1.12.0"},{"name":"concurrently","repository_url":"https://github.com/open-cli-tools/concurrently","old_version":"10.0.5","new_version":"10.0.6"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.12.0 and updates ancestor dependency [concurrently](https://github.com/open-cli-tools/concurrently). These dependencies need to be updated together.\n\nUpdates `shell-quote` from 1.9.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0\"\u003ev1.10.0\u003c/a\u003e - 2026-07-10\u003c/h2\u003e\n\u003ch3\u003eMerged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add opt-in \u003ccode\u003esplitUnquoted\u003c/code\u003e option for shell field-splitting of unquoted expansions \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/pull/1\"\u003e\u003ccode\u003e[#1](https://github.com/ljharb/shell-quote/issues/1)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: match nested \u003ccode\u003e${...}\u003c/code\u003e braces so nested parameter expansion is consumed as one substitution \u003ca href=\"https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c\"\u003e\u003ccode\u003ec0842c8\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: pin single-quote literalness and unmatched-quote handling \u003ca href=\"https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62\"\u003e\u003ccode\u003ea0d03e3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `concurrently` from 10.0.5 to 10.0.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-cli-tools/concurrently/releases\"\u003econcurrently's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev10.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: update issue link to the transferred repo path by \u003ca href=\"https://github.com/yzxcj797\"\u003e\u003ccode\u003e@​yzxcj797\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/609\"\u003eopen-cli-tools/concurrently#609\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update API example to ESM by \u003ca href=\"https://github.com/Bibin-VR\"\u003e\u003ccode\u003e@​Bibin-VR\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/611\"\u003eopen-cli-tools/concurrently#611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: skip force-kill logging when no processes remain by \u003ca href=\"https://github.com/imshunsuke\"\u003e\u003ccode\u003e@​imshunsuke\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/616\"\u003eopen-cli-tools/concurrently#616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: update shell-quote to 1.12.0 by \u003ca href=\"https://github.com/Abicodexi\"\u003e\u003ccode\u003e@​Abicodexi\u003c/code\u003e\u003c/a\u003e and \u003ca href=\"https://github.com/Mayvis\"\u003e\u003ccode\u003e@​Mayvis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/622\"\u003eopen-cli-tools/concurrently#622\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yzxcj797\"\u003e\u003ccode\u003e@​yzxcj797\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/609\"\u003eopen-cli-tools/concurrently#609\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Bibin-VR\"\u003e\u003ccode\u003e@​Bibin-VR\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/611\"\u003eopen-cli-tools/concurrently#611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imshunsuke\"\u003e\u003ccode\u003e@​imshunsuke\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/616\"\u003eopen-cli-tools/concurrently#616\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Abicodexi\"\u003e\u003ccode\u003e@​Abicodexi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/pull/622\"\u003eopen-cli-tools/concurrently#622\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\"\u003ehttps://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/d84bab65cbfdd8406a457787f71075b31bd6ff3f\"\u003e\u003ccode\u003ed84bab6\u003c/code\u003e\u003c/a\u003e 10.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/d26574e3ab0d831be634b4089a5b4680ba22cd6e\"\u003e\u003ccode\u003ed26574e\u003c/code\u003e\u003c/a\u003e deps: update shell-quote to 1.12.0 (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/13bdff120b52794e5528a185d45bbd96e56e4bf6\"\u003e\u003ccode\u003e13bdff1\u003c/code\u003e\u003c/a\u003e fix: skip force-kill logging when no processes remain (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/b2580cc75389817e19afac2b66fc05ae151e3300\"\u003e\u003ccode\u003eb2580cc\u003c/code\u003e\u003c/a\u003e docs: update API example to ESM (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/611\"\u003e#611\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-cli-tools/concurrently/commit/3159edbdca97b27c76ada425210011d59ddc02a7\"\u003e\u003ccode\u003e3159edb\u003c/code\u003e\u003c/a\u003e docs: update issue link to the transferred repo path (\u003ca href=\"https://redirect.github.com/open-cli-tools/concurrently/issues/609\"\u003e#609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-cli-tools/concurrently/compare/v10.0.5...v10.0.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/piyushdoorwar/yamlet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/piyushdoorwar/yamlet/pull/14","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/piyushdoorwar%2Fyamlet/issues/14","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/14/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T07:17:07.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5907180036","node_id":"PR_kwDORzvbXs8AAAABJH4BhQ","number":4,"state":"open","title":"build(deps): bump the npm_and_yarn group across 2 directories with 7 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":5,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T07:17:07.000Z","updated_at":"2026-10-18T07:17:17.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"npm_and_yarn","update_count":7,"packages":[{"name":"nuxt","old_version":"4.4.8","new_version":"4.5.1","repository_url":"https://github.com/nuxt/nuxt"},{"name":"@nuxt/devtools","old_version":"3.2.4","new_version":"3.4.3","repository_url":"https://github.com/nuxt/devtools"},{"name":"baseline-browser-mapping","old_version":"2.10.43","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"browserslist","old_version":"4.28.6","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"svgo","old_version":"4.0.2","new_version":"4.1.0","repository_url":"https://github.com/svg/svgo"},{"name":"tar","old_version":"7.5.20","new_version":"7.5.22","repository_url":"https://github.com/isaacs/node-tar"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.8` | `4.5.1` |\n| [@nuxt/devtools](https://github.com/nuxt/devtools/tree/HEAD/packages/devtools) | `3.2.4` | `3.4.3` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.29.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [svgo](https://github.com/svg/svgo) | `4.0.2` | `4.1.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.20` | `7.5.22` |\n\nBumps the npm_and_yarn group with 7 updates in the /packages/headless directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.8` | `4.5.1` |\n| [@nuxt/devtools](https://github.com/nuxt/devtools/tree/HEAD/packages/devtools) | `3.2.4` | `3.4.3` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.29.3` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [svgo](https://github.com/svg/svgo) | `4.0.2` | `4.1.0` |\n| [tar](https://github.com/isaacs/node-tar) | `7.5.20` | `7.5.22` |\n\n\nUpdates `nuxt` from 4.4.8 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e⚠️ \u003cstrong\u003eThis is a security release.\u003c/strong\u003e We recommend upgrading as soon as possible with \u003ccode\u003enpx nuxt upgrade --dedupe\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eIt fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in \u003ccode\u003e@nuxt/devtools@3.3.1\u003c/code\u003e, which fixes a separate critical development-only RCE.\u003c/p\u003e\n\u003cp\u003eIf you already upgraded for the earlier route rule advisory (\u003ca href=\"https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47\"\u003eCVE-2026-53721\u003c/a\u003e), you still need this release: one of the fixes addresses a regression introduced by that fix.\u003c/p\u003e\n\u003cp\u003eIf you use the \u003ccode\u003ecache\u003c/code\u003e, \u003ccode\u003eswr\u003c/code\u003e or \u003ccode\u003eisr\u003c/code\u003e route rules, purge any CDN or edge cache after upgrading; a leaked \u003ccode\u003e_payload.json\u003c/code\u003e may already be cached upstream.\u003c/p\u003e\n\u003cp\u003eFull details: \u003ca href=\"https://nuxt.com/blog/v4-5-security\"\u003eNuxt Security Patch Releases\u003c/a\u003e and \u003ca href=\"https://github.com/nuxt/nuxt/security/advisories\"\u003eGitHub Security Advisories\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🔥 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Replace island teleports in a single html pass (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35515\"\u003e#35515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Add \u003ccode\u003evue.optionsApi\u003c/code\u003e and disable it for v5+ (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35791\"\u003e#35791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Without pages, skip client plugins that require routing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35794\"\u003e#35794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Read rspack dev output fs lazily for server entry (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35740\"\u003e#35740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Resolve loaders and runtime deps from nuxt dirs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35568\"\u003e#35568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Return global route for \u003ccode\u003euseRoute\u003c/code\u003e in detached effect scope (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Ignore custom \u003ccode\u003ename\u003c/code\u003e or \u003ccode\u003epath\u003c/code\u003e when reusing an existing page in \u003ccode\u003epages:extend\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35661\"\u003e#35661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render client components in nested server components (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35669\"\u003e#35669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve explicit \u003ccode\u003euseFetch\u003c/code\u003e method inference (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35671\"\u003e#35671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Revalidate cached route payloads instead of using \u003ccode\u003eforce-cache\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35672\"\u003e#35672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Correct default export detection in plugin metadata (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35676\"\u003e#35676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Clear hide/reset timeouts in set() (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35534\"\u003e#35534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit,nuxt,rspack,schema,webpack:\u003c/strong\u003e Add \u003ccode\u003e.mts\u003c/code\u003e file extension in resolver (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/33845\"\u003e#33845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve trailing slash in NuxtLink href when unset (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35501\"\u003e#35501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't cross-pollute useAsyncData cache on reactive key change (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35656\"\u003e#35656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Filter plugin dependencies by build target (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35682\"\u003e#35682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Reload real page module on HMR of JSX render-function pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35678\"\u003e#35678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Resolve \u003ccode\u003e@unhead/vue/*\u003c/code\u003e from nuxt's dependency tree (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35690\"\u003e#35690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Surface module load errors instead of masking as missing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35497\"\u003e#35497\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Type auto-imported \u003ccode\u003e$fetch\u003c/code\u003e with nitro's \u003ccode\u003e$Fetch\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35704\"\u003e#35704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't reference app config sources in shared and node tsconfigs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35673\"\u003e#35673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Resolve SSR inlined CSS module class name mismatch (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35610\"\u003e#35610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Generate layout types even when pages module is disabled (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35717\"\u003e#35717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Skip resource hints for stylesheets already rendered as blocking links (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Dedupe layers that are both auto-scanned and explicitly extended (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35712\"\u003e#35712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't apply scroll behaviour after a subsequent nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35719\"\u003e#35719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Ensure server sourcemap-preserver plugin actually runs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35680\"\u003e#35680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Preserve css suffix when extracting ssr inline styles (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35714\"\u003e#35714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Watch external component directories in development (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35652\"\u003e#35652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't exclude client entry module from style extraction (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Amend cleanup command in NUXT_B7014 error message (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35735\"\u003e#35735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Only pull in \u003ccode\u003evue-router\u003c/code\u003e when there are island pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35739\"\u003e#35739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Suppress external warnings for internal vite-node paths (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35744\"\u003e#35744\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/452dd50d92ccdf6f456b500e71d0f26baaeff796\"\u003e\u003ccode\u003e452dd50\u003c/code\u003e\u003c/a\u003e v4.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/581651ff37471be9af39a68efccb02bafd512a58\"\u003e\u003ccode\u003e581651f\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject top-level \u003ccode\u003eas\u003c/code\u003e prop for islands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ee6c846338f4eb75801815dda86df1f494725859\"\u003e\u003ccode\u003eee6c846\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject reserved \u003ccode\u003etemplate\u003c/code\u003e island prop under runtime compiler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ad624a75ad2d215f43633f6b40be346a7194d34d\"\u003e\u003ccode\u003ead624a7\u003c/code\u003e\u003c/a\u003e fix(nuxt): case-fold route rule keys to match folded lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/4e35ae9babd94be53246e31200232d48438bb34e\"\u003e\u003ccode\u003e4e35ae9\u003c/code\u003e\u003c/a\u003e fix(nitro): bound island props and v-for to prevent unauthenticated DoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/352135f5319440d9e32d2f609cfb1f710e7a7a67\"\u003e\u003ccode\u003e352135f\u003c/code\u003e\u003c/a\u003e fix(nuxt): remove dev error overlay when error is cleared (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35821\"\u003e#35821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/b1a8e931698d8574ffcb1708f47f050352454e01\"\u003e\u003ccode\u003eb1a8e93\u003c/code\u003e\u003c/a\u003e fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35834\"\u003e#35834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/df559025e5895d0320d742d6c520168815e6f3d8\"\u003e\u003ccode\u003edf55902\u003c/code\u003e\u003c/a\u003e fix(nuxt): convert inline route rules exactly or drop with a warning (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35455\"\u003e#35455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/083b7502c8d742e4455f056c048773f31f620535\"\u003e\u003ccode\u003e083b750\u003c/code\u003e\u003c/a\u003e fix(nuxt): warn when an imports preset \u003ccode\u003efrom\u003c/code\u003e cannot be resolved (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35799\"\u003e#35799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/61eb637d41a11365196fedfb4a818de1bef3530c\"\u003e\u003ccode\u003e61eb637\u003c/code\u003e\u003c/a\u003e perf(nuxt): skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nuxt/devtools` from 3.2.4 to 3.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/releases\"\u003e@​nuxt/devtools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require the dev auth token for server config and storage mounts  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003enuxt/devtools#1124\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd75\"\u003e\u003c!-- raw HTML omitted --\u003e(0383c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e  -  by \u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003enuxt/devtools#1102\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b\"\u003e\u003c!-- raw HTML omitted --\u003e(21904)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Update client for unhead v3 and restore $fetch types  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003enuxt/devtools#1077\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a5\"\u003e\u003c!-- raw HTML omitted --\u003e(0fcb5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit\u003c/strong\u003e: Dedupe mkdist so dist ships .vue SFCs  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003enuxt/devtools#1078\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75\"\u003e\u003c!-- raw HTML omitted --\u003e(48a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Prevent StateEditor from freezing the page on live state  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003enuxt/devtools#1058\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/06249195\"\u003e\u003c!-- raw HTML omitted --\u003e(06249)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a16\"\u003e\u003c!-- raw HTML omitted --\u003e(5cea1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Continue hardening the RPC surface  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003enuxt/devtools#1049\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4\"\u003e\u003c!-- raw HTML omitted --\u003e(7f072)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require dev auth token for openInEditor and options RPC methods  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1039\"\u003enuxt/devtools#1039\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/a7b2718b\"\u003e\u003c!-- raw HTML omitted --\u003e(a7b27)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.2.6...v3.3.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/blob/v3.4.3/CHANGELOG.md\"\u003e@​nuxt/devtools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003e3.4.3\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e require the dev auth token for server config and storage mounts (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003e#1124\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e0383cd7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003e#1102\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e21904b9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003e3.4.2\u003c/a\u003e (2026-08-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e update client for unhead v3 and restore $fetch types (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003e#1077\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e0fcb59a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit:\u003c/strong\u003e dedupe mkdist so dist ships .vue SFCs (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003e#1078\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75ec43f9156b03271a11e413d63bcbe728\"\u003e48a93c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003e3.4.1\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e prevent StateEditor from freezing the page on live state (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003e#1058\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e0624919\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003e3.4.0\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e continue hardening the RPC surface (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003e#1049\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4174cd8fd94ef2364d777964bae8e6032\"\u003e7f072dc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10 (\u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a1694299bfcc67f286d4372d429ab3ad76a\"\u003e5cea1a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003e3.3.1\u003c/a\u003e (2026-07-24)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e1589647fd1d72d7b7006fc5a6c5da8b164ca7a5\"\u003e\u003ccode\u003ee158964\u003c/code\u003e\u003c/a\u003e chore: release v3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e\u003ccode\u003e0383cd7\u003c/code\u003e\u003c/a\u003e fix(devtools): require the dev auth token for server config and storage mount...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/be9a4cdd26a45489d37374f540e1b0c9e8176b5a\"\u003e\u003ccode\u003ebe9a4cd\u003c/code\u003e\u003c/a\u003e refactor: replace simple-git with tinyexec (backport \u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/950\"\u003e#950\u003c/a\u003e to v3) (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e\u003ccode\u003e21904b9\u003c/code\u003e\u003c/a\u003e perf: replace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1102\"\u003e#1102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/a9f5ab663a15fb7d74285feef54034703d42e8e6\"\u003e\u003ccode\u003ea9f5ab6\u003c/code\u003e\u003c/a\u003e chore: release v3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e\u003ccode\u003e0fcb59a\u003c/code\u003e\u003c/a\u003e fix(devtools): update client for unhead v3 and restore $fetch types (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1077\"\u003e#1077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/39a6dbb595b966ca73e40ffbc86c5c87124a3c51\"\u003e\u003ccode\u003e39a6dbb\u003c/code\u003e\u003c/a\u003e chore: release v3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e2de55493bff71e763b201d4b8af6ce6cab512ee\"\u003e\u003ccode\u003ee2de554\u003c/code\u003e\u003c/a\u003e chore: update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e\u003ccode\u003e0624919\u003c/code\u003e\u003c/a\u003e fix(devtools): prevent StateEditor from freezing the page on live state (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1058\"\u003e#1058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0ceaa450b8ca5f153f0c39c164502a7063cf90a9\"\u003e\u003ccode\u003e0ceaa45\u003c/code\u003e\u003c/a\u003e chore: release v3.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/devtools/commits/v3.4.3/packages/devtools\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.10.43 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.43...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.6 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.6...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `svgo` from 4.0.2 to 4.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/svg/svgo/releases\"\u003esvgo's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.0\u003c/h2\u003e\n\u003cp\u003eThis minor release upgrades the SAX parser and introduces stricter XML validation. It also includes important security hardening for \u003ccode\u003eremoveScripts\u003c/code\u003e, dependency updates, and improvements to the test and regression infrastructure.\u003c/p\u003e\n\u003ch3\u003eSupport SVGO\u003c/h3\u003e\n\u003cp\u003eIf SVGO is valuable to you or your organization, please consider \u003ca href=\"https://opencollective.com/svgo\"\u003esupporting the project on OpenCollective\u003c/a\u003e. Your sponsorship helps fund ongoing maintenance and security work.\u003c/p\u003e\n\u003ch3\u003eStricter XML validation\u003c/h3\u003e\n\u003cp\u003eSVGO now uses \u003ca href=\"https://www.npmjs.com/package/sax\"\u003e\u003ccode\u003esax\u003c/code\u003e 1.6.1\u003c/a\u003e, upgraded from 1.5.0 (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2257\"\u003e#2257\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe new parser version validates numeric character references against the ranges permitted by XML. Invalid references are now rejected in both text and attributes, including:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edisallowed control characters such as \u003ccode\u003e\u0026amp;[#1](https://github.com/svg/svgo/issues/1);\u003c/code\u003e, \u003ccode\u003e\u0026amp;#xB;\u003c/code\u003e, and \u003ccode\u003e\u0026amp;#x1F;\u003c/code\u003e;\u003c/li\u003e\n\u003cli\u003eUTF-16 surrogate code points such as \u003ccode\u003e\u0026amp;#xD800;\u003c/code\u003e;\u003c/li\u003e\n\u003cli\u003einvalid XML code points such as \u003ccode\u003e\u0026amp;#xFFFF;\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eValid boundary values—including \u003ccode\u003eU+0020\u003c/code\u003e, \u003ccode\u003eU+D7FF\u003c/code\u003e, \u003ccode\u003eU+E000\u003c/code\u003e, \u003ccode\u003eU+FFFD\u003c/code\u003e, and characters through \u003ccode\u003eU+10FFFF\u003c/code\u003e—remain supported.\u003c/p\u003e\n\u003cp\u003eParser failures are consistently exposed as \u003ccode\u003eSvgoParserError\u003c/code\u003e errors with an \u003ccode\u003eInvalid character entity\u003c/code\u003e reason.\u003c/p\u003e\n\u003cp\u003eThis is an intentional behavior change: malformed SVGs that were previously accepted may now produce a parser error, while valid XML documents are unaffected.\u003c/p\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cp\u003eThe \u003ca href=\"https://svgo.dev/docs/plugins/removeScripts/\"\u003e\u003ccode\u003eremoveScripts\u003c/code\u003e\u003c/a\u003e plugin has been hardened against several script-execution bypasses:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFilters executable \u003ccode\u003edata:\u003c/code\u003e URLs containing HTML, XHTML, or SVG documents while preserving inert data such as PNG images, and filters legacy \u003ccode\u003evbscript:\u003c/code\u003e URLs (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2263\"\u003e#2263\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSanitizes content inside SVG \u003ccode\u003e\u0026lt;foreignObject\u0026gt;\u003c/code\u003e elements by removing HTML event-handler attributes, \u003ccode\u003esrcdoc\u003c/code\u003e, and executable URLs from \u003ccode\u003eaction\u003c/code\u003e, \u003ccode\u003edata\u003c/code\u003e, \u003ccode\u003eformaction\u003c/code\u003e, \u003ccode\u003ehref\u003c/code\u003e, and \u003ccode\u003esrc\u003c/code\u003e, while preserving non-executable HTML and visual content (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2264\"\u003e#2264\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRecognizes namespace-prefixed SVG \u003ccode\u003e\u0026lt;a\u0026gt;\u003c/code\u003e elements and removes ASCII tabs and newlines before checking URL schemes, preventing values such as \u003ccode\u003ejava\u0026amp;[#9](https://github.com/svg/svgo/issues/9);script:\u003c/code\u003e from bypassing detection while preserving elements in unrelated custom namespaces (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2268\"\u003e#2268\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThese changes address:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/security/advisories/GHSA-4vpr-x523-8j87\"\u003eGHSA-4vpr-x523-8j87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/security/advisories/GHSA-w27v-7q3p-w38r\"\u003eGHSA-w27v-7q3p-w38r\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgraded \u003ccode\u003ecss-select\u003c/code\u003e to v6 and \u003ccode\u003ecss-what\u003c/code\u003e to v7, and updated SVGO's custom selector adapter for \u003ccode\u003ecss-select\u003c/code\u003e v6 (\u003ca href=\"https://redirect.github.com/svg/svgo/pull/2244\"\u003e#2244\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eProject maintenance\u003c/h3\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/TrySound\"\u003e\u003ccode\u003e@​TrySound\u003c/code\u003e\u003c/a\u003e is back as an active SVGO maintainer.\u003c/p\u003e\n\u003cp\u003eMany thanks to \u003ca href=\"https://github.com/KTibow\"\u003e\u003ccode\u003e@​KTibow\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/SethFalco\"\u003e\u003ccode\u003e@​SethFalco\u003c/code\u003e\u003c/a\u003e, and \u003ca href=\"https://github.com/XhmikosR\"\u003e\u003ccode\u003e@​XhmikosR\u003c/code\u003e\u003c/a\u003e for maintaining and improving SVGO over the past several years.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog:\u003c/strong\u003e \u003ca href=\"https://github.com/svg/svgo/compare/v4.0.2...v4.1.0\"\u003ehttps://github.com/svg/svgo/compare/v4.0.2...v4.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/5765cbe4e0a930dca648c6b81d335b1522cd7375\"\u003e\u003ccode\u003e5765cbe\u003c/code\u003e\u003c/a\u003e chore: prepare v4.1.0 release (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2275\"\u003e#2275\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/3db3ef33e409a0bc0fdaf255e46c908b00e93bc2\"\u003e\u003ccode\u003e3db3ef3\u003c/code\u003e\u003c/a\u003e fix(removeScripts): handle anchor URL bypasses (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2268\"\u003e#2268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/4e9b9aed2a4607cf28025871151421d5bfe86484\"\u003e\u003ccode\u003e4e9b9ae\u003c/code\u003e\u003c/a\u003e chore: cache regression screenshots (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2267\"\u003e#2267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/d55270ce17b99ebfe16e4fad028bd162187205a1\"\u003e\u003ccode\u003ed55270c\u003c/code\u003e\u003c/a\u003e chore(regression): migrate comparison workers to Tinypool (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2266\"\u003e#2266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/fd51e474a300417d9361d9302d596b1763146327\"\u003e\u003ccode\u003efd51e47\u003c/code\u003e\u003c/a\u003e fix(removeScripts): sanitize foreignObject content (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2264\"\u003e#2264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/dcaf957c6eb34832844de11ef2792e3e0e8db5dd\"\u003e\u003ccode\u003edcaf957\u003c/code\u003e\u003c/a\u003e chore: optimize fixtures in a bounded worker pool (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2265\"\u003e#2265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/a3542937d9c85debab04b1ff75207768caf8a058\"\u003e\u003ccode\u003ea354293\u003c/code\u003e\u003c/a\u003e fix(removeScripts): filter executable data URLs (\u003ca href=\"https://redirect.github.com/svg/svgo/issues/2263\"\u003e#2263\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/4e0d2ac5e7abd5f12d650d3e4b4d2500d4944cc5\"\u003e\u003ccode\u003e4e0d2ac\u003c/code\u003e\u003c/a\u003e ci(typecheck): return typechecking on CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/0b97fedd00a3001f1da616f61578c2c12e6cde1f\"\u003e\u003ccode\u003e0b97fed\u003c/code\u003e\u003c/a\u003e test(typescript): drop tsd for vitest type testing API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/svg/svgo/commit/f6e8ae1afb012c2b47675622728d76b9bfd734f5\"\u003e\u003ccode\u003ef6e8ae1\u003c/code\u003e\u003c/a\u003e chore(pnpm): drop package.json#pnpm.onlyBuiltDependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/svg/svgo/compare/v4.0.2...v4.1.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for svgo since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tar` from 7.5.20 to 7.5.22\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/2a22bfc5d3a432a606d9da0e2d87ba634aa3b1cb\"\u003e\u003ccode\u003e2a22bfc\u003c/code\u003e\u003c/a\u003e 7.5.22\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/df1cd8dc09cded47b00c4129698824b3986432ac\"\u003e\u003ccode\u003edf1cd8d\u003c/code\u003e\u003c/a\u003e Allow transform to be falsey\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/0cd9cc3c5814446d3c0cbea6a31d6c00c2c8a9d9\"\u003e\u003ccode\u003e0cd9cc3\u003c/code\u003e\u003c/a\u003e 7.5.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a\"\u003e\u003ccode\u003e631ae59\u003c/code\u003e\u003c/a\u003e list: prevent unbounded recursion\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/isaacs/node-tar/compare/v7.5.20...v7.5.22\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nuxt` from 4.4.8 to 4.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/nuxt/releases\"\u003enuxt's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.5.1\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e⚠️ \u003cstrong\u003eThis is a security release.\u003c/strong\u003e We recommend upgrading as soon as possible with \u003ccode\u003enpx nuxt upgrade --dedupe\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eIt fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in \u003ccode\u003e@nuxt/devtools@3.3.1\u003c/code\u003e, which fixes a separate critical development-only RCE.\u003c/p\u003e\n\u003cp\u003eIf you already upgraded for the earlier route rule advisory (\u003ca href=\"https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47\"\u003eCVE-2026-53721\u003c/a\u003e), you still need this release: one of the fixes addresses a regression introduced by that fix.\u003c/p\u003e\n\u003cp\u003eIf you use the \u003ccode\u003ecache\u003c/code\u003e, \u003ccode\u003eswr\u003c/code\u003e or \u003ccode\u003eisr\u003c/code\u003e route rules, purge any CDN or edge cache after upgrading; a leaked \u003ccode\u003e_payload.json\u003c/code\u003e may already be cached upstream.\u003c/p\u003e\n\u003cp\u003eFull details: \u003ca href=\"https://nuxt.com/blog/v4-5-security\"\u003eNuxt Security Patch Releases\u003c/a\u003e and \u003ca href=\"https://github.com/nuxt/nuxt/security/advisories\"\u003eGitHub Security Advisories\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e👉 Changelog\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1\"\u003ecompare changes\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003e🔥 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Replace island teleports in a single html pass (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35515\"\u003e#35515\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Add \u003ccode\u003evue.optionsApi\u003c/code\u003e and disable it for v5+ (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35791\"\u003e#35791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Without pages, skip client plugins that require routing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35794\"\u003e#35794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🩹 Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Read rspack dev output fs lazily for server entry (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35740\"\u003e#35740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003erspack,webpack:\u003c/strong\u003e Resolve loaders and runtime deps from nuxt dirs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35568\"\u003e#35568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Return global route for \u003ccode\u003euseRoute\u003c/code\u003e in detached effect scope (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35659\"\u003e#35659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Ignore custom \u003ccode\u003ename\u003c/code\u003e or \u003ccode\u003epath\u003c/code\u003e when reusing an existing page in \u003ccode\u003epages:extend\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35661\"\u003e#35661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Render client components in nested server components (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35669\"\u003e#35669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve explicit \u003ccode\u003euseFetch\u003c/code\u003e method inference (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35671\"\u003e#35671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Revalidate cached route payloads instead of using \u003ccode\u003eforce-cache\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35672\"\u003e#35672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Correct default export detection in plugin metadata (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35676\"\u003e#35676\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Clear hide/reset timeouts in set() (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35534\"\u003e#35534\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit,nuxt,rspack,schema,webpack:\u003c/strong\u003e Add \u003ccode\u003e.mts\u003c/code\u003e file extension in resolver (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/33845\"\u003e#33845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Preserve trailing slash in NuxtLink href when unset (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35501\"\u003e#35501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't cross-pollute useAsyncData cache on reactive key change (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35656\"\u003e#35656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Filter plugin dependencies by build target (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35682\"\u003e#35682\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Reload real page module on HMR of JSX render-function pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35678\"\u003e#35678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Resolve \u003ccode\u003e@unhead/vue/*\u003c/code\u003e from nuxt's dependency tree (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35690\"\u003e#35690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Surface module load errors instead of masking as missing (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35497\"\u003e#35497\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Type auto-imported \u003ccode\u003e$fetch\u003c/code\u003e with nitro's \u003ccode\u003e$Fetch\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35704\"\u003e#35704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't reference app config sources in shared and node tsconfigs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35673\"\u003e#35673\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Resolve SSR inlined CSS module class name mismatch (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35610\"\u003e#35610\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Generate layout types even when pages module is disabled (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35717\"\u003e#35717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enitro:\u003c/strong\u003e Skip resource hints for stylesheets already rendered as blocking links (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35691\"\u003e#35691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ekit:\u003c/strong\u003e Dedupe layers that are both auto-scanned and explicitly extended (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35712\"\u003e#35712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't apply scroll behaviour after a subsequent nav (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35719\"\u003e#35719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Ensure server sourcemap-preserver plugin actually runs (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35680\"\u003e#35680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Preserve css suffix when extracting ssr inline styles (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35714\"\u003e#35714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Watch external component directories in development (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35652\"\u003e#35652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Don't exclude client entry module from style extraction (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35720\"\u003e#35720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Amend cleanup command in NUXT_B7014 error message (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35735\"\u003e#35735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003enuxt:\u003c/strong\u003e Only pull in \u003ccode\u003evue-router\u003c/code\u003e when there are island pages (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35739\"\u003e#35739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003evite:\u003c/strong\u003e Suppress external warnings for internal vite-node paths (\u003ca href=\"https://redirect.github.com/nuxt/nuxt/pull/35744\"\u003e#35744\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/452dd50d92ccdf6f456b500e71d0f26baaeff796\"\u003e\u003ccode\u003e452dd50\u003c/code\u003e\u003c/a\u003e v4.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/581651ff37471be9af39a68efccb02bafd512a58\"\u003e\u003ccode\u003e581651f\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject top-level \u003ccode\u003eas\u003c/code\u003e prop for islands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ee6c846338f4eb75801815dda86df1f494725859\"\u003e\u003ccode\u003eee6c846\u003c/code\u003e\u003c/a\u003e fix(nuxt): reject reserved \u003ccode\u003etemplate\u003c/code\u003e island prop under runtime compiler\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/ad624a75ad2d215f43633f6b40be346a7194d34d\"\u003e\u003ccode\u003ead624a7\u003c/code\u003e\u003c/a\u003e fix(nuxt): case-fold route rule keys to match folded lookups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/4e35ae9babd94be53246e31200232d48438bb34e\"\u003e\u003ccode\u003e4e35ae9\u003c/code\u003e\u003c/a\u003e fix(nitro): bound island props and v-for to prevent unauthenticated DoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/352135f5319440d9e32d2f609cfb1f710e7a7a67\"\u003e\u003ccode\u003e352135f\u003c/code\u003e\u003c/a\u003e fix(nuxt): remove dev error overlay when error is cleared (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35821\"\u003e#35821\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/b1a8e931698d8574ffcb1708f47f050352454e01\"\u003e\u003ccode\u003eb1a8e93\u003c/code\u003e\u003c/a\u003e fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35834\"\u003e#35834\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/df559025e5895d0320d742d6c520168815e6f3d8\"\u003e\u003ccode\u003edf55902\u003c/code\u003e\u003c/a\u003e fix(nuxt): convert inline route rules exactly or drop with a warning (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35455\"\u003e#35455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/083b7502c8d742e4455f056c048773f31f620535\"\u003e\u003ccode\u003e083b750\u003c/code\u003e\u003c/a\u003e fix(nuxt): warn when an imports preset \u003ccode\u003efrom\u003c/code\u003e cannot be resolved (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35799\"\u003e#35799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/nuxt/commit/61eb637d41a11365196fedfb4a818de1bef3530c\"\u003e\u003ccode\u003e61eb637\u003c/code\u003e\u003c/a\u003e perf(nuxt): skip payload revival plugin when \u003ccode\u003essr: false\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/35782\"\u003e#35782\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@nuxt/devtools` from 3.2.4 to 3.4.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/releases\"\u003e@​nuxt/devtools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.3\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require the dev auth token for server config and storage mounts  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003enuxt/devtools#1124\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd75\"\u003e\u003c!-- raw HTML omitted --\u003e(0383c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🏎 Performance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eReplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e  -  by \u003ca href=\"https://github.com/danielroe\"\u003e\u003ccode\u003e@​danielroe\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003enuxt/devtools#1102\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b\"\u003e\u003c!-- raw HTML omitted --\u003e(21904)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.2\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Update client for unhead v3 and restore $fetch types  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003enuxt/devtools#1077\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a5\"\u003e\u003c!-- raw HTML omitted --\u003e(0fcb5)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit\u003c/strong\u003e: Dedupe mkdist so dist ships .vue SFCs  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003enuxt/devtools#1078\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75\"\u003e\u003c!-- raw HTML omitted --\u003e(48a93)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.1\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Prevent StateEditor from freezing the page on live state  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003enuxt/devtools#1058\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/06249195\"\u003e\u003c!-- raw HTML omitted --\u003e(06249)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.4.0\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10  -  by \u003ca href=\"https://github.com/antfu\"\u003e\u003ccode\u003e@​antfu\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a16\"\u003e\u003c!-- raw HTML omitted --\u003e(5cea1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Continue hardening the RPC surface  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003enuxt/devtools#1049\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4\"\u003e\u003c!-- raw HTML omitted --\u003e(7f072)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.1\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003eNo significant changes\u003c/em\u003e\u003c/p\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.3.0\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools\u003c/strong\u003e: Require dev auth token for openInEditor and options RPC methods  -  by \u003ca href=\"https://github.com/antfubot\"\u003e\u003ccode\u003e@​antfubot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1039\"\u003enuxt/devtools#1039\u003c/a\u003e \u003ca href=\"https://github.com/nuxt/devtools/commit/a7b2718b\"\u003e\u003c!-- raw HTML omitted --\u003e(a7b27)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/nuxt/devtools/compare/v3.2.6...v3.3.0\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev3.2.6\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nuxt/devtools/blob/v3.4.3/CHANGELOG.md\"\u003e@​nuxt/devtools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.2...v3.4.3\"\u003e3.4.3\u003c/a\u003e (2026-10-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e require the dev auth token for server config and storage mounts (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1124\"\u003e#1124\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e0383cd7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereplace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1102\"\u003e#1102\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e21904b9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.1...v3.4.2\"\u003e3.4.2\u003c/a\u003e (2026-08-22)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e update client for unhead v3 and restore $fetch types (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1077\"\u003e#1077\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e0fcb59a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eui-kit:\u003c/strong\u003e dedupe mkdist so dist ships .vue SFCs (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1078\"\u003e#1078\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/48a93c75ec43f9156b03271a11e413d63bcbe728\"\u003e48a93c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.4.0...v3.4.1\"\u003e3.4.1\u003c/a\u003e (2026-08-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e prevent StateEditor from freezing the page on live state (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1058\"\u003e#1058\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e0624919\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.1...v3.4.0\"\u003e3.4.0\u003c/a\u003e (2026-07-29)\u003c/h1\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edevtools:\u003c/strong\u003e continue hardening the RPC surface (\u003ca href=\"https://redirect.github.com/nuxt/devtools/issues/1049\"\u003e#1049\u003c/a\u003e) (\u003ca href=\"https://github.com/nuxt/devtools/commit/7f072dc4174cd8fd94ef2364d777964bae8e6032\"\u003e7f072dc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupgrade \u003ccode\u003e@vitejs/devtools-kit\u003c/code\u003e to v0.4.10 (\u003ca href=\"https://github.com/nuxt/devtools/commit/5cea1a1694299bfcc67f286d4372d429ab3ad76a\"\u003e5cea1a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/nuxt/devtools/compare/v3.3.0...v3.3.1\"\u003e3.3.1\u003c/a\u003e (2026-07-24)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e1589647fd1d72d7b7006fc5a6c5da8b164ca7a5\"\u003e\u003ccode\u003ee158964\u003c/code\u003e\u003c/a\u003e chore: release v3.4.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0383cd7590a326331071897e4ed029a2055c34d4\"\u003e\u003ccode\u003e0383cd7\u003c/code\u003e\u003c/a\u003e fix(devtools): require the dev auth token for server config and storage mount...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/be9a4cdd26a45489d37374f540e1b0c9e8176b5a\"\u003e\u003ccode\u003ebe9a4cd\u003c/code\u003e\u003c/a\u003e refactor: replace simple-git with tinyexec (backport \u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/950\"\u003e#950\u003c/a\u003e to v3) (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/21904b9b1b441120f296c592a0f8354589eb2de4\"\u003e\u003ccode\u003e21904b9\u003c/code\u003e\u003c/a\u003e perf: replace \u003ccode\u003enypm\u003c/code\u003e with \u003ccode\u003epackage-manager-detector\u003c/code\u003e (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1102\"\u003e#1102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/a9f5ab663a15fb7d74285feef54034703d42e8e6\"\u003e\u003ccode\u003ea9f5ab6\u003c/code\u003e\u003c/a\u003e chore: release v3.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0fcb59a542c6ea873163075bd283954027a2b5b6\"\u003e\u003ccode\u003e0fcb59a\u003c/code\u003e\u003c/a\u003e fix(devtools): update client for unhead v3 and restore $fetch types (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1077\"\u003e#1077\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/39a6dbb595b966ca73e40ffbc86c5c87124a3c51\"\u003e\u003ccode\u003e39a6dbb\u003c/code\u003e\u003c/a\u003e chore: release v3.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/e2de55493bff71e763b201d4b8af6ce6cab512ee\"\u003e\u003ccode\u003ee2de554\u003c/code\u003e\u003c/a\u003e chore: update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0624919588c4bef3be630ee351cbe049bcf753bb\"\u003e\u003ccode\u003e0624919\u003c/code\u003e\u003c/a\u003e fix(devtools): prevent StateEditor from freezing the page on live state (\u003ca href=\"https://github.com/nuxt/devtools/tree/HEAD/packages/devtools/issues/1058\"\u003e#1058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nuxt/devtools/commit/0ceaa450b8ca5f153f0c39c164502a7063cf90a9\"\u003e\u003ccode\u003e0ceaa45\u003c/code\u003e\u003c/a\u003e chore: release v3.4.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/nuxt/devtools/commits/v3.4.3/packages/devtools\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.10.43 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by b...\n\n_Description has been truncated_","html_url":"https://github.com/TW199501/soybean-ui/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TW199501%2Fsoybean-ui/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"1.8.3","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-18T04:13:54.000Z","version_change":"1.8.3 → 1.12.0","issue":{"uuid":"5906038794","node_id":"PR_kwDOLHSps88AAAABJHAMiw","number":256,"state":"open","title":"Bump the npm_and_yarn group across 1 directory with 22 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-18T04:13:54.000Z","updated_at":"2026-10-18T04:14:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":22,"packages":[{"name":"@babel/core","old_version":"7.29.0","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@swc/html","old_version":"1.13.19","new_version":"1.16.18","repository_url":"https://github.com/swc-project/swc"},{"name":"axios","old_version":"1.13.5","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"baseline-browser-mapping","old_version":"2.9.19","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"1.20.3","new_version":"1.20.8","repository_url":"https://github.com/expressjs/body-parser"},{"name":"brace-expansion","old_version":"1.1.13","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"colord","old_version":"2.9.3","new_version":"2.10.0","repository_url":"https://github.com/omgovich/colord"},{"name":"qs","old_version":"6.13.0","new_version":"6.14.0","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.0.3","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"form-data","old_version":"4.0.5","new_version":"4.0.6","repository_url":"https://github.com/form-data/form-data"},{"name":"js-yaml","old_version":"3.14.2","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"http-proxy-middleware","old_version":"2.0.9","new_version":"2.0.10","repository_url":"https://github.com/chimurai/http-proxy-middleware"},{"name":"image-size","old_version":"2.0.2","new_version":"2.0.4","repository_url":"https://github.com/image-size/image-size"},{"name":"joi","old_version":"17.13.3","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"launch-editor","old_version":"2.13.1","new_version":"2.14.2","repository_url":"https://github.com/vitejs/launch-editor"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"sprintf-js","old_version":"1.0.3","new_version":"removed","repository_url":"https://github.com/alexei/sprintf.js"},{"name":"svgo","old_version":"3.3.3","new_version":"3.3.5","repository_url":"https://github.com/svg/svgo"},{"name":"ws","old_version":"7.5.10","new_version":"7.5.13","repository_url":"https://github.com/websockets/ws"},{"name":"websocket-driver","old_version":"0.7.4","new_version":"0.7.5","repository_url":"https://github.com/faye/websocket-driver-node"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 22 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [@swc/html](https://github.com/swc-project/swc/tree/HEAD/packages/html) | `1.13.19` | `1.16.18` |\n| [axios](https://github.com/axios/axios) | `1.13.5` | `1.20.0` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.19` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.13` | `1.1.21` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [colord](https://github.com/omgovich/colord) | `2.9.3` | `2.10.0` |\n| [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.0.3` | `3.1.8` |\n| [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` |\n| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` |\n| [image-size](https://github.com/image-size/image-size) | `2.0.2` | `2.0.4` |\n| [joi](https://github.com/hapijs/joi) | `17.13.3` | `17.13.8` |\n| [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.1` | `2.14.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [sprintf-js](https://github.com/alexei/sprintf.js) | `1.0.3` | `removed` |\n| [svgo](https://github.com/svg/svgo) | `3.3.3` | `3.3.5` |\n| [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.13` |\n| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` |\n\n\nUpdates `@babel/core` from 7.29.0 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@swc/html` from 1.13.19 to 1.16.18\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swc-project/swc/blob/main/CHANGELOG.md\"\u003e@​swc/html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[1.16.18] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a safe cache root on Unix (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12500\"\u003e#12500\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2125403ad6c5cb7b8329852f5f84b797ede99146\"\u003e2125403\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/minifier)\u003c/strong\u003e Check decl for side effect (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12501\"\u003e#12501\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6841927dd3b72b51b7deaa238d88df9ce0f3fb9f\"\u003e6841927\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[1.16.17] - 2026-10-11\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Fall back to a secure Windows profile cache (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12452\"\u003e#12452\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/2c0fb896611f5b9d462886db9d8089813a99a4a6\"\u003e2c0fb89\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(bindings)\u003c/strong\u003e Allow opting out of Unix cache root security checks (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12469\"\u003e#12469\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/e87fa401933d6c27e5b14f26d9c3381cccc53cdc\"\u003ee87fa40\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Run main CodSpeed benchmarks after policy skips (\u003ca href=\"https://github.com/swc-project/swc/commit/1b6d869ec415609664a06150df8ec4d614fdb3f8\"\u003e1b6d869\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Match Rust's z10 baseline in s390x release builds (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12489\"\u003e#12489\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/b96f92fa6ddafac71133185c7c760855f27b6ed6\"\u003eb96f92f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Raise native addon MSRV to Rust 1.85 (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12491\"\u003e#12491\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/54a232401c81a3c97851128b92904b5b0308c4b4\"\u003e54a2324\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(ci)\u003c/strong\u003e Repair empty crate release changeset (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12499\"\u003e#12499\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/6bf5f8cf38e005fd03c2a4bc49d9021432033695\"\u003e6bf5f8c\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(cli)\u003c/strong\u003e Resolve out-dir source map paths relative to output (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12481\"\u003e#12481\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/717914f88f4f19caa1dd93e971628acb4bd608d1\"\u003e717914f\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(deps)\u003c/strong\u003e Update cargo (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/10278\"\u003e#10278\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/fc7a9e2c159409d97ae0647534a9b9cdefb6eaed\"\u003efc7a9e2\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/compat)\u003c/strong\u003e Preserve consecutive loop labels (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12472\"\u003e#12472\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/28c33708dc691a64358255b5aec02f1c7eb62cdf\"\u003e28c3370\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/estree)\u003c/strong\u003e Fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/898b5926d17b86e14262437b90ca37b043adecda\"\u003e898b592\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBREAKING\u003c/strong\u003e: fix AST roundtrip bugs and implement missing conversions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12440\"\u003e#12440\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(es/fixer)\u003c/strong\u003e Preserve parentheses in JSX sequence expressions (\u003ca href=\"https://redirect.github.com/swc-project/swc/issues/12485\"\u003e#12485\u003c/a\u003e) (\u003ca href=\"https://github.com/swc-project/swc/commit/7a36735f5636e5880cc4030d3b916dd19cedeb9b\"\u003e7a36735\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/63ced3ba33a9c31737ad056b39c9a8cdb4fcc486\"\u003e\u003ccode\u003e63ced3b\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/ff4257e08f565ef3dea4219a1f9d148c15d7496f\"\u003e\u003ccode\u003eff4257e\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.18-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d2bfb947435b19f82532cea721f12fb950ccde7a\"\u003e\u003ccode\u003ed2bfb94\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/52746278c3e2566264370ea072076fad91eadbaf\"\u003e\u003ccode\u003e5274627\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.17-nightly-20261011.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/f8269e6342753d1d859dcf8d932e1bbe2c8592ef\"\u003e\u003ccode\u003ef8269e6\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.16-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/3e034f2b1897174e6d6c53fb9fae6b8cefd717ed\"\u003e\u003ccode\u003e3e034f2\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.15-nightly-20261007.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/d6b897c58d250c4088dbd842d0e8fd318515eb7c\"\u003e\u003ccode\u003ed6b897c\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.14-nightly-20261006.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev82.0.0\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1391a346e1ba8ef0cbaaa7c1b90c391ad6d150c5\"\u003e\u003ccode\u003e1391a34\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/a006b7fabd19b909c803822360c217706313acbb\"\u003e\u003ccode\u003ea006b7f\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.13-nightly-20260930.1\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.2\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swc-project/swc/commit/1b2c264916cb664d259113717851275fb6b01620\"\u003e\u003ccode\u003e1b2c264\u003c/code\u003e\u003c/a\u003e chore: Publish \u003ccode\u003e1.16.12\u003c/code\u003e with \u003ccode\u003eswc_core\u003c/code\u003e \u003ccode\u003ev81.0.1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swc-project/swc/commits/v1.16.18/packages/html\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.13.5 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003ch2\u003ev1.19.0 - July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev1.19.0 — July 22, 2026\u003c/h2\u003e\n\u003cp\u003eThis release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.\u003c/p\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMultipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (\u003ca href=\"https://github.com/advisories/GHSA-hmw2-7cc7-3qxx\"\u003ehttps://github.com/advisories/GHSA-hmw2-7cc7-3qxx\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eConfiguration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors,\nadapters, and serializers. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11081\"\u003e#11081\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHeader Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11051\"\u003e#11051\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11067\"\u003e#11067\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eForm Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11018\"\u003e#11018\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11053\"\u003e#11053\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eCancellation: Propagated already-aborted input signals immediately when composing abort signals. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eHeader Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11036\"\u003e#11036\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11037\"\u003e#11037\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eURL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11008\"\u003e#11008\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11038\"\u003e#11038\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eProgress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11039\"\u003e#11039\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11040\"\u003e#11040\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eError and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11044\"\u003e#11044\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11059\"\u003e#11059\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eContent-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11061\"\u003e#11061\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSynchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11071\"\u003e#11071\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11031\"\u003e#11031\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11055\"\u003e#11055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11056\"\u003e#11056\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11058\"\u003e#11058\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11079\"\u003e#11079\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11080\"\u003e#11080\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11088\"\u003e#11088\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11089\"\u003e#11089\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11090\"\u003e#11090\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBuild Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eForm Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11062\"\u003e#11062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDeveloper Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11032\"\u003e#11032\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11073\"\u003e#11073\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11041\"\u003e#11041\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11068\"\u003e#11068\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11076\"\u003e#11076\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11078\"\u003e#11078\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePublishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11083\"\u003e#11083\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11095\"\u003e#11095\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve Axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/afonsojramos\"\u003e\u003ccode\u003e@​afonsojramos\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11028\"\u003e#11028\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11006\"\u003e#11006\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yassertawfik4\"\u003e\u003ccode\u003e@​yassertawfik4\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11024\"\u003e#11024\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/AnandSundar\"\u003e\u003ccode\u003e@​AnandSundar\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11029\"\u003e#11029\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lin-hongkuan\"\u003e\u003ccode\u003e@​lin-hongkuan\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11035\"\u003e#11035\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Wali007-lab\"\u003e\u003ccode\u003e@​Wali007-lab\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11054\"\u003e#11054\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/magicdawn\"\u003e\u003ccode\u003e@​magicdawn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11043\"\u003e#11043\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.13.5...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version modifies \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `baseline-browser-mapping` from 2.9.19 to 2.11.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/releases\"\u003ebaseline-browser-mapping's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed in 2.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Adds a new \u003ccode\u003egetTimeline()\u003c/code\u003e method for getting the series of minimum browser changes, either grouped by date or by browser.\u003c/li\u003e\n\u003cli\u003erefactor: Substantial refactoring of the data compression process that replaces the full list of browsers from \u003ccode\u003e@mdn/browser-compat-data\u003c/code\u003e and \u003ccode\u003edownstream-browsers.json\u003c/code\u003e and features from \u003ccode\u003eweb-features\u003c/code\u003e (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date.  Thanks to \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e for the idea!\u003c/li\u003e\n\u003cli\u003erefactor: Some common functions have been moved to a \u003ccode\u003eutil.ts\u003c/code\u003e module for use in other scripts.\u003c/li\u003e\n\u003cli\u003efix: Removes \u003ccode\u003eprocess.exit()\u003c/code\u003e calls when unsupported option combinations are passed to getCompatibleVersions() and \u003ccode\u003egetAllVersions()\u003c/code\u003e in favour of throwing an \u003ccode\u003eError\u003c/code\u003e.  There is a small security risk with \u003ccode\u003eprocess.exit()\u003c/code\u003e calls that sites accepting unsanitised inputs could be the subject of attacks.  Unsupported config options now throw and Error which should allow for more graceful handling.  Thanks to \u003ca href=\"https://github.com/bnbdr\"\u003e\u003ccode\u003e@​bnbdr\u003c/code\u003e\u003c/a\u003e for flagging this as vulnerability CVE-2026-45819 .\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://redirect.github.com/web-platform-dx/baseline-browser-mapping/issues/134\"\u003e#134\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.44...v2.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIntroduces support for Node 6 by refactoring all \u003ccode\u003eObject.entries\u003c/code\u003e and \u003ccode\u003eObject.values\u003c/code\u003e instances and lowering ES target in Rollup to \u003ccode\u003ees2015\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdds specified Node version support in package.json for \u0026gt;=6.0.0.\u003c/li\u003e\n\u003cli\u003eRefactors CLI code to avoid \u003ccode\u003eparseArgs\u003c/code\u003e which is not supported by versions of Node prior to 18, changes \u003ccode\u003eimport\u003c/code\u003e to \u003ccode\u003erequire\u003c/code\u003e and changes Rollup export to \u003ccode\u003ecjs\u003c/code\u003e to allow execution on older versions of Node.\u003c/li\u003e\n\u003cli\u003eAdds a new \u003ccode\u003elegacy-test.js\u003c/code\u003e file that allows basic testing on older versions of Node where current versions of Jasmine and ESLint are not supported.\u003c/li\u003e\n\u003cli\u003eAdds a test matrix to run tests on all even-numbered Node versions from 6 to 24.\u003c/li\u003e\n\u003cli\u003erefactor publish workflows to support NPM's new OIDC integration\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\"\u003ehttps://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.24...v2.10.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c9ca9986d680895b91d73683f6c7d47b3e6e9ae0\"\u003e\u003ccode\u003ec9ca998\u003c/code\u003e\u003c/a\u003e Patch to 2.11.29 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/2f35299fbb3d40e331d68e5af3aaf0aed1a9996f\"\u003e\u003ccode\u003e2f35299\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/517a1bfe32d81ecf5afb4d91fa27d8af6025ca31\"\u003e\u003ccode\u003e517a1bf\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/17963c0e2a1c5e923c241e4254cabaa484488145\"\u003e\u003ccode\u003e17963c0\u003c/code\u003e\u003c/a\u003e Patch to 2.11.28 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/5d628d8fdcddc434943219feaa3748a90b649279\"\u003e\u003ccode\u003e5d628d8\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/18ccb388edb91ca11bbd2a1dc5055117b8b01863\"\u003e\u003ccode\u003e18ccb38\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/6141d06f254525dcc3902ee1b153a835fc845522\"\u003e\u003ccode\u003e6141d06\u003c/code\u003e\u003c/a\u003e Patch to 2.11.27 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/e1d166be08e0eab6f6d71533772d1c9202798abb\"\u003e\u003ccode\u003ee1d166b\u003c/code\u003e\u003c/a\u003e Browser or feature data changed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/42972a7ab3bad1c0c74edda376443010dbaa127c\"\u003e\u003ccode\u003e42972a7\u003c/code\u003e\u003c/a\u003e Updating static site\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/commit/c1934c691d39aa9cf0c25626b91e1e5c6efd53ce\"\u003e\u003ccode\u003ec1934c6\u003c/code\u003e\u003c/a\u003e Patch to 2.11.26 because browser or feature data changed\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.19...v2.11.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for baseline-browser-mapping since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.20.3 to 1.20.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eSame code base as \u003ca href=\"https://github.com/expressjs/body-parser/releases/tag/1.20.7\"\u003e1.20.7\u003c/a\u003e. This was created to test the new release process.\u003c/strong\u003e\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eci: backport npm-publish workflow from master by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/769\"\u003eexpressjs/body-parser#769\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/770\"\u003eexpressjs/body-parser#770\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.7...1.20.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: include security fix in 1.20.6 changes by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/747\"\u003eexpressjs/body-parser#747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.16.0 by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/761\"\u003eexpressjs/body-parser#761\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.20.7 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/767\"\u003eexpressjs/body-parser#767\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.6...1.20.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/1.20.8/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSame code base as 1.20.7. This was created to test the new release process.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.7\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.16.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.6\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5c08c2008eac79abddb8abfa5095491d02958d56\"\u003e\u003ccode\u003e5c08c20\u003c/code\u003e\u003c/a\u003e 1.20.8 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/770\"\u003e#770\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0cea4f42a40996eafac441d0e71084afbe1407d4\"\u003e\u003ccode\u003e0cea4f4\u003c/code\u003e\u003c/a\u003e ci: backport npm-publish workflow from master (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/769\"\u003e#769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0f0f0d7f96fc7444407aef85a6d1fa363279e654\"\u003e\u003ccode\u003e0f0f0d7\u003c/code\u003e\u003c/a\u003e 1.20.7 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/767\"\u003e#767\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/355eb04ade7c27f57f93a0e90e26ed6f121becc5\"\u003e\u003ccode\u003e355eb04\u003c/code\u003e\u003c/a\u003e deps: qs@~6.16.0 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/761\"\u003e#761\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/8be369a5f8b0f4070ebb7a0ae9aca12db9d8f947\"\u003e\u003ccode\u003e8be369a\u003c/code\u003e\u003c/a\u003e docs: include security fix in 1.20.6 changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.13 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.28.1 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.28.1...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `colord` from 2.9.3 to 2.10.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/releases\"\u003ecolord's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.10 (RGB color mixing)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003eshades\u003c/code\u003e and \u003ccode\u003etones\u003c/code\u003e (\u003ccode\u003emix\u003c/code\u003e plugin) now accept an optional interpolation color space. LAB stays the default; pass \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003eimport { colord, extend } from \u0026quot;colord\u0026quot;;\nimport mixPlugin from \u0026quot;colord/plugins/mix\u0026quot;;\n\u003cp\u003eextend([mixPlugin]);\u003c/p\u003e\n\u003cp\u003ecolord(\u0026quot;#ff0000\u0026quot;).mix(\u0026quot;#ffffff\u0026quot;, 0.5, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#ff8080\u0026quot;\ncolord(\u0026quot;#f0f3f1\u0026quot;).mix(\u0026quot;#007d40\u0026quot;, 0.14, \u0026quot;rgb\u0026quot;).toHex(); // \u0026quot;#cee2d8\u0026quot; — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1\ncolord(\u0026quot;#ff0000\u0026quot;).tints(3, \u0026quot;rgb\u0026quot;).map((c) =\u0026gt; c.toHex()); // [\u0026quot;#ff0000\u0026quot;, \u0026quot;#ff8080\u0026quot;, \u0026quot;#ffffff\u0026quot;]\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/omgovich/colord/blob/master/CHANGELOG.md\"\u003ecolord's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch3\u003e2.10.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003emix\u003c/code\u003e plugin by adding an optional \u003ccode\u003e\u0026quot;rgb\u0026quot;\u003c/code\u003e interpolation mode to \u003ccode\u003emix\u003c/code\u003e, \u003ccode\u003etints\u003c/code\u003e, \u003ccode\u003etones\u003c/code\u003e and \u003ccode\u003eshades\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.7\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMake HEX parsing and serialization more than 2x faster\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.6\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Rotate the unrounded hue so \u003ccode\u003erotate\u003c/code\u003e and \u003ccode\u003eharmonies\u003c/code\u003e preserve the original color\u003c/li\u003e\n\u003cli\u003eFix: Normalize HWB whiteness + blackness over 100% to gray ❤️ \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e2.9.5\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Use adjusted chroma for the CIEDE2000 rotation term ❤️ \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: Keep the hue within \u003ccode\u003e[0, 360)\u003c/code\u003e in every color model ❤️ \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eBoth fixes change returned numbers for a small set of colors; \u003ccode\u003etoHex()\u003c/code\u003e output is unchanged. Snapshots holding \u003ccode\u003eh: 360\u003c/code\u003e, \u003ccode\u003e\u0026quot;hsl(360, …)\u0026quot;\u003c/code\u003e or a \u003ccode\u003edelta()\u003c/code\u003e value may need updating.\u003c/p\u003e\n\u003ch3\u003e2.9.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix: Reject malformed color strings in linear time ❤️ \u003ca href=\"https://github.com/GAP-dev\"\u003e\u003ccode\u003e@​GAP-dev\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/omgovich/colord/commits/v2.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.13.0 to 6.14.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.14.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: add \u003ccode\u003ethrowOnParameterLimitExceeded\u003c/code\u003e option (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/517\"\u003e#517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e[patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e[actions] use shared action; re-add finishers\u003c/li\u003e\n\u003cli\u003e[meta] Fix changelog formatting bug\u003c/li\u003e\n\u003cli\u003e[Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e, \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] increase coverage\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.3\u003c/strong\u003e\u003c/h2\u003e\n\u003cp\u003e[Fix] fix regressions from robustness refactor\n[actions] update reusable workflows\u003c/p\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.2\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Robustness] avoid \u003ccode\u003e.push\u003c/code\u003e, use \u003ccode\u003evoid\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[readme] clarify \u003ccode\u003eparseArrays\u003c/code\u003e and \u003ccode\u003earrayLimit\u003c/code\u003e documentation (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/543\"\u003e#543\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] document that \u003ccode\u003eaddQueryPrefix\u003c/code\u003e does not add \u003ccode\u003e?\u003c/code\u003e to empty output (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/418\"\u003e#418\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[readme] replace runkit CI badge with shields.io check-runs badge\u003c/li\u003e\n\u003cli\u003e[actions] fix rebase workflow permissions\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.13.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: avoid a crash when a \u003ccode\u003efilter\u003c/code\u003e key is \u003ccode\u003enull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils.merge\u003c/code\u003e: functions should not be stringified into keys\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ensure a non-string \u003ccode\u003efilter\u003c/code\u003e does not crash\u003c/li\u003e\n\u003cli\u003e[Refactor] use \u003ccode\u003e__proto__\u003c/code\u003e syntax instead of \u003ccode\u003eObject.create\u003c/code\u003e for null objects\u003c/li\u003e\n\u003cli\u003e[Refactor] misc cleanup\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils.merge\u003c/code\u003e: add some coverage\u003c/li\u003e\n\u003cli\u003e[Tests] fix a test case\u003c/li\u003e\n\u003cli\u003e[actions] split out node 10-20, and 20+\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003emock-property\u003c/code\u003e, \u003ccode\u003eobject-inspect\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/32dcc637f90be175c0d4617b429263115a87e3a8\"\u003e\u003ccode\u003e32dcc63\u003c/code\u003e\u003c/a\u003e v6.14.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4ec582b07a411f49b3192ea92562e2ad503a4dc0\"\u003e\u003ccode\u003e4ec582b\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ees-value-fixtures\u003c/code\u003e, \u003ccode\u003ehas-bigints\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/a240c52c7c48d3ead6bd77c5bc3b1275bab252fc\"\u003e\u003ccode\u003ea240c52\u003c/code\u003e\u003c/a\u003e [Tests] increase coverage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/25956a73e8cf56d445b0972cc3d9d16eb0958435\"\u003e\u003ccode\u003e25956a7\u003c/code\u003e\u003c/a\u003e [Refactor] \u003ccode\u003eparse\u003c/code\u003e: use \u003ccode\u003eutils.combine\u003c/code\u003e more\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/b189ed49c8dfe5b41afe6cecabdaa562de56764b\"\u003e\u003ccode\u003eb189ed4\u003c/code\u003e\u003c/a\u003e [patch] \u003ccode\u003eparse\u003c/code\u003e: add explicit \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e default\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/1d590de5eb325a6ea332812b260c024e6a58ab8c\"\u003e\u003ccode\u003e1d590de\u003c/code\u003e\u003c/a\u003e [actions] simplify finisher\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/6cd60a59aae428123d45810996f4ac6b2c4e5c52\"\u003e\u003ccode\u003e6cd60a5\u003c/code\u003e\u003c/a\u003e [actions] use shared action\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/89edfd25f9598b5ccfe7eec9c4c184d5e8854ee2\"\u003e\u003ccode\u003e89edfd2\u003c/code\u003e\u003c/a\u003e [Deps] update \u003ccode\u003eside-channel\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/e26e7a8946b507c9445e08de04ee1b95c8eb6693\"\u003e\u003ccode\u003ee26e7a8\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003ehas-proto\u003c/code\u003e, \u003ccode\u003ehas-symbols\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51fdc98d72cbfb33f5bab9da1eb8d511b3160249\"\u003e\u003ccode\u003e51fdc98\u003c/code\u003e\u003c/a\u003e [actions] re-add finishers\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.13.0...v6.14.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.0.3 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.6\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis release addresses the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8\"\u003eGHSA-5jgf-p345-68v8\u003c/a\u003e — host confusion via skipped IDN canonicalization on scheme-relative references\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf\"\u003eGHSA-fph4-wmhf-6fwf\u003c/a\u003e — server-side request forgery via repeated hostname percent-decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc\"\u003eGHSA-f65p-4m7j-42xc\u003c/a\u003e — server-side request forgery via malformed IPv6 normalization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp\"\u003eGHSA-jqff-g426-hqxp\u003c/a\u003e — host confusion via percent-encoded scheme normalization\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.6.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github...\n\n_Description has been truncated_","html_url":"https://github.com/2000Arion/gsc-docs/pull/256","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/2000Arion%2Fgsc-docs/issues/256","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/256/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T20:21:36.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5902711374","node_id":"PR_kwDOQGACbs8AAAABJEc85A","number":55,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T21:26:04.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T20:21:36.000Z","updated_at":"2026-10-17T21:26:07.000Z","time_to_close":3868,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":16,"packages":[{"name":"sharp","old_version":"0.35.3","new_version":"0.35.5","repository_url":"https://github.com/lovell/sharp"},{"name":"axios","old_version":"1.19.0","new_version":"1.20.0","repository_url":"https://github.com/axios/axios"},{"name":"js-yaml","old_version":"3.15.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"@vitest/mocker","old_version":"4.1.10","new_version":"5.0.5","repository_url":"https://github.com/vitest-dev/vitest"},{"name":"brace-expansion","old_version":"5.0.9","new_version":"5.0.12","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"browserslist","old_version":"4.24.2","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"fast-copy","old_version":"4.0.2","new_version":"4.2.0","repository_url":"https://github.com/planttheidea/fast-copy"},{"name":"fast-uri","old_version":"3.1.7","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"ip-address","old_version":"10.5.0","new_version":"10.7.4","repository_url":"https://github.com/beaugunderson/ip-address"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 16 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` |\n| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.15.1` | `3.15.2` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.1.10` | `5.0.5` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `5.0.9` | `5.0.12` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.24.2` | `4.29.3` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [fast-copy](https://github.com/planttheidea/fast-copy) | `4.0.2` | `4.2.0` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.7` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [ip-address](https://github.com/beaugunderson/ip-address) | `10.5.0` | `10.7.4` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\n\nUpdates `sharp` from 0.35.3 to 0.35.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/lovell/sharp/releases\"\u003esharp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.35.5\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e and \u003ccode\u003erotate\u003c/code\u003e operations.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTests: Ensure composite tests pass on big endian platforms.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4609\"\u003e#4609\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.35.5-rc.1\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\"\u003ehttps://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAdd upper bounds check on length of \u003ccode\u003elinear\u003c/code\u003e and GIF \u003ccode\u003edelay\u003c/code\u003e arrays.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove error handing when WebAssembly fallback also fails.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4593\"\u003e#4593\u003c/a\u003e\n\u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Allow multi-frame options for JXL output.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/pull/4602\"\u003e#4602\u003c/a\u003e\n\u003ca href=\"https://github.com/ramin-010\"\u003e\u003ccode\u003e@​ramin-010\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eTypeScript: Remove non-existent named export.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4604\"\u003e#4604\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIncrease accepted dimensions when extending an image.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4605\"\u003e#4605\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eImprove gain map support for \u003ccode\u003eextract\u003c/code\u003e operation.\n\u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/51a990faa26ade5586a4934ac9673c98d8893326\"\u003e\u003ccode\u003e51a990f\u003c/code\u003e\u003c/a\u003e Release v0.35.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236\"\u003e\u003ccode\u003e96de105\u003c/code\u003e\u003c/a\u003e Upgrade to sharp-libvips v1.3.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/3a61390260e0aa017046af9ad107abd62f3c98c0\"\u003e\u003ccode\u003e3a61390\u003c/code\u003e\u003c/a\u003e CI: Configure Dependabot with all package.json locations\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/4940c500a63a9193b1ad5d3804a2d241ca36995b\"\u003e\u003ccode\u003e4940c50\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate/flip/flop ops\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/20654aa60eaa85a37369ef69a7ca6506b65f8c85\"\u003e\u003ccode\u003e20654aa\u003c/code\u003e\u003c/a\u003e Prerelease v0.35.5-rc.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/ef4f9348a97053ceddacd23dcb6e39cce5a1fc7d\"\u003e\u003ccode\u003eef4f934\u003c/code\u003e\u003c/a\u003e CI: Upgrade to Ubuntu 26.04\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/358df954c5f58487392e1a9af743e112e8998d67\"\u003e\u003ccode\u003e358df95\u003c/code\u003e\u003c/a\u003e Upgrade to libvips v8.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/49f4903d34eddcd68b79872c511c198f124885a3\"\u003e\u003ccode\u003e49f4903\u003c/code\u003e\u003c/a\u003e Improve gain map support for rotate-then-extract \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/0e2e55eb3a44da5d602adedd6b51a03e652e3b20\"\u003e\u003ccode\u003e0e2e55e\u003c/code\u003e\u003c/a\u003e Silence a couple of compiler/static analysis warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lovell/sharp/commit/cef3b8c467c21f7e84bd51d5e53f2d115669f8d8\"\u003e\u003ccode\u003ecef3b8c\u003c/code\u003e\u003c/a\u003e Improve gain map support for extract operation \u003ca href=\"https://redirect.github.com/lovell/sharp/issues/4606\"\u003e#4606\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/lovell/sharp/compare/v0.35.3...v0.35.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `axios` from 1.19.0 to 1.20.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/releases\"\u003eaxios's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.20.0 — August 19, 2026\u003c/h2\u003e\n\u003cp\u003eThis release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.\u003c/p\u003e\n\u003ch2\u003e⚠️ Breaking Changes \u0026amp; Deprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔒 Security Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRuntime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInterceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11087\"\u003e#11087\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequest Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eXHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNode.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCore Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Maintenance \u0026amp; Chores\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11092\"\u003e#11092\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11098\"\u003e#11098\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11099\"\u003e#11099\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11106\"\u003e#11106\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11107\"\u003e#11107\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11122\"\u003e#11122\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11123\"\u003e#11123\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11126\"\u003e#11126\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11127\"\u003e#11127\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11144\"\u003e#11144\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocumentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11101\"\u003e#11101\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11124\"\u003e#11124\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11136\"\u003e#11136\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11128\"\u003e#11128\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🌟 New Contributors\u003c/h2\u003e\n\u003cp\u003eWe are thrilled to welcome our new contributors. Thank you for helping improve axios:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/yens1\"\u003e\u003ccode\u003e@​yens1\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11109\"\u003e#11109\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sasireddy001\"\u003e\u003ccode\u003e@​Sasireddy001\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11113\"\u003e#11113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ari-token-security\"\u003e\u003ccode\u003e@​ari-token-security\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11094\"\u003e#11094\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/timothyokooboh\"\u003e\u003ccode\u003e@​timothyokooboh\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11097\"\u003e#11097\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gi9439041-png\"\u003e\u003ccode\u003e@​gi9439041-png\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11119\"\u003e#11119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Hashim1999164\"\u003e\u003ccode\u003e@​Hashim1999164\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11082\"\u003e#11082\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/v-dev-cl\"\u003e\u003ccode\u003e@​v-dev-cl\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11091\"\u003e#11091\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/r0h1tb\"\u003e\u003ccode\u003e@​r0h1tb\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ostapondo\"\u003e\u003ccode\u003e@​ostapondo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFull Changelog (\u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ehttps://github.com/axios/axios/compare/v1.19.0...v1.20.0\u003c/a\u003e)\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md\"\u003eaxios's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/84a9f3b9a4f3244b8c8e818f557d64c7b964fb25\"\u003e\u003ccode\u003e84a9f3b\u003c/code\u003e\u003c/a\u003e chore(release): prepare release 1.20.0 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11152\"\u003e#11152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e6824eec5fcf9da467a9792724396badc490c469\"\u003e\u003ccode\u003ee6824ee\u003c/code\u003e\u003c/a\u003e fix: core methodList, HTTP adapter errors, and add tests (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11096\"\u003e#11096\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d8a919fd81403d59058c0e9dbefc540407dee83f\"\u003e\u003ccode\u003ed8a919f\u003c/code\u003e\u003c/a\u003e fix(xhr): flush final progress during the live loadend dispatch (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11121\"\u003e#11121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2d2a21af8a433089474a2149781799c93acbcf3c\"\u003e\u003ccode\u003e2d2a21a\u003c/code\u003e\u003c/a\u003e fix(interceptors): tolerate nullish handlers in syncHandlerEntries (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11118\"\u003e#11118\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a\"\u003e\u003ccode\u003ed19040b\u003c/code\u003e\u003c/a\u003e fix: harden runtime option handling (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11141\"\u003e#11141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/e0a02dd16671deabe2b809334d4c2ebede29a233\"\u003e\u003ccode\u003ee0a02dd\u003c/code\u003e\u003c/a\u003e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/d10cb3aa3cda1d78721ddf96be590478df26cd81\"\u003e\u003ccode\u003ed10cb3a\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the development_dependencies group with 4 updates (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11143\"\u003e#11143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/2c94646eb7cb7ab9dcb2aefdb04ab1b040c28e16\"\u003e\u003ccode\u003e2c94646\u003c/code\u003e\u003c/a\u003e chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11133\"\u003e#11133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/76c12bce5a4fe9a45bef9a5bf2baaf599d7d382e\"\u003e\u003ccode\u003e76c12bc\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11140\"\u003e#11140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/axios/axios/commit/ba98559a7f5a18e531b5762387e5957bd281af3d\"\u003e\u003ccode\u003eba98559\u003c/code\u003e\u003c/a\u003e docs: add ScrapingBee sponsor (\u003ca href=\"https://redirect.github.com/axios/axios/issues/11137\"\u003e#11137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/axios/axios/compare/v1.19.0...v1.20.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.15.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/f34812f1cea794f8c21e0a4e1f3a2584b720f305\"\u003e\u003ccode\u003ef34812f\u003c/code\u003e\u003c/a\u003e Update .gitignore\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@vitest/mocker` from 4.1.10 to 5.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitest-dev/vitest/releases\"\u003e@​vitest/mocker's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eKeep vite default \u003ccode\u003efs.deny\u003c/code\u003e with api token file  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11578\"\u003evitest-dev/vitest#11578\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/28dc1edfb\"\u003e\u003c!-- raw HTML omitted --\u003e(28dc1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle quoted file names in \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11583\"\u003evitest-dev/vitest#11583\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/14921e962\"\u003e\u003c!-- raw HTML omitted --\u003e(14921)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003edata\u003c/code\u003e to the \u003ccode\u003eimport.meta.hot\u003c/code\u003e stub  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11590\"\u003evitest-dev/vitest#11590\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/3a8289ac3\"\u003e\u003c!-- raw HTML omitted --\u003e(3a828)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSet \u003ccode\u003eskip\u003c/code\u003e in \u003ccode\u003eskipIf\u003c/code\u003e, ignore \u003ccode\u003eundefined\u003c/code\u003e options  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11591\"\u003evitest-dev/vitest#11591\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/d523a15f2\"\u003e\u003c!-- raw HTML omitted --\u003e(d523a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSkip builtin loading in async leak detector  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11598\"\u003evitest-dev/vitest#11598\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe86a64c6\"\u003e\u003c!-- raw HTML omitted --\u003e(fe86a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep the import frame in native loader errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11599\"\u003evitest-dev/vitest#11599\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9697b3894\"\u003e\u003c!-- raw HTML omitted --\u003e(9697b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun hook cleanups when a later hook fails  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11605\"\u003evitest-dev/vitest#11605\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6c5a44720\"\u003e\u003c!-- raw HTML omitted --\u003e(6c5a4)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease mocks of finished test files  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11607\"\u003evitest-dev/vitest#11607\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/e9c3d72f0\"\u003e\u003c!-- raw HTML omitted --\u003e(e9c3d)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbort all running tests on cancel  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11606\"\u003evitest-dev/vitest#11606\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6621a72d6\"\u003e\u003c!-- raw HTML omitted --\u003e(6621a)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eIgnore synthetic pagehide events  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11582\"\u003evitest-dev/vitest#11582\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ca0813584\"\u003e\u003c!-- raw HTML omitted --\u003e(ca081)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun plugin buildStart on server creation  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11593\"\u003evitest-dev/vitest#11593\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ea611e44c\"\u003e\u003c!-- raw HTML omitted --\u003e(ea611)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDrop late connections of closed sessions  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11600\"\u003evitest-dev/vitest#11600\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f161e6df2\"\u003e\u003c!-- raw HTML omitted --\u003e(f161e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWait 30s for the browser to close  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11601\"\u003evitest-dev/vitest#11601\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6498b666a\"\u003e\u003c!-- raw HTML omitted --\u003e(6498b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRun global setup once with instances  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11596\"\u003evitest-dev/vitest#11596\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/8dd67c262\"\u003e\u003c!-- raw HTML omitted --\u003e(8dd67)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ereporter\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eEnd reason \u003ccode\u003e\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);failed\u0026amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/39);\u003c/code\u003e on worker crash  -  by \u003ca href=\"https://github.com/AriPerkkio\"\u003e\u003ccode\u003e@​AriPerkkio\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11568\"\u003evitest-dev/vitest#11568\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6ae8e89ff\"\u003e\u003c!-- raw HTML omitted --\u003e(6ae8e)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003e    \u003ca href=\"https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5\"\u003eView changes on GitHub\u003c/a\u003e\u003c/h5\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch3\u003e   🚀 Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eexperimental\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003eTag cache directories with CACHEDIR.TAG  -  by \u003ca href=\"https://github.com/lifeiscontent\"\u003e\u003ccode\u003e@​lifeiscontent\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11461\"\u003evitest-dev/vitest#11461\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a8ea3c8fd\"\u003e\u003c!-- raw HTML omitted --\u003e(a8ea3)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003etest.ui.theme\u003c/code\u003e option  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11499\"\u003evitest-dev/vitest#11499\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/1da66405d\"\u003e\u003c!-- raw HTML omitted --\u003e(1da66)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHighlight selector multiple matches in trace view  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11489\"\u003evitest-dev/vitest#11489\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/5abba1e1b\"\u003e\u003c!-- raw HTML omitted --\u003e(5abba)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrint how many tests were affected and a total when running \u003ccode\u003e--changed\u003c/code\u003e  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11424\"\u003evitest-dev/vitest#11424\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/a23368585\"\u003e\u003c!-- raw HTML omitted --\u003e(a2336)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd an option to cache dependencies instead of statically parsing them  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11515\"\u003evitest-dev/vitest#11515\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/c06012ac8\"\u003e\u003c!-- raw HTML omitted --\u003e(c0601)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd fit and zoom controls to trace viewer  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11490\"\u003evitest-dev/vitest#11490\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/f5dd99ed0\"\u003e\u003c!-- raw HTML omitted --\u003e(f5dd9)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e   🐞 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFail the run on git and location filter errors  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11430\"\u003evitest-dev/vitest#11430\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/30d0304d2\"\u003e\u003c!-- raw HTML omitted --\u003e(30d03)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable fsModuleCache by default  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11435\"\u003evitest-dev/vitest#11435\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/ad208cc29\"\u003e\u003c!-- raw HTML omitted --\u003e(ad208)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrack project files and mocks with --changed  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11432\"\u003evitest-dev/vitest#11432\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9\"\u003e\u003c!-- raw HTML omitted --\u003e(b0f2b)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor caching, fix \u003ccode\u003e:\u003c/code\u003e in project and change the shape of \u003ccode\u003eresults\u003c/code\u003e cache  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11453\"\u003evitest-dev/vitest#11453\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/9673c49a4\"\u003e\u003c!-- raw HTML omitted --\u003e(9673c)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKeep full \u003ccode\u003e$\u003c/code\u003e string values when \u003ccode\u003etaskTitleValueFormatTruncate\u003c/code\u003e is 0  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11485\"\u003evitest-dev/vitest#11485\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4f7e1799b\"\u003e\u003c!-- raw HTML omitted --\u003e(4f7e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve node builtins in client environments  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11417\"\u003evitest-dev/vitest#11417\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/56b319ac6\"\u003e\u003c!-- raw HTML omitted --\u003e(56b31)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix module graph builtin externals after \u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11421\"\u003e#11421\u003c/a\u003e  -  by \u003ca href=\"https://github.com/hi-ogawa\"\u003e\u003ccode\u003e@​hi-ogawa\u003c/code\u003e\u003c/a\u003e, \u003cstrong\u003eHiroshi Ogawa\u003c/strong\u003e and \u003cstrong\u003eClaude Opus 5.5\u003c/strong\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11491\"\u003evitest-dev/vitest#11491\u003c/a\u003e and \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11421\"\u003evitest-dev/vitest#11421\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/008e184cb\"\u003e\u003c!-- raw HTML omitted --\u003e(008e1)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWrap module mocks during in-source testing  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11505\"\u003evitest-dev/vitest#11505\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00\"\u003e\u003c!-- raw HTML omitted --\u003e(36d19)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHandle line endings in snapshot  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11522\"\u003evitest-dev/vitest#11522\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/4c468aa40\"\u003e\u003c!-- raw HTML omitted --\u003e(4c468)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRespect root in projects  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11521\"\u003evitest-dev/vitest#11521\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/26642f793\"\u003e\u003c!-- raw HTML omitted --\u003e(26642)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve mocks in directories with spaces  -  by \u003ca href=\"https://github.com/sheremet-va\"\u003e\u003ccode\u003e@​sheremet-va\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11539\"\u003evitest-dev/vitest#11539\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/caaef9416\"\u003e\u003c!-- raw HTML omitted --\u003e(caaef)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi\u003c/strong\u003e:\n\u003cul\u003e\n\u003cli\u003ePublish the api token atomically  -  by \u003ca href=\"https://github.com/umairnawaz333\"\u003e\u003ccode\u003e@​umairnawaz333\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/vitest-dev/vitest/issues/11323\"\u003evitest-dev/vitest#11323\u003c/a\u003e \u003ca href=\"https://github.com/vitest-dev/vitest/commit/6f990fef1\"\u003e\u003c!-- raw HTML omitted --\u003e(6f990)\u003c!-- raw HTML omitted --\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ebrowser\u003c/strong\u003e:\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7\"\u003e\u003ccode\u003e7a825db\u003c/code\u003e\u003c/a\u003e chore: release v5.0.5 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11609\"\u003e#11609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40\"\u003e\u003ccode\u003e6a11cf6\u003c/code\u003e\u003c/a\u003e chore: release v5.0.4 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11554\"\u003e#11554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de\"\u003e\u003ccode\u003e58c86ed\u003c/code\u003e\u003c/a\u003e chore(deps): update all non-major dependencies (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11550\"\u003e#11550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/5c95521730bbc58ab20052f7ff807c29a8fbeb65\"\u003e\u003ccode\u003e5c95521\u003c/code\u003e\u003c/a\u003e fix(browser): clean up unmocked and pending mocks (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11537\"\u003e#11537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/cd423ba045ed50662ea8e7bf7c2373e876cc0e5e\"\u003e\u003ccode\u003ecd423ba\u003c/code\u003e\u003c/a\u003e fix(mocker): fix native loader mocking edge cases (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11540\"\u003e#11540\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/36d19cb00ec0f241820b7d885e37e84a61abba2c\"\u003e\u003ccode\u003e36d19cb\u003c/code\u003e\u003c/a\u003e fix: wrap module mocks during in-source testing (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11505\"\u003e#11505\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/fe025b26616904c1e35636cb43b74ceb41002c41\"\u003e\u003ccode\u003efe025b2\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency msw to v3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11482\"\u003e#11482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/b0f2b3bb9d81007cc10390da5d802e5d673e7b9e\"\u003e\u003ccode\u003eb0f2b3b\u003c/code\u003e\u003c/a\u003e fix: track project files and mocks with --changed (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11432\"\u003e#11432\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75\"\u003e\u003ccode\u003e33cadea\u003c/code\u003e\u003c/a\u003e chore: release v5.0.3 (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11409\"\u003e#11409\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35\"\u003e\u003ccode\u003e15cc006\u003c/code\u003e\u003c/a\u003e fix: don't print an interceptor warning in browser mode (\u003ca href=\"https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker/issues/11377\"\u003e#11377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099\"\u003e\u003ccode\u003ef341015\u003c/code\u003e\u003c/a\u003e 5.0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\"\u003e\u003ccode\u003e33a5ef1\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568\"\u003e\u003ccode\u003e8247927\u003c/code\u003e\u003c/a\u003e 5.0.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c\"\u003e\u003ccode\u003e935d78f\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f\"\u003e\u003ccode\u003edf7682f\u003c/code\u003e\u003c/a\u003e 5.0.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02\"\u003e\u003ccode\u003e1ade9de\u003c/code\u003e\u003c/a\u003e npm run format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3\"\u003e\u003ccode\u003e6735c94\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18\"\u003e\u003ccode\u003e4e70465\u003c/code\u003e\u003c/a\u003e chore: ensure prettier formatting (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/154\"\u003e#154\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff\"\u003e\u003ccode\u003efd7a5e3\u003c/code\u003e\u003c/a\u003e Bump ip-address from 10.2.0 to 10.4.0 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/152\"\u003e#152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4\"\u003e\u003ccode\u003e1790143\u003c/code\u003e\u003c/a\u003e Bump uuid and \u003ccode\u003e@​tapjs/processinfo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/120\"\u003e#120\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `browserslist` from 4.24.2 to 4.29.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/releases\"\u003ebrowserslist's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution (by \u003ca href=\"https://github.com/chluo1997\"\u003e\u003ccode\u003e@​chluo1997\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved Baseline warning since we have it own warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.27.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eBROWSERSLIST_TRACE_WARNING\u003c/code\u003e environment variable.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.26.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003ethrowOnMissing\u003c/code\u003e with \u003ccode\u003eextends\u003c/code\u003e query (by \u003ca href=\"https://github.com/alexander-akait\"\u003e\u003ccode\u003e@​alexander-akait\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md\"\u003ebrowserslist's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.29.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated Firefox ESR.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed ignoring \u003ccode\u003enull\u003c/code\u003e usage in \u003ccode\u003ecover X in Y\u003c/code\u003e query (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed config name loading protection on Windows (by \u003ca href=\"https://github.com/oss-security-shop\"\u003e\u003ccode\u003e@​oss-security-shop\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed case-insensitive negation queries (by \u003ca href=\"https://github.com/jakezwang\"\u003e\u003ccode\u003e@​jakezwang\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed percentage and supports queries case-insensitive (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed old Node.js tests (by \u003ca href=\"https://github.com/aaron-belenky\"\u003e\u003ccode\u003e@​aaron-belenky\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eReduced code (by \u003ca href=\"https://github.com/charmander\"\u003e\u003ccode\u003e@​charmander\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.29.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded query continuations across lines and array entries (by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.9\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003eor\u003c/code\u003e parsing performance (by \u003ca href=\"https://github.com/NotAFlightRisk\"\u003e\u003ccode\u003e@​NotAFlightRisk\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.8\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eincluding kaios\u003c/code\u003e in baseline queries (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved parsing performance.\u003c/li\u003e\n\u003cli\u003eFixed unbounded memory growth (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed prototype write issue (by \u003ca href=\"https://github.com/alanturing881\"\u003e\u003ccode\u003e@​alanturing881\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed Electron version queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003e\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026gt;=\u003c/code\u003e queries (by \u003ca href=\"https://github.com/spokodev\"\u003e\u003ccode\u003e@​spokodev\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eSyntaxError\u003c/code\u003e regression of 4.28.3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.28.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed baseline query case-insensitivity (by \u003ca href=\"https://github.com/swwind\"\u003e\u003ccode\u003e@​swwind\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/b4809dd2a2a11fbff492258f968130e9b470067f\"\u003e\u003ccode\u003eb4809dd\u003c/code\u003e\u003c/a\u003e Release 4.29.3 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/9d844f8d09c872e2f22e07daa8566fb53585c190\"\u003e\u003ccode\u003e9d844f8\u003c/code\u003e\u003c/a\u003e Update Firefox ESR\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/0033f344c3be446c935f9e515a366738fc0942a5\"\u003e\u003ccode\u003e0033f34\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/906d329968d968479474aab97ae2ab712bf18b5f\"\u003e\u003ccode\u003e906d329\u003c/code\u003e\u003c/a\u003e Release 4.29.2 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/ff8c83f72dd22e3331e89404487a19ec4ea6d5fc\"\u003e\u003ccode\u003eff8c83f\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/067f4a1fa37047e8a53b369cb1fd837399f5d5d5\"\u003e\u003ccode\u003e067f4a1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/952\"\u003e#952\u003c/a\u003e from wahidrizka/fix-cover-null-usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/f760921db5e420bd8c10e31d0278ab16fdbb9a2d\"\u003e\u003ccode\u003ef760921\u003c/code\u003e\u003c/a\u003e Do not add versions without usage data to cover queries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5be63f54fc37cef2db22930bdabfafcb22b6fd46\"\u003e\u003ccode\u003e5be63f5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/browserslist/browserslist/issues/953\"\u003e#953\u003c/a\u003e from wahidrizka/docs-android-latest-version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/1e5356f16429cb8a30dfa5415c7d0beddff8548f\"\u003e\u003ccode\u003e1e5356f\u003c/code\u003e\u003c/a\u003e Note that Android version queries return only the latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/browserslist/browserslist/commit/5b7e94169750cedd9e63fdb8d2419542d3aa185f\"\u003e\u003ccode\u003e5b7e941\u003c/code\u003e\u003c/a\u003e Add missed changes to ChangeLog\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/browserslist/browserslist/compare/4.24.2...4.29.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for browserslist since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-copy` from 4.0.2 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/releases\"\u003efast-copy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd test cases requested from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/152\"\u003e#152\u003c/a\u003e) (721c4a1)\u003c/li\u003e\n\u003cli\u003ePreserve own \u003cstrong\u003eproto\u003c/strong\u003e properties when copying objects (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/147\"\u003e#147\u003c/a\u003e) (3606924)\u003c/li\u003e\n\u003cli\u003eupdate CHANGELOG (0315cda)\u003c/li\u003e\n\u003cli\u003e[Documentaion] Loose array copies do not maintain sparseness (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/151\"\u003e#151\u003c/a\u003e) (fca2350)\u003c/li\u003e\n\u003cli\u003e[Cleanup] Test suite cleanup from \u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e (cac4371)\u003c/li\u003e\n\u003cli\u003efix: preserve Date own properties in strict copies (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/150\"\u003e#150\u003c/a\u003e) (ec1ff4f)\u003c/li\u003e\n\u003cli\u003eHandle non-function prototype constructors when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/146\"\u003e#146\u003c/a\u003e) (07333a5)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.7.0 to 10.7.3 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/145\"\u003e#145\u003c/a\u003e) (0851ef5)\u003c/li\u003e\n\u003cli\u003eBump serialize-javascript from 7.1.1 to 7.1.2 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/144\"\u003e#144\u003c/a\u003e) (87936ba)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate CHANGELOG (2c19569)\u003c/li\u003e\n\u003cli\u003e[Bugfix] Preserve DataView byte offset and length when copying (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/143\"\u003e#143\u003c/a\u003e) (851526c)\u003c/li\u003e\n\u003cli\u003edocs: correct strict and recursive copier examples (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/142\"\u003e#142\u003c/a\u003e) (3b447e0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Bugfix] Audit for edge-case gaps (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/141\"\u003e#141\u003c/a\u003e) (decb094)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/140\"\u003e#140\u003c/a\u003e) (74edf81)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Security] Unbounded recursion on deep instances (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/137\"\u003e#137\u003c/a\u003e) (caa7caa)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Enhancement] Micro-optimizations (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/136\"\u003e#136\u003c/a\u003e) (ceb5366)\u003c/li\u003e\n\u003cli\u003e[Maintenance] Update build tools (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/135\"\u003e#135\u003c/a\u003e) (949215c)\u003c/li\u003e\n\u003cli\u003eBump the npm_and_yarn group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/134\"\u003e#134\u003c/a\u003e) (5acb8f5)\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.2 to 7.3.5 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/133\"\u003e#133\u003c/a\u003e) (572108e)\u003c/li\u003e\n\u003cli\u003eBump postcss from 8.5.9 to 8.5.14 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/132\"\u003e#132\u003c/a\u003e) (e82e93c)\u003c/li\u003e\n\u003cli\u003eBump ip-address from 10.1.0 to 10.2.0 in the npm_and_yarn group across 1 directory (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/131\"\u003e#131\u003c/a\u003e) (c0a0a45)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 4.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Issue 128] Incorrect bigint arrays (\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/issues/130\"\u003e#130\u003c/a\u003e) (61cf3b2)\u003c/li\u003e\n\u003cli\u003eremove blurb about copying generators (91f692f)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/planttheidea/fast-copy/blob/main/CHANGELOG.md\"\u003efast-copy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/150\"\u003e#150\u003c/a\u003e - Preserve own \u003ccode\u003eDate\u003c/code\u003e properties in \u003ccode\u003estrict\u003c/code\u003e mode (thanks\n\u003ca href=\"https://github.com/xiehuanyi\"\u003e\u003ccode\u003e@​xiehuanyi\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/146\"\u003e#146\u003c/a\u003e - Ensure \u003ccode\u003eConstructor\u003c/code\u003e is a function before performing\nnative code check, preventing edge case throw condition (thanks \u003ca href=\"https://github.com/fhgffy\"\u003e\u003ccode\u003e@​fhgffy\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/147\"\u003e#147\u003c/a\u003e - Preserve own \u003ccode\u003e__proto__\u003c/code\u003e properties when copying objects\n(thanks \u003ca href=\"https://github.com/feritcemkahraman\"\u003e\u003ccode\u003e@​feritcemkahraman\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/143\"\u003e#143\u003c/a\u003e - Preserve the \u003ccode\u003ebyteOffset\u003c/code\u003e and \u003ccode\u003ebyteLength\u003c/code\u003e of a copied\n\u003ccode\u003eDataView\u003c/code\u003e. The copy previously covered the entire backing buffer, so a view over part of a buffer read from the wrong\nposition, and reads beyond its original bounds no longer threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/pralav-25\"\u003e\u003ccode\u003e@​pralav-25\u003c/code\u003e\u003c/a\u003e for identifying and fixing this.\u003c/p\u003e\n\u003ch2\u003e4.1.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Copy the contents of a \u003ccode\u003eBuffer\u003c/code\u003e into memory it owns,\ninstead of returning a view over the original's memory. \u003ccode\u003eBuffer\u003c/code\u003e overrides \u003ccode\u003eslice\u003c/code\u003e with one that does not copy, so\nmutating the copy previously mutated the original.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/141\"\u003e#141\u003c/a\u003e - Use a \u003ccode\u003enull\u003c/code\u003e prototype for the internal map of\ntag-specific copiers, so that a value carrying a custom \u003ccode\u003eSymbol.toStringTag\u003c/code\u003e cannot resolve to an inherited\n\u003ccode\u003eObject.prototype\u003c/code\u003e member as its copier. Tags such as \u003ccode\u003etoString\u003c/code\u003e, \u003ccode\u003evalueOf\u003c/code\u003e, or \u003ccode\u003ehasOwnProperty\u003c/code\u003e previously produced a\ngarbage copy or threw.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Add \u003ccode\u003emaxDepth\u003c/code\u003e option to \u003ccode\u003ecreateCopier\u003c/code\u003e, bounding the\nnumber of nested objects traversed (defaults to \u003ccode\u003e1000\u003c/code\u003e, pass \u003ccode\u003eInfinity\u003c/code\u003e to traverse without a limit)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/planttheidea/fast-copy/pull/137\"\u003e#137\u003c/a\u003e - Throw the new \u003ccode\u003eMaxDepthExceededError\u003c/code\u003e when a value is\nnested more deeply than \u003ccode\u003emaxDepth\u003c/code\u003e, instead of exhausting the call stack with a native \u003ccode\u003eRangeError\u003c/code\u003e; the error extends\n\u003ccode\u003eRangeError\u003c/code\u003e, so existing handling continues to work\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/lenny-ts\"\u003e\u003ccode\u003e@​lenny-ts\u003c/code\u003e\u003c/a\u003e for identifying this.\u003c/p\u003e\n\u003ch3\u003eInternal changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eState\u003c/code\u003e object passed to custom \u003ccode\u003emethods\u003c/code\u003e now includes a \u003ccode\u003edepth\u003c/code\u003e property. This is maintained internally and\nshould not be modified, but it is a required property on the exported \u003ccode\u003eState\u003c/code\u003e type, so any code constructing a \u003ccode\u003eState\u003c/code\u003e\ndirectly (such as a test mock) will need to provide it.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/commit/5c4e3acd3189d7919bcfd4bcf0041e0174cc31ff\"\u003e\u003ccode\u003e5c4e3ac\u003c/code\u003e\u003c/a\u003e Release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/planttheidea/fast-copy/comm...\n\n_Description has been truncated_","html_url":"https://github.com/xavisavvy/toa-website/pull/55","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/xavisavvy%2Ftoa-website/issues/55","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/55/packages"}},{"old_version":"1.8.3","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T10:24:37.000Z","version_change":"1.8.3 → 1.12.0","issue":{"uuid":"5897386751","node_id":"PR_kwDOUu4rk88AAAABJAU-eQ","number":2,"state":"open","title":"Bump the npm_and_yarn group across 2 directories with 23 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-17T10:24:37.000Z","updated_at":"2026-10-17T10:24:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":23,"packages":[{"name":"multer","old_version":"2.1.1","new_version":"2.4.0","repository_url":"https://github.com/expressjs/multer"},{"name":"postcss","old_version":"8.5.6","new_version":"8.5.30","repository_url":"https://github.com/postcss/postcss"},{"name":"vite","old_version":"7.3.0","new_version":"7.3.7","repository_url":"https://github.com/vitejs/vite"},{"name":"@babel/core","old_version":"7.28.5","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.29.0","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"@humanfs/node","old_version":"0.16.7","new_version":"0.16.8","repository_url":"https://github.com/humanwhocodes/humanfs"},{"name":"brace-expansion","old_version":"1.1.12","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"minimatch","old_version":"3.1.2","new_version":"3.1.5","repository_url":"https://github.com/isaacs/minimatch"},{"name":"picomatch","old_version":"4.0.3","new_version":"4.0.7","repository_url":"https://github.com/micromatch/picomatch"},{"name":"picomatch","old_version":"2.3.1","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"baseline-browser-mapping","old_version":"2.9.11","new_version":"2.11.29","repository_url":"https://github.com/web-platform-dx/baseline-browser-mapping"},{"name":"body-parser","old_version":"2.2.2","new_version":"2.3.0","repository_url":"https://github.com/expressjs/body-parser"},{"name":"browserslist","old_version":"4.28.1","new_version":"4.29.3","repository_url":"https://github.com/browserslist/browserslist"},{"name":"esbuild","old_version":"0.27.2","new_version":"0.28.2","repository_url":"https://github.com/evanw/esbuild"},{"name":"fflate","old_version":"0.8.2","new_version":"0.8.3","repository_url":"https://github.com/101arrowz/fflate"},{"name":"flatted","old_version":"3.3.3","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"js-yaml","old_version":"4.1.1","new_version":"4.3.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"nanoid","old_version":"3.3.11","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"postcss-selector-parser","old_version":"6.1.2","new_version":"removed","repository_url":"https://github.com/postcss/postcss-selector-parser"},{"name":"qs","old_version":"6.15.1","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"rollup","old_version":"4.55.1","new_version":"4.64.7","repository_url":"https://github.com/rollup/rollup"},{"name":"shell-quote","old_version":"1.8.3","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"uuid","old_version":"10.0.0","new_version":"removed","repository_url":"https://github.com/uuidjs/uuid"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 23 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.4.0` |\n| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.30` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.0` | `7.3.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.5` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.29.0` | `7.29.8` |\n| [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.7` | `0.16.8` |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.21` |\n| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |\n| [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.7` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.9.11` | `2.11.29` |\n| [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.29.3` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.28.2` |\n| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.4` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n| [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `6.1.2` | `removed` |\n| [qs](https://github.com/ljharb/qs) | `6.15.1` | `6.16.1` |\n| [rollup](https://github.com/rollup/rollup) | `4.55.1` | `4.64.7` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.12.0` |\n| [uuid](https://github.com/uuidjs/uuid) | `10.0.0` | `removed` |\n\nBumps the npm_and_yarn group with 7 updates in the /artifacts/mockup-sandbox directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [postcss](https://github.com/postcss/postcss) | `8.5.12` | `8.5.30` |\n| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `7.3.7` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |\n| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.23` | `2.11.29` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.28.2` | `4.29.3` |\n| [esbuild](https://github.com/evanw/esbuild) | `0.27.7` | `0.28.2` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` |\n\n\nUpdates `multer` from 2.1.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/multer/releases\"\u003emulter's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eHighlights\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003emulter finally supports Google Cloud Functions and Firebase 🎉\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThese platforms read the request body before your code runs, so multer's classic \u003ccode\u003ereq.pipe(busboy)\u003c/code\u003e received nothing: empty \u003ccode\u003ereq.body\u003c/code\u003e, empty \u003ccode\u003ereq.files\u003c/code\u003e, and nearly a decade of duplicated issues.\u003c/p\u003e\n\u003cp\u003eThe new \u003ccode\u003estreamHandler\u003c/code\u003e option closes that gap: you decide how the body reaches the parser, so the pre-read \u003ccode\u003erawBody\u003c/code\u003e just works (see image).\u003c/p\u003e\n\u003cpre lang=\"js\"\u003e\u003ccode\u003econst multer = require('multer')\r\n\u003cp\u003econst upload = multer({\u003cbr /\u003e\nstorage: multer.memoryStorage(),\u003cbr /\u003e\nstreamHandler: (req, busboy) =\u0026gt; {\u003cbr /\u003e\n// Cloud Functions / Firebase expose the pre-read body here\u003cbr /\u003e\nif (req.rawBody) busboy.end(req.rawBody)\u003cbr /\u003e\nelse req.pipe(busboy)\u003cbr /\u003e\n}\u003cbr /\u003e\n})\u003c/p\u003e\n\u003cp\u003eapp.post('/upload', upload.single('file'), (req, res) =\u0026gt; {\u003cbr /\u003e\nres.json({ name: req.file.originalname, size: req.file.size })\u003cbr /\u003e\n})\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cp\u003eThis landed thanks to community PRs going back to 2017; their authors are credited as co-authors in the release.\u003c/p\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-88932\"\u003eCVE-2026-88932\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34\"\u003eGHSA-3pph-fpjx-jg34\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: remove README translations by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1463\"\u003eexpressjs/multer#1463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add macOS to the test matrix by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1464\"\u003eexpressjs/multer#1464\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat. improve wording for LIMIT_UNEXPECTED_FILE error code by \u003ca href=\"https://github.com/flashbag\"\u003e\u003ccode\u003e@​flashbag\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/426\"\u003eexpressjs/multer#426\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add filename to file errors by \u003ca href=\"https://github.com/UjjwalKumar239\"\u003e\u003ccode\u003e@​UjjwalKumar239\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1416\"\u003eexpressjs/multer#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: remove concat-stream dependency by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1356\"\u003eexpressjs/multer#1356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject non-integer fileSize limits by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1395\"\u003eexpressjs/multer#1395\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: allow exactly limits.parts parts by \u003ca href=\"https://github.com/deepakganesh78\"\u003e\u003ccode\u003e@​deepakganesh78\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1446\"\u003eexpressjs/multer#1446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: do not consume maxCount for files skipped by fileFilter by \u003ca href=\"https://github.com/Sagargupta16\"\u003e\u003ccode\u003e@​Sagargupta16\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1426\"\u003eexpressjs/multer#1426\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate all limits at construction time by \u003ca href=\"https://github.com/ShubhamOulkar\"\u003e\u003ccode\u003e@​ShubhamOulkar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1335\"\u003eexpressjs/multer#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: cover storage engine _removeFile invocation semantics by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1460\"\u003eexpressjs/multer#1460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: accept a function for limits by \u003ca href=\"https://github.com/hossein-zare\"\u003e\u003ccode\u003e@​hossein-zare\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1133\"\u003eexpressjs/multer#1133\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: add flush option to disk storage to fsync files before completion by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1458\"\u003eexpressjs/multer#1458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: expose busboy defCharset, highWaterMark and fileHwm options by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1465\"\u003eexpressjs/multer#1465\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: describe the file stream contract for storage engines by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1468\"\u003eexpressjs/multer#1468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/multer/blob/main/CHANGELOG.md\"\u003emulter's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-88932\"\u003eCVE-2026-88932\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34\"\u003eGHSA-3pph-fpjx-jg34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003efilename\u003c/code\u003e to \u003ccode\u003eLIMIT_FILE_SIZE\u003c/code\u003e and \u003ccode\u003eLIMIT_UNEXPECTED_FILE\u003c/code\u003e errors (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1416\"\u003e#1416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept a function for \u003ccode\u003elimits\u003c/code\u003e, called with the request, to set limits per request (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1133\"\u003e#1133\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd opt-in \u003ccode\u003eflush\u003c/code\u003e option to \u003ccode\u003eDiskStorage\u003c/code\u003e to fsync files before the callback runs (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1458\"\u003e#1458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExpose busboy's \u003ccode\u003edefCharset\u003c/code\u003e, \u003ccode\u003ehighWaterMark\u003c/code\u003e and \u003ccode\u003efileHwm\u003c/code\u003e options (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1465\"\u003e#1465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003estreamHandler\u003c/code\u003e option to feed busboy from pre-consumed bodies (Google Cloud Functions, Firebase) (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1466\"\u003e#1466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003emulter.diskStorage()\u003c/code\u003e to be called without options (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1471\"\u003e#1471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecode WHATWG-escaped characters (\u003ccode\u003e%0A\u003c/code\u003e, \u003ccode\u003e%0D\u003c/code\u003e, \u003ccode\u003e%22\u003c/code\u003e) in field names, matching \u003ccode\u003efile.originalname\u003c/code\u003e since 2.3.0: \u003ccode\u003ereq.body\u003c/code\u003e keys, \u003ccode\u003efile.fieldname\u003c/code\u003e and \u003ccode\u003eerr.field\u003c/code\u003e now carry the real name. If you matched the escaped spelling as a workaround, use the real name now (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1473\"\u003e#1473\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReport the decoded filename in \u003ccode\u003eerr.filename\u003c/code\u003e on \u003ccode\u003eLIMIT_FILE_SIZE\u003c/code\u003e errors, matching \u003ccode\u003efile.originalname\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject non-integer or negative \u003ccode\u003elimits\u003c/code\u003e values at construction time; a float limit silently disabled the check (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1395\"\u003e#1395\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1335\"\u003e#1335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept requests with exactly \u003ccode\u003elimits.parts\u003c/code\u003e parts; \u003ccode\u003eLIMIT_PART_COUNT\u003c/code\u003e now fires only when the limit is exceeded. If you set \u003ccode\u003eparts\u003c/code\u003e one higher to work around this, you can drop the extra one (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1446\"\u003e#1446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFiles skipped by \u003ccode\u003efileFilter\u003c/code\u003e no longer count towards \u003ccode\u003emaxCount\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1426\"\u003e#1426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eChange the \u003ccode\u003eLIMIT_UNEXPECTED_FILE\u003c/code\u003e message to \u0026quot;Unexpected file field\u0026quot; (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/426\"\u003e#426\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove the \u003ccode\u003econcat-stream\u003c/code\u003e dependency (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1356\"\u003e#1356\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add JSDoc to the public API and document the storage engine stream contract (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1467\"\u003e#1467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1468\"\u003e#1468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add FormData upload examples (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/896\"\u003e#896\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: remove the translated READMEs (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1463\"\u003e#1463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInternal: run the test suite on macOS (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1464\"\u003e#1464\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77078\"\u003eCVE-2026-77078\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-wc9g-mqfw-jrwm\"\u003eGHSA-wc9g-mqfw-jrwm\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77037\"\u003eCVE-2026-77037\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-qfvm-cv95-jqjf\"\u003eGHSA-qfvm-cv95-jqjf\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-77063\"\u003eCVE-2026-77063\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-qvfw-j98x-7q72\"\u003eGHSA-qvfw-j98x-7q72\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-82333\"\u003eCVE-2026-82333\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-535w-7cp7-47q4\"\u003eGHSA-535w-7cp7-47q4\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMulterError\u003c/code\u003e codes \u003ccode\u003eINVALID_FIELD_NAME\u003c/code\u003e and \u003ccode\u003eSTREAM_DESTROYED\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd opt-in \u003ccode\u003elimits.fieldArrayIndexLimit\u003c/code\u003e to bound numeric array indexes in field names (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1438\"\u003e#1438\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept files whose size is exactly \u003ccode\u003elimits.fileSize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1407\"\u003e#1407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve the caller's async context (\u003ccode\u003eAsyncLocalStorage\u003c/code\u003e) when calling \u003ccode\u003enext()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecode WHATWG-escaped characters (\u003ccode\u003e%0A\u003c/code\u003e, \u003ccode\u003e%0D\u003c/code\u003e, \u003ccode\u003e%22\u003c/code\u003e) in \u003ccode\u003efile.originalname\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1421\"\u003e#1421\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not crash when \u003ccode\u003efileFilter\u003c/code\u003e invokes its callback more than once (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1427\"\u003e#1427\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse a fallback message for \u003ccode\u003eMulterError\u003c/code\u003e codes without a mapping (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1448\"\u003e#1448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: clarify \u003ccode\u003epreservePath\u003c/code\u003e and \u003ccode\u003eparts\u003c/code\u003e, use \u003ccode\u003ecrypto.randomBytes\u003c/code\u003e in the \u003ccode\u003eDiskStorage\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1414\"\u003e#1414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1430\"\u003e#1430\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1436\"\u003e#1436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocs: add Indonesian, Japanese and Tamil translations and refresh all translations from the current README (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1431\"\u003e#1431\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1354\"\u003e#1354\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1462\"\u003e#1462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInternal: run the test suite on Windows (\u003ca href=\"https://redirect.github.com/expressjs/multer/pull/1334\"\u003e#1334\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5038\"\u003eCVE-2026-5038\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-3p4h-7m6x-2hcm\"\u003eGHSA-3p4h-7m6x-2hcm\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5079\"\u003eCVE-2026-5079\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/multer/security/advisories/GHSA-72gw-mp4g-v24j\"\u003eGHSA-72gw-mp4g-v24j\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/35979e5afbb814bdb4b750ce028b125eb84c53af\"\u003e\u003ccode\u003e35979e5\u003c/code\u003e\u003c/a\u003e 2.4.0 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1469\"\u003e#1469\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/b888532fe2e10ceb13da44286448cb2bb4ce9720\"\u003e\u003ccode\u003eb888532\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/upload-sarif to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1474\"\u003e#1474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/e6bcd7db69315714fb9a38b1cd1e0f582cbce65a\"\u003e\u003ccode\u003ee6bcd7d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1475\"\u003e#1475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/00dec43b394c5bfaf4efb6d0fe8467bad05525ed\"\u003e\u003ccode\u003e00dec43\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1476\"\u003e#1476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/8d5c3b72e430e7edaa2749e96dcb75bf18d84733\"\u003e\u003ccode\u003e8d5c3b7\u003c/code\u003e\u003c/a\u003e feat: allow diskStorage without options (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1471\"\u003e#1471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/02f6e8265b6bf6b6921a819db3b84276efa03ed2\"\u003e\u003ccode\u003e02f6e82\u003c/code\u003e\u003c/a\u003e fix: report the decoded filename on LIMIT_FILE_SIZE (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1478\"\u003e#1478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/bc3f72d5edaa19b993771348e3fb47b366316a88\"\u003e\u003ccode\u003ebc3f72d\u003c/code\u003e\u003c/a\u003e fix: decode escaped field names, not just filenames (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1473\"\u003e#1473\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/2661325ba8ca2a72b7fb554b63d2df51da9290c4\"\u003e\u003ccode\u003e2661325\u003c/code\u003e\u003c/a\u003e docs: add JSDoc to the public API (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1467\"\u003e#1467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/53337f9713619ef3381ee6b4e541f926dbaac305\"\u003e\u003ccode\u003e53337f9\u003c/code\u003e\u003c/a\u003e fix: remove late-completing uploads aborted before the engine names them\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/multer/commit/7f2c9ab5f35c0478a7b3bb0f5e1af9b536780132\"\u003e\u003ccode\u003e7f2c9ab\u003c/code\u003e\u003c/a\u003e feat: add streamHandler option to feed busboy from pre-consumed bodies (\u003ca href=\"https://redirect.github.com/expressjs/multer/issues/1466\"\u003e#1466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/multer/compare/v2.1.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for multer since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postcss` from 8.5.6 to 8.5.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/releases\"\u003epostcss's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix broken map on \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/Rufflet\"\u003e\u003ccode\u003e@​Rufflet\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.29\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/choudhryfrompak\"\u003e\u003ccode\u003e@​choudhryfrompak\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed comments support in \u003ccode\u003elist.comma()\u003c/code\u003e and \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed semicolon and custom property (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.28\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes types regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.27\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed removing any comments starting with \u003ccode\u003e/*#\u003c/code\u003e (by \u003ca href=\"https://github.com/dylanpulver\"\u003e\u003ccode\u003e@​dylanpulver\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003e*\u003c/code\u003e hack before a comment in Custom Properties (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed empty values in the middle of \u003ccode\u003elist.comma()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespace-only values in \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed rule’s end position on space before semicolon (by \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed Chinese text in deprecation warning (by \u003ca href=\"https://github.com/Jesse205\"\u003e\u003ccode\u003e@​Jesse205\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.26\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e regression (by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTrack symlinks in path protection in source map loading (by \u003ca href=\"https://github.com/drengir1\"\u003e\u003ccode\u003e@​drengir1\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed 8.5.17 visitor regression.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e for non-string values (by \u003ca href=\"https://github.com/amir-rezaei\"\u003e\u003ccode\u003e@​amir-rezaei\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve the BOM after the processing (by \u003ca href=\"https://github.com/hdimer\"\u003e\u003ccode\u003e@​hdimer\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed missing space if \u003ccode\u003eAtRule#params\u003c/code\u003e is set after (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed mixing AST error on warnings (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.19\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed cleaning \u003ccode\u003ebefore\u003c/code\u003e for new nodes inserted to \u003ccode\u003eRoot\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.18\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestricted loading previous source maps file to the \u003ccode\u003eopts.from\u003c/code\u003e folder for security reasons (use \u003ccode\u003eunsafeMap: true\u003c/code\u003e to disable the check).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/postcss/postcss/blob/main/CHANGELOG.md\"\u003epostcss's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e8.5.30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix broken map on \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/Rufflet\"\u003e\u003ccode\u003e@​Rufflet\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.29\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved \u003ccode\u003e\u0026lt;/style\u0026gt;\u003c/code\u003e escaping (by \u003ca href=\"https://github.com/choudhryfrompak\"\u003e\u003ccode\u003e@​choudhryfrompak\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed comments support in \u003ccode\u003elist.comma()\u003c/code\u003e and \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/00200200\"\u003e\u003ccode\u003e@​00200200\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed semicolon and custom property (by \u003ca href=\"https://github.com/wahidrizka\"\u003e\u003ccode\u003e@​wahidrizka\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.28\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixes types regression.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.27\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed removing any comments starting with \u003ccode\u003e/*#\u003c/code\u003e (by \u003ca href=\"https://github.com/dylanpulver\"\u003e\u003ccode\u003e@​dylanpulver\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003e*\u003c/code\u003e hack before a comment in Custom Properties (by \u003ca href=\"https://github.com/Jaybhade\"\u003e\u003ccode\u003e@​Jaybhade\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed empty values in the middle of \u003ccode\u003elist.comma()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed whitespace-only values in \u003ccode\u003elist.space()\u003c/code\u003e (by \u003ca href=\"https://github.com/MahinAnowar\"\u003e\u003ccode\u003e@​MahinAnowar\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed rule’s end position on space before semicolon (by \u003ca href=\"https://github.com/maximilliangrand\"\u003e\u003ccode\u003e@​maximilliangrand\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed types (by \u003ca href=\"https://github.com/romainmenke\"\u003e\u003ccode\u003e@​romainmenke\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed Chinese text in deprecation warning (by \u003ca href=\"https://github.com/Jesse205\"\u003e\u003ccode\u003e@​Jesse205\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.26\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e regression (by \u003ca href=\"https://github.com/lazerg\"\u003e\u003ccode\u003e@​lazerg\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTrack symlinks in path protection in source map loading (by \u003ca href=\"https://github.com/drengir1\"\u003e\u003ccode\u003e@​drengir1\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.25\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed 8.5.17 visitor regression.\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003elist.split()\u003c/code\u003e for non-string values (by \u003ca href=\"https://github.com/amir-rezaei\"\u003e\u003ccode\u003e@​amir-rezaei\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.24\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve the BOM after the processing (by \u003ca href=\"https://github.com/hdimer\"\u003e\u003ccode\u003e@​hdimer\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDo not load source map without \u003ccode\u003eopts.from\u003c/code\u003e for security reasons.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed custom property losing semicolon before a comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e8.5.21\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed childless at-rule losing semicolon before comment (by \u003ca href=\"https://github.com/sarathfrancis90\"\u003e\u003ccode\u003e@​sarathfrancis90\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed docs (by \u003ca href=\"https://github.com/isker\"\u003e\u003ccode\u003e@​isker\u003c/code\u003e\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/f1aca7ec68ab0cfb96cc9e69520a87f641c5a9e4\"\u003e\u003ccode\u003ef1aca7e\u003c/code\u003e\u003c/a\u003e Release 8.5.30 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/9d8344589299ca90f4ec0a4fab899e357995eaad\"\u003e\u003ccode\u003e9d83445\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/6c9bc73d9d2ad2c9c8e998ace707ebe067bc8425\"\u003e\u003ccode\u003e6c9bc73\u003c/code\u003e\u003c/a\u003e Fix invalid source map mapping on escaping before new line (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2169\"\u003e#2169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/1fd8f881875330b284d65961c2c158f61d4e3bab\"\u003e\u003ccode\u003e1fd8f88\u003c/code\u003e\u003c/a\u003e Add missed changes in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/a7a1f3476177d689dff722d3f9f72190ddf93f7e\"\u003e\u003ccode\u003ea7a1f34\u003c/code\u003e\u003c/a\u003e Release 8.5.29 version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/b55a36d14670cefa838b59a9b68c035b9619e294\"\u003e\u003ccode\u003eb55a36d\u003c/code\u003e\u003c/a\u003e Update dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7647a8107ebac8014f1a29ec7e06d3f6ab7c8ac6\"\u003e\u003ccode\u003e7647a81\u003c/code\u003e\u003c/a\u003e Escape \u0026lt;/style\u0026gt; in output of non-Root nodes (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2163\"\u003e#2163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/7ac902664902289ea0cb9d6b1096b81e8d33bbf5\"\u003e\u003ccode\u003e7ac9026\u003c/code\u003e\u003c/a\u003e Do not split list.comma() and list.space() on separators inside comments (\u003ca href=\"https://redirect.github.com/postcss/postcss/issues/2162\"\u003e#2162\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/ebffa97faa305f781a7df5a41ec39f57966b7b6c\"\u003e\u003ccode\u003eebffa97\u003c/code\u003e\u003c/a\u003e Add postcss-smooth-corners plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/postcss/postcss/commit/57d6401ccca6ce96c9fcdebbdfc30c1ce9e7e797\"\u003e\u003ccode\u003e57d6401\u003c/code\u003e\u003c/a\u003e Speed up source map cleaning\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/postcss/postcss/compare/8.5.6...8.5.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for postcss since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `vite` from 7.3.0 to 7.3.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/releases\"\u003evite's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.3.7\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.6\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.6/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.5\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.3\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.2\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003ch2\u003ev7.3.1\u003c/h2\u003e\n\u003cp\u003ePlease refer to \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e for details.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md\"\u003evite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.6...v7.3.7\"\u003e7.3.7\u003c/a\u003e (2026-10-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e update launch-editor to v2.14.2 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23654\"\u003e#23654\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a0a33391b1b02b61b5102dd2216934d83b678a73\"\u003ea0a3339\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ehtml:\u003c/strong\u003e filename passed to transformIndexHtml should not include queries (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23653\"\u003e#23653\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8d479f9dd8cbcb7631aac4a421e09ccd069d4786\"\u003e8d479f9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eserver:\u003c/strong\u003e store ids to \u003ccode\u003esafeModulePaths\u003c/code\u003e rather than URLs (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/23656\"\u003e#23656\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f0d76c7da13d5e794807b82f0b86c1931a8438e3\"\u003ef0d76c7\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.5...v7.3.6\"\u003e7.3.6\u003c/a\u003e (2026-06-25)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow esbuild 0.28 (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22743\"\u003e#22743\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/a24931e7934e80eff5895b89d9e612ad3ad3e1f4\"\u003ea24931e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.3...v7.3.5\"\u003e7.3.5\u003c/a\u003e (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22574\"\u003e#22574\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e8c18556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e backport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22573\"\u003e#22573\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003ef20d64b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eMiscellaneous Chores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eskip v7.3.4 release (\u003ca href=\"https://github.com/vitejs/vite/commit/8a6a0c9fc734dbfe293ac33a4954506ee50430e1\"\u003e8a6a0c9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.3...v7.3.4\"\u003e7.3.4\u003c/a\u003e (2026-06-01)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22574\"\u003e#22574\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e8c18556\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003edeps:\u003c/strong\u003e backport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22573\"\u003e#22573\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003ef20d64b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.2...v7.3.3\"\u003e7.3.3\u003c/a\u003e (2026-05-07)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid destructure lowering for newer safari (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22346\"\u003e#22346\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/5ab51c0f76f0896175e02ad797c1f5fe116d02f4\"\u003e5ab51c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.1...v7.3.2\"\u003e7.3.2\u003c/a\u003e (2026-04-06)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid path traversal with optimize deps sourcemap handler (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22161\"\u003e#22161\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7\"\u003e09d8c90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebackport \u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22159\"\u003e#22159\u003c/a\u003e, apply server.fs check to env transport (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22162\"\u003e#22162\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1\"\u003e19db0f2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003echeck \u003ccode\u003eserver.fs\u003c/code\u003e after stripping query as well (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/22160\"\u003e#22160\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6\"\u003ef8103cc\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003c!-- raw HTML omitted --\u003e\u003ca href=\"https://github.com/vitejs/vite/compare/v7.3.0...v7.3.1\"\u003e7.3.1\u003c/a\u003e (2026-01-07)\u003c!-- raw HTML omitted --\u003e\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eignoreOutdatedRequests\u003c/code\u003e option to \u003ccode\u003eoptimizeDeps\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/vitejs/vite/issues/21364\"\u003e#21364\u003c/a\u003e) (\u003ca href=\"https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e\"\u003e9d39d37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/284f6b58d6b511cebdd52ab7731975f385bf3c6b\"\u003e\u003ccode\u003e284f6b5\u003c/code\u003e\u003c/a\u003e release: v7.3.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f0d76c7da13d5e794807b82f0b86c1931a8438e3\"\u003e\u003ccode\u003ef0d76c7\u003c/code\u003e\u003c/a\u003e fix(server): store ids to \u003ccode\u003esafeModulePaths\u003c/code\u003e rather than URLs (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23656\"\u003e#23656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a0a33391b1b02b61b5102dd2216934d83b678a73\"\u003e\u003ccode\u003ea0a3339\u003c/code\u003e\u003c/a\u003e fix(deps): update launch-editor to v2.14.2 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23654\"\u003e#23654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8d479f9dd8cbcb7631aac4a421e09ccd069d4786\"\u003e\u003ccode\u003e8d479f9\u003c/code\u003e\u003c/a\u003e fix(html): filename passed to transformIndexHtml should not include queries (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/0a7b53ba230c6e68f502a89864534c607d393ab7\"\u003e\u003ccode\u003e0a7b53b\u003c/code\u003e\u003c/a\u003e release: v7.3.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/a24931e7934e80eff5895b89d9e612ad3ad3e1f4\"\u003e\u003ccode\u003ea24931e\u003c/code\u003e\u003c/a\u003e feat: allow esbuild 0.28 (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22743\"\u003e#22743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/077945cb60df372a52cf999b6e532ba70fac7423\"\u003e\u003ccode\u003e077945c\u003c/code\u003e\u003c/a\u003e release: v7.3.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8a6a0c9fc734dbfe293ac33a4954506ee50430e1\"\u003e\u003ccode\u003e8a6a0c9\u003c/code\u003e\u003c/a\u003e chore: skip v7.3.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/8c1855607b7c9884c4565d897ee98899a008a2d0\"\u003e\u003ccode\u003e8c18556\u003c/code\u003e\u003c/a\u003e fix: backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572\"\u003e#22572\u003c/a\u003e, reject windows alternate paths (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22574\"\u003e#22574\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vitejs/vite/commit/f20d64bef6e0ef1e4fa7a9783281c7bba0ce5292\"\u003e\u003ccode\u003ef20d64b\u003c/code\u003e\u003c/a\u003e fix(deps): backport \u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571\"\u003e#22571\u003c/a\u003e, reject UNC paths for launch-editor-middleware (\u003ca href=\"https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/2\"\u003e#2\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/vitejs/vite/commits/v7.3.7/packages/vite\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/core` from 7.28.5 to 7.29.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/core's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.3 (2026-04-30)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17923\"\u003e#17923\u003c/a\u003e Support flow extends bound (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-helper-create-class-features-plugin\u003c/code\u003e, \u003ccode\u003ebabel-plugin-proposal-decorators\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17931\"\u003e#17931\u003c/a\u003e fix(decorators): replace super within all removed static elements (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-register\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17915\"\u003e#17915\u003c/a\u003e Fix thread synchronization issues in \u003ccode\u003e@babel/register\u003c/code\u003e (\u003ca href=\"https://github.com/liuxingbaoyu\"\u003e\u003ccode\u003e@​liuxingbaoyu\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-compat-data\u003c/code\u003e, \u003ccode\u003ebabel-plugin-bugfix-safari-rest-destructuring-rhs-array\u003c/code\u003e, \u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17788\"\u003e#17788\u003c/a\u003e Add bugfix plugin for Safari array rest destructuring bug (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:nail_care: Polish\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-parser\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509\"\u003e\u003ccode\u003e04ea6b2\u003c/code\u003e\u003c/a\u003e v7.29.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb\"\u003e\u003ccode\u003e99f498a\u003c/code\u003e\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001\"\u003e#18001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc\"\u003e\u003ccode\u003efeba0a3\u003c/code\u003e\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998\"\u003e#17998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/aa8394e454337d118ac3d40bfa3ee1a3cb3f3ed2\"\u003e\u003ccode\u003eaa8394e\u003c/code\u003e\u003c/a\u003e v7.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/ad0d03f0c92404a60ec6b1c12f15febd38e2397a\"\u003e\u003ccode\u003ead0d03f\u003c/code\u003e\u003c/a\u003e [7.x backport] feat: Allow specifying startLine in code frame (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17739\"\u003e#17739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17\"\u003e\u003ccode\u003ed7f4008\u003c/code\u003e\u003c/a\u003e v7.28.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847\"\u003e\u003ccode\u003ee130225\u003c/code\u003e\u003c/a\u003e Polish(standalone): improve message on invalid preset/plugin (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606\"\u003e#17606\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177\"\u003e\u003ccode\u003e99dcba5\u003c/code\u003e\u003c/a\u003e chore: enable some ts-eslint rules (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592\"\u003e#17592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9\"\u003e\u003ccode\u003ec92c491\u003c/code\u003e\u003c/a\u003e Improve Unicode handling in code-frame tokenizer (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589\"\u003e#17589\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.7/packages/babel-core\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/babel/babel/releases\"\u003e@​babel/plugin-transform-modules-systemjs's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.29.8 (2026-07-31)\u003c/h2\u003e\n\u003ch4\u003e:eyeglasses: Spec Compliance\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e, \u003ccode\u003ebabel-parser\u003c/code\u003e, \u003ccode\u003ebabel-plugin-transform-spread\u003c/code\u003e, \u003ccode\u003ebabel-traverse\u003c/code\u003e, \u003ccode\u003ebabel-types\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17871\"\u003e#17871\u003c/a\u003e Disallow super call after new (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18046\"\u003e#18046\u003c/a\u003e fix(generator): improve new callee parens check (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-node\u003c/code\u003e, \u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18044\"\u003e#18044\u003c/a\u003e fix(systemjs): support \u003ccode\u003e__proto__\u003c/code\u003e as an export name (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 2\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.7 (2026-05-25)\u003c/h2\u003e\n\u003cp\u003eRe-release all packages with npm provenance attestations\u003c/p\u003e\n\u003ch2\u003ev7.29.6 (2026-05-25)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18014\"\u003e#18014\u003c/a\u003e Catchup source map position in preserveFormat (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/18001\"\u003e#18001\u003c/a\u003e [7.x packport]Improve input source map handling (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ebabel-core\u003c/code\u003e, \u003ccode\u003ebabel-generator\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17998\"\u003e#17998\u003c/a\u003e Preserve original identifier names from input sourcemaps (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17992\"\u003e#17992\u003c/a\u003e) (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 3\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMateusz Burzyński (\u003ca href=\"https://github.com/Andarist\"\u003e\u003ccode\u003e@​Andarist\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eNicolò Ribaudo (\u003ca href=\"https://github.com/nicolo-ribaudo\"\u003e\u003ccode\u003e@​nicolo-ribaudo\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.5 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:house:  Internal\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-preset-env\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@babel/*\u003c/code\u003e dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.29.4 (2026-05-05)\u003c/h2\u003e\n\u003ch4\u003e:bug: Bug Fix\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ebabel-plugin-transform-modules-systemjs\u003c/code\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/babel/babel/pull/17974\"\u003e#17974\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4\u003eCommitters: 1\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003eHuáng Jùnliàng (\u003ca href=\"https://github.com/JLHwung\"\u003e\u003ccode\u003e@​JLHwung\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/5de11ca9234379b78ef95df72aebbec93f28bf45\"\u003e\u003ccode\u003e5de11ca\u003c/code\u003e\u003c/a\u003e v7.29.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/f08d4342e1f189a56e7cee46e60a1817af96219e\"\u003e\u003ccode\u003ef08d434\u003c/code\u003e\u003c/a\u003e fix(systemjs): support \u003cstrong\u003eproto\u003c/strong\u003e as an export name (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/18044\"\u003e#18044\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090\"\u003e\u003ccode\u003e4fba754\u003c/code\u003e\u003c/a\u003e v7.29.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/a458f66074b97d54773db8159af673d23b26079b\"\u003e\u003ccode\u003ea458f66\u003c/code\u003e\u003c/a\u003e v7.29.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/babel/babel/commit/32ebd5aaf2526ddd176fd6a3d1e3dc594abdc8d9\"\u003e\u003ccode\u003e32ebd5a\u003c/code\u003e\u003c/a\u003e [7.x backport]fix(systemjs): improve module string name support (\u003ca href=\"https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs/issues/17974\"\u003e#17974\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `@humanfs/node` from 0.16.7 to 0.16.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/releases\"\u003e@​humanfs/node's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enode: v0.16.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md\"\u003e@​humanfs/node's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/compare/node-v0.16.7...node-v0.16.8\"\u003e0.16.8\u003c/a\u003e (2026-04-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure symlinks are copied as symlinks in \u003ccode\u003ecopy()\u003c/code\u003e and \u003ccode\u003ecopyAll()\u003c/code\u003e (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e22bbaa44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInclude type dependencies at runtime (\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e956ce7a\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/humanwhocodes/humanfs/issues/145\"\u003e#145\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eThe following workspace dependencies were updated\n\u003cul\u003e\n\u003cli\u003edependencies\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e@​humanfs/core\u003c/code\u003e bumped from ^0.19.1 to ^0.19.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/e96070e897f017ae8abd2b0676d98d14e49665cc\"\u003e\u003ccode\u003ee96070e\u003c/code\u003e\u003c/a\u003e chore: release main (\u003ca href=\"https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404\"\u003e\u003ccode\u003e22bbaa4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/humanwhocodes/humanfs/commit/956ce7aac2a998d0af23b7cb08e7630b69693138\"\u003e\u003ccode\u003e956ce7a\u003c/code\u003e\u003c/a\u003e fix: Include type dependencies at runtime\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 1.1.12 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/juliangruber/brace-expansion/releases\"\u003ebrace-expansion's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBackport v5.0.6 change to v1 (\u003ca href=\"https://redirect.github.com/juliangruber/brace-expansion/issues/111\"\u003e#111\u003c/a\u003e)  0b09384\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\"\u003ehttps://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b\"\u003e\u003ccode\u003e758fcd6\u003c/code\u003e\u003c/a\u003e 1.1.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e\"\u003e\u003ccode\u003e27fbeed\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf\"\u003e\u003ccode\u003e5c57cc2\u003c/code\u003e\u003c/a\u003e 1.1.17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57\"\u003e\u003ccode\u003ed757f1d\u003c/code\u003e\u003c/a\u003e npm ignore \u003ccode\u003e.claude\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `minimatch` from 3.1.2 to 3.1.5\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712\"\u003e\u003ccode\u003e7bba978\u003c/code\u003e\u003c/a\u003e 3.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d\"\u003e\u003ccode\u003ebd25942\u003c/code\u003e\u003c/a\u003e docs: add warning about ReDoS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d\"\u003e\u003ccode\u003e1a9c27c\u003c/code\u003e\u003c/a\u003e fix partial matching of globstar patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23\"\u003e\u003ccode\u003e1a2e084\u003c/code\u003e\u003c/a\u003e 3.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47\"\u003e\u003ccode\u003eae24656\u003c/code\u003e\u003c/a\u003e update lockfile\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e\"\u003e\u003ccode\u003eb100374\u003c/code\u003e\u003c/a\u003e limit recursion for **, improve perf considerably\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13\"\u003e\u003ccode\u003e26ffeaa\u003c/code\u003e\u003c/a\u003e lockfile update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb\"\u003e\u003ccode\u003e9eca892\u003c/code\u003e\u003c/a\u003e lock node version to 14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a\"\u003e\u003ccode\u003e00c323b\u003c/code\u003e\u003c/a\u003e 3.1.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b\"\u003e\u003ccode\u003e30486b2\u003c/code\u003e\u003c/a\u003e update CI matrix and actions\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `picomatch` from 4.0.3 to 4.0.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/releases\"\u003epicomatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle terminal globstars in parenthesized patterns by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/198\"\u003emicromatch/picomatch#198\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: scan full pattern when tokens are requested by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/197\"\u003emicromatch/picomatch#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return complete pattern parts from scan by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/199\"\u003emicromatch/picomatch#199\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: preserve all branches when rewriting risky repeated extglobs by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor the windows option when matching basenames by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003emicromatch/picomatch#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003cp\u003eThis is a security release fixing several security relevant issues.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md\"\u003epicomatch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed terminal globstars in parenthesized patterns (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/142\"\u003e#142\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7\"\u003ee279bd7\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.6 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/62\"\u003e#62\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819d\"\u003e5f5819d\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/58\"\u003e#58\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/f201165\"\u003ef201165\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.5 (2026-07-02)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserved every branch when safely rewriting repeated extglobs (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003e#182\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/6289307\"\u003e6289307\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHonored the \u003ccode\u003ewindows\u003c/code\u003e option when matching basenames (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003e#183\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/ab8bc4d\"\u003eab8bc4d\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.4 (2026-03-23)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevented regular expression denial of service (ReDoS) from crafted repeated or nested extglob quantifiers by safely rewriting or treating risky patterns as literals. The new \u003ccode\u003emaxExtglobRecursion\u003c/code\u003e option defaults to \u003ccode\u003e0\u003c/code\u003e; positive numeric values allow limited nesting, while \u003ccode\u003efalse\u003c/code\u003e disables the safeguard (\u003ca href=\"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5eceecd\"\u003e5eceecd\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePrevented inherited object properties from being interpreted as POSIX character classes (\u003ca href=\"https://github.com/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/4516eb5\"\u003e4516eb5\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/6bb40679c218cefba5d4e9662408c5fdf699a8bb\"\u003e\u003ccode\u003e6bb4067\u003c/code\u003e\u003c/a\u003e 4.0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/fdfb1559e4ef761f95c3009c1fd7afceb8830f55\"\u003e\u003ccode\u003efdfb155\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/198\"\u003e#198\u003c/a\u003e from micromatch/issue-142\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/38c6b7aefe50af10cfa978f362120d295d39cfa2\"\u003e\u003ccode\u003e38c6b7a\u003c/code\u003e\u003c/a\u003e 4.0.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/ada9d3fe9eb5a606bb4f6d87bc5cd7ac87fe63a4\"\u003e\u003ccode\u003eada9d3f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/199\"\u003e#199\u003c/a\u003e from micromatch/issue-58\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/9b74f6fc70ed828ea4ef7106833a31428b8d7329\"\u003e\u003ccode\u003e9b74f6f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/197\"\u003e#197\u003c/a\u003e from micromatch/issue-62\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/f2011653e8eaa13bae6dffed7e7016ea8e123485\"\u003e\u003ccode\u003ef201165\u003c/code\u003e\u003c/a\u003e fix: return complete pattern parts from scan\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7f34c4f8b5f9d0490cf7810a1f0c2de178\"\u003e\u003ccode\u003ee279bd7\u003c/code\u003e\u003c/a\u003e fix: handle terminal globstars in parenthesized patterns\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819dd4c0572c87df9a8011dffa65df5b6879f\"\u003e\u003ccode\u003e5f5819d\u003c/code\u003e\u003c/a\u003e fix: scan full pattern when tokens are requested\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/4f41a8edade7a5ab19832f7b40ecce46b288767f\"\u003e\u003ccode\u003e4f41a8e\u003c/code\u003e\u003c/a\u003e 4.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/micromatch/picomatch/commit/02cfc1bf912c79ea75ef1fe7da2ce4efade39903\"\u003e\u003ccode\u003e02cfc1b\u003c/code\u003e\u003c/a\u003e Update .verb.md and run verb to generate README documentation\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `picomatch` from 2.3.1 to 2.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/releases\"\u003epicomatch's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle terminal globstars in parenthesized patterns by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/198\"\u003emicromatch/picomatch#198\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.6...4.0.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: scan full pattern when tokens are requested by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/197\"\u003emicromatch/picomatch#197\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return complete pattern parts from scan by \u003ca href=\"https://github.com/mrmlnc\"\u003e\u003ccode\u003e@​mrmlnc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/199\"\u003emicromatch/picomatch#199\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.5...4.0.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: preserve all branches when rewriting risky repeated extglobs by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: honor the windows option when matching basenames by \u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003emicromatch/picomatch#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MerlijnW70\"\u003e\u003ccode\u003e@​MerlijnW70\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003emicromatch/picomatch#182\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.4...4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e4.0.4\u003c/h2\u003e\n\u003cp\u003eThis is a security release fixing several security relevant issues.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj\"\u003eCVE-2026-33671\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix for \u003ca href=\"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p\"\u003eCVE-2026-33672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\"\u003ehttps://github.com/micromatch/picomatch/compare/4.0.3...4.0.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md\"\u003epicomatch's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.0.7 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixed terminal globstars in parenthesized patterns (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/142\"\u003e#142\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/e279bd7\"\u003ee279bd7\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.6 (2026-08-24)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/62\"\u003e#62\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/5f5819d\"\u003e5f5819d\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003escan()\u003c/code\u003e now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/issues/58\"\u003e#58\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/f201165\"\u003ef201165\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.0.5 (2026-07-02)\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserved every branch when safely rewriting repeated extglobs (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/182\"\u003e#182\u003c/a\u003e, \u003ca href=\"https://github.com/micromatch/picomatch/commit/6289307\"\u003e6289307\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eHonored the \u003ccode\u003ewindows\u003c/code\u003e option when matching basenames (\u003ca href=\"https://redirect.github.com/micromatch/picomatch/pull/183\"\u003e#183\u003c/a\u003e, \u003ca href=\"htt...\n\n_Description has been truncated_","html_url":"https://github.com/jasonclarkagain/KimiAgentJacquelin-Memorial-Tribute-Site-2-1zip/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jasonclarkagain%2FKimiAgentJacquelin-Memorial-Tribute-Site-2-1zip/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"1.8.1","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-17T00:58:43.000Z","version_change":"1.8.1 → 1.12.0","issue":{"uuid":"5893342006","node_id":"PR_kwDOCr5FnM8AAAABI9NnAg","number":1165,"state":"closed","title":"chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-17T01:20:03.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-17T00:58:43.000Z","updated_at":"2026-10-17T01:20:05.000Z","time_to_close":1280,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm_and_yarn","update_count":21,"packages":[{"name":"mysql2","old_version":"2.1.0","new_version":"3.23.1","repository_url":"https://github.com/sidorares/node-mysql2"},{"name":"compression","old_version":"1.7.4","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"uuid","old_version":"8.3.1","new_version":"14.0.0","repository_url":"https://github.com/uuidjs/uuid"},{"name":"body-parser","old_version":"1.18.3","new_version":"1.20.6","repository_url":"https://github.com/expressjs/body-parser"},{"name":"morgan","old_version":"1.9.1","new_version":"1.12.1","repository_url":"https://github.com/expressjs/morgan"},{"name":"sequelize","old_version":"6.35.2","new_version":"6.37.4","repository_url":"https://github.com/sequelize/sequelize"},{"name":"js-yaml","old_version":"3.13.1","new_version":"3.15.2","repository_url":"https://github.com/nodeca/js-yaml"},{"name":"@babel/core","old_version":"7.16.12","new_version":"7.29.7","repository_url":"https://github.com/babel/babel"},{"name":"@babel/plugin-transform-modules-systemjs","old_version":"7.23.3","new_version":"7.29.8","repository_url":"https://github.com/babel/babel"},{"name":"browserslist","old_version":"4.19.1","new_version":"4.22.2","repository_url":"https://github.com/browserslist/browserslist"},{"name":"defu","old_version":"6.1.3","new_version":"6.1.7","repository_url":"https://github.com/unjs/defu"},{"name":"flatted","old_version":"3.2.5","new_version":"3.4.4","repository_url":"https://github.com/WebReflection/flatted"},{"name":"handlebars","old_version":"4.7.8","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"lodash","old_version":"4.17.21","new_version":"4.18.1","repository_url":"https://github.com/lodash/lodash"},{"name":"nanoid","old_version":"3.3.7","new_version":"3.3.20","repository_url":"https://github.com/ai/nanoid"},{"name":"picomatch","old_version":"2.2.2","new_version":"2.3.2","repository_url":"https://github.com/micromatch/picomatch"},{"name":"postcss","old_version":"8.4.32","new_version":"8.5.30","repository_url":"https://github.com/postcss/postcss"},{"name":"protocol-buffers-schema","old_version":"3.3.2","new_version":"3.6.1","repository_url":"https://github.com/mafintosh/protocol-buffers-schema"},{"name":"proxy-addr","old_version":"2.0.4","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"shell-quote","old_version":"1.8.1","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.0.2","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 21 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [mysql2](https://github.com/sidorares/node-mysql2) | `2.1.0` | `3.23.1` |\n| [compression](https://github.com/expressjs/compression) | `1.7.4` | `1.8.2` |\n| [uuid](https://github.com/uuidjs/uuid) | `8.3.1` | `14.0.0` |\n| [body-parser](https://github.com/expressjs/body-parser) | `1.18.3` | `1.20.6` |\n| [morgan](https://github.com/expressjs/morgan) | `1.9.1` | `1.12.1` |\n| [sequelize](https://github.com/sequelize/sequelize) | `6.35.2` | `6.37.4` |\n| [js-yaml](https://github.com/nodeca/js-yaml) | `3.13.1` | `3.15.2` |\n| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.16.12` | `7.29.7` |\n| [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.23.3` | `7.29.8` |\n| [browserslist](https://github.com/browserslist/browserslist) | `4.19.1` | `4.22.2` |\n| [defu](https://github.com/unjs/defu) | `6.1.3` | `6.1.7` |\n| [flatted](https://github.com/WebReflection/flatted) | `3.2.5` | `3.4.4` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.10` |\n| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |\n| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.20` |\n| [picomatch](https://github.com/micromatch/picomatch) | `2.2.2` | `2.3.2` |\n| [postcss](https://github.com/postcss/postcss) | `8.4.32` | `8.5.30` |\n| [protocol-buffers-schema](https://github.com/mafintosh/protocol-buffers-schema) | `3.3.2` | `3.6.1` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.4` | `2.0.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.1` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.0.2` | `1.2.2` |\n\nBumps the npm_and_yarn group with 1 update in the /docs/recipes/docker-server directory: [mysql2](https://github.com/sidorares/node-mysql2).\n\nUpdates `mysql2` from 2.1.0 to 3.23.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/releases\"\u003emysql2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.23.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.0...v3.23.1\"\u003e3.23.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e7c48343\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eparser:\u003c/strong\u003e call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4394\"\u003e#4394\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e01f1092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.23.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.6...v3.23.0\"\u003e3.23.0\u003c/a\u003e (2026-07-13)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereturn unsafe integers inside JSON columns as exact strings with supportBigNumbers (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a26ff14089c093d28522acf7bd8d7dbb827ae0cc\"\u003ea26ff14\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e6b933f6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5034e5771929ce7499f6257035600dc88a442c71\"\u003e5034e57\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.5...v3.22.6\"\u003e3.22.6\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e resolve multi statement and expand object regressions (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1b927a92c1c0e59b00d3552786215fe249ef550f\"\u003e1b927a9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.4...v3.22.5\"\u003e3.22.5\u003c/a\u003e (2026-06-06)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ekeep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4327\"\u003e#4327\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2af33a117ac4fdee1f87537cb876df89a02ab2aa\"\u003e2af33a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.3...v3.22.4\"\u003e3.22.4\u003c/a\u003e (2026-05-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epool:\u003c/strong\u003e reject queued requests on end (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4291\"\u003e#4291\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/fbff09cb58eeae11179c05ef1ef6a07a78d53a29\"\u003efbff09c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.22.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.2...v3.22.3\"\u003e3.22.3\u003c/a\u003e (2026-04-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow resetOnRelease in connection config validation (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4278\"\u003e#4278\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e72f923d20bcdf776ee4f29ed48c69ee47ebd483\"\u003ee72f923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sidorares/node-mysql2/blob/master/Changelog.md\"\u003emysql2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.23.0...v3.23.1\"\u003e3.23.1\u003c/a\u003e (2026-07-19)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esecurity:\u003c/strong\u003e fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e7c48343\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eparser:\u003c/strong\u003e call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4394\"\u003e#4394\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e01f1092\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.6...v3.23.0\"\u003e3.23.0\u003c/a\u003e (2026-07-13)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ereturn unsafe integers inside JSON columns as exact strings with supportBigNumbers (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4388\"\u003e#4388\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/a26ff14089c093d28522acf7bd8d7dbb827ae0cc\"\u003ea26ff14\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e6b933f6\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esupport MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4373\"\u003e#4373\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/5034e5771929ce7499f6257035600dc88a442c71\"\u003e5034e57\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.5...v3.22.6\"\u003e3.22.6\u003c/a\u003e (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003esql-escaper:\u003c/strong\u003e resolve multi statement and expand object regressions (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4380\"\u003e#4380\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/1b927a92c1c0e59b00d3552786215fe249ef550f\"\u003e1b927a9\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.4...v3.22.5\"\u003e3.22.5\u003c/a\u003e (2026-06-06)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ekeep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4327\"\u003e#4327\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/2af33a117ac4fdee1f87537cb876df89a02ab2aa\"\u003e2af33a1\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.3...v3.22.4\"\u003e3.22.4\u003c/a\u003e (2026-05-26)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epool:\u003c/strong\u003e reject queued requests on end (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4291\"\u003e#4291\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/fbff09cb58eeae11179c05ef1ef6a07a78d53a29\"\u003efbff09c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.2...v3.22.3\"\u003e3.22.3\u003c/a\u003e (2026-04-24)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eallow resetOnRelease in connection config validation (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4278\"\u003e#4278\u003c/a\u003e) (\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/e72f923d20bcdf776ee4f29ed48c69ee47ebd483\"\u003ee72f923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v3.22.1...v3.22.2\"\u003e3.22.2\u003c/a\u003e (2026-04-21)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/3de28fb3683ce6b5f601d5ab87efd770b9d3d4d4\"\u003e\u003ccode\u003e3de28fb\u003c/code\u003e\u003c/a\u003e chore(master): release 3.23.1 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4408\"\u003e#4408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/01f10926baec7dffd73629feebbb56e98e616782\"\u003e\u003ccode\u003e01f1092\u003c/code\u003e\u003c/a\u003e fix(parser): call typeCast for NULL values in the binary protocol (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/3368\"\u003e#3368\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4\"\u003e#4\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/534c552e1f6964f33387bef4cd6b11756c541dac\"\u003e\u003ccode\u003e534c552\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.24.0 to 1.25.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4407\"\u003e#4407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/7c48343c95ecc80d30d6ebfa67875947b7d848d2\"\u003e\u003ccode\u003e7c48343\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/3e13d7b3bde26eda6d6437b73a06913f0b08a2fd\"\u003e\u003ccode\u003e3e13d7b\u003c/code\u003e\u003c/a\u003e docs: establish security charter (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4404\"\u003e#4404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/26c135ba304c2e563c4e0d4333fb257a45a7ce4d\"\u003e\u003ccode\u003e26c135b\u003c/code\u003e\u003c/a\u003e build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4403\"\u003e#4403\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/f86cfb18bb507cbe7cefb29cee849604318d5171\"\u003e\u003ccode\u003ef86cfb1\u003c/code\u003e\u003c/a\u003e chore(master): release 3.23.0 (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/631649241506b09703d56e7203408bf17b21ad3a\"\u003e\u003ccode\u003e6316492\u003c/code\u003e\u003c/a\u003e build(deps): bump the docusaurus group in /website with 2 updates (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/6b933f6d248b8fb5f3004d85d9562e9f5abdd16f\"\u003e\u003ccode\u003e6b933f6\u003c/code\u003e\u003c/a\u003e feat(sql-escaper): add Temporal support when escaping values (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sidorares/node-mysql2/commit/457c316248d2efb3bf94d1cfdc3c6dbbc402d729\"\u003e\u003ccode\u003e457c316\u003c/code\u003e\u003c/a\u003e build(deps): bump lucide-react from 1.23.0 to 1.24.0 in /website (\u003ca href=\"https://redirect.github.com/sidorares/node-mysql2/issues/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/sidorares/node-mysql2/compare/v2.1.0...v3.23.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for mysql2 since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.7.4 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.8.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(docs): update multiple links from http to https by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/222\"\u003eexpressjs/compression#222\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add dependabot for github actions by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/207\"\u003eexpressjs/compression#207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/228\"\u003eexpressjs/compression#228\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/229\"\u003eexpressjs/compression#229\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/230\"\u003eexpressjs/compression#230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump supertest from 6.2.3 to 6.3.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/231\"\u003eexpressjs/compression#231\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.8.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: on-headers@~1.1.0\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-7339\"\u003eCVE-2025-7339\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q\"\u003eGHSA-76c9-3jph-rj3q\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.8.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eUse \u003ccode\u003eres.headersSent\u003c/code\u003e when available\u003c/li\u003e\n\u003cli\u003eReplace \u003ccode\u003e_implicitHeader\u003c/code\u003e with \u003ccode\u003ewriteHead\u003c/code\u003e property\u003c/li\u003e\n\u003cli\u003eadd brotli support for versions of node that support it\u003c/li\u003e\n\u003cli\u003eAdd the enforceEncoding option for requests without \u003ccode\u003eAccept-Encoding\u003c/code\u003e header\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.7.5\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: Replace accepts with negotiator@~0.6.4\n\u003cul\u003e\n\u003cli\u003eAdd preference option\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: bytes@3.1.2\n\u003cul\u003e\n\u003cli\u003eAdd petabyte (\u003ccode\u003epb\u003c/code\u003e) support\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;thousandsSeparator\u0026quot; incorrecting formatting fractional part\u003c/li\u003e\n\u003cli\u003eFix return value for un-parsable strings\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: compressible@~2.0.18\n\u003cul\u003e\n\u003cli\u003eMark \u003ccode\u003efont/ttf\u003c/code\u003e as compressible\u003c/li\u003e\n\u003cli\u003eRemove compressible from \u003ccode\u003emultipart/mixed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003edeps: mime-db@'\u0026gt;= 1.43.0 \u0026lt; 2'\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: safe-buffer@5.2.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/1.7.4...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `uuid` from 8.3.1 to 14.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/releases\"\u003euuid's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev14.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003edc4ddb8\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eexpect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003ef2c235f\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003effa3138\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.1...v13.0.2\"\u003e13.0.2\u003c/a\u003e (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ererelease to fix provenance. (\u003ca href=\"https://github.com/uuidjs/uuid/commit/49ccb35f78c0c4ce1409dd2f1d89f83caadba10b\"\u003e49ccb35\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v13.0.1\"\u003e13.0.1\u003c/a\u003e (2026-04-27)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport fix for GHSA-w5hq-g745-h8pq (\u003ca href=\"https://github.com/uuidjs/uuid/commit/9d27ddf7046ce496ef39569ff84d948eeff9cb2a\"\u003e9d27ddf\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev13.0.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev12.0.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v12.0.1\"\u003e12.0.1\u003c/a\u003e (2026-04-29)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md\"\u003euuid's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0\"\u003e14.0.0\u003c/a\u003e (2026-04-19)\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq\"\u003eGHSA-w5hq-g745-h8pq\u003c/a\u003e: \u003ccode\u003ev3()\u003c/code\u003e, \u003ccode\u003ev5()\u003c/code\u003e, and \u003ccode\u003ev6()\u003c/code\u003e did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid \u003ccode\u003eoffset\u003c/code\u003e was provided. A \u003ccode\u003eRangeError\u003c/code\u003e is now thrown if \u003ccode\u003eoffset \u0026lt; 0\u003c/code\u003e or \u003ccode\u003eoffset + 16 \u0026gt; buf.length\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ecrypto\u003c/code\u003e is now expected to be globally defined (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v12.0.0...v13.0.0\"\u003e13.0.0\u003c/a\u003e (2025-09-08)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake browser exports the default (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/901\"\u003e#901\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/bce9d72a3ae5b9a3dcd8eb21ef6d1820288a427a\"\u003ebce9d72\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.1.0...v12.0.0\"\u003e12.0.0\u003c/a\u003e (2025-09-05)\u003c/h2\u003e\n\u003ch3\u003e⚠ BREAKING CHANGES\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd node@24 to ci matrix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/879\"\u003e#879\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/42b6178aa21a593257f0a72abacd220f0b7b8a92\"\u003e42b6178\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edrop node@16 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/883\"\u003e#883\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f38cf10366ab074f9328ae2021eea04d5f2e530\"\u003e0f38cf1\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eremove CommonJS support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/886\"\u003e#886\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/ae786e27265f50bcf7cead196c29f1869297c42f\"\u003eae786e2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to typescript@5.2 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/887\"\u003e#887\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/c7ee40598ed78584d81ab78dffded9fe5ff20b01\"\u003ec7ee405\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eimprove v4() performance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/894\"\u003e#894\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/5fd974c12718c8848035650b69b8948f12ace197\"\u003e5fd974c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003erestore node: prefix (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/889\"\u003e#889\u003c/a\u003e) (\u003ca href=\"https://github.com/uuidjs/uuid/commit/e1f42a354593093ba0479f0b4047dae82d28c507\"\u003ee1f42a3\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0\"\u003e11.1.0\u003c/a\u003e (2025-02-19)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/7c1ea087a8149b57380fc8bb7f68c3a215cb6e4b\"\u003e\u003ccode\u003e7c1ea08\u003c/code\u003e\u003c/a\u003e chore(main): release 14.0.0 (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/926\"\u003e#926\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34\"\u003e\u003ccode\u003e3d2c5b0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/f2c235f93059325fa43e1106e624b5291bb523c4\"\u003e\u003ccode\u003ef2c235f\u003c/code\u003e\u003c/a\u003e fix!: expect \u003ccode\u003ecrypto\u003c/code\u003e to be global everywhere (requires node@20+) (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/935\"\u003e#935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/529ef0899f5dd503d2ee90d690585d63d78bc212\"\u003e\u003ccode\u003e529ef08\u003c/code\u003e\u003c/a\u003e chore: upgrade TypeScript and fixup types (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/927\"\u003e#927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/086fd7976f11433edf9ac80be876b3ad243fe087\"\u003e\u003ccode\u003e086fd79\u003c/code\u003e\u003c/a\u003e chore: update dependencies (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/933\"\u003e#933\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/dc4ddb87272ed2843faccd130bcc41d492688bd3\"\u003e\u003ccode\u003edc4ddb8\u003c/code\u003e\u003c/a\u003e feat!: drop node@18 support (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/934\"\u003e#934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0f1f9c9c9cedbae5a1d363d5406c5dfbabe81404\"\u003e\u003ccode\u003e0f1f9c9\u003c/code\u003e\u003c/a\u003e chore: switch to Biome for parsing and linting (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/932\"\u003e#932\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/e2879e64bf125add903c1eff6e0860542c605013\"\u003e\u003ccode\u003ee2879e6\u003c/code\u003e\u003c/a\u003e chore: use maintained version of npm-run-all (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/930\"\u003e#930\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/ffa31383e8e4e1f0b4e22e504561272041b8738c\"\u003e\u003ccode\u003effa3138\u003c/code\u003e\u003c/a\u003e fix: Use GITHUB_TOKEN for release-please and enable npm provenance (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/925\"\u003e#925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/uuidjs/uuid/commit/0423d49df2dc8efc300c804731d25f4d7e0fccc4\"\u003e\u003ccode\u003e0423d49\u003c/code\u003e\u003c/a\u003e docs: remove obsolete v1 option notes (\u003ca href=\"https://redirect.github.com/uuidjs/uuid/issues/915\"\u003e#915\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/uuidjs/uuid/compare/v8.3.1...v14.0.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for uuid since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `body-parser` from 1.18.3 to 1.20.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/releases\"\u003ebody-parser's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.20.6\u003c/h2\u003e\n\u003ch2\u003eImportant: Security\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-13466\"\u003eCVE-2026-12590\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: improve limit option validation by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/741\"\u003eexpressjs/body-parser#741\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.5...1.20.6\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.20.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003eThe reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (\u0026gt; 100) on qs@6.14.2+. (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/692\"\u003eexpressjs/body-parser#692\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct off-by-one error in parameterCount by \u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(qs): bump qs to 6.15.1 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/722\"\u003eexpressjs/body-parser#722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.5 by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/721\"\u003eexpressjs/body-parser#721\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/abhu85\"\u003e\u003ccode\u003e@​abhu85\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/716\"\u003eexpressjs/body-parser#716\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSpecial thanks to triager \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e for keeping this on our radar and effectively triaging the specific issue!\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.4...1.20.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.4\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove redundant depth check by \u003ca href=\"https://github.com/blakeembrey\"\u003e\u003ccode\u003e@​blakeembrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/538\"\u003eexpressjs/body-parser#538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add support for Node.js v23 by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/553\"\u003eexpressjs/body-parser#553\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: restore CI for 1.x branch by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/665\"\u003eexpressjs/body-parser#665\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: qs@^6.14.0 by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/664\"\u003eexpressjs/body-parser#664\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation and update certain dependencies by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/668\"\u003eexpressjs/body-parser#668\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: remove SECURITY.md by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/669\"\u003eexpressjs/body-parser#669\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add CodeQL (SAST) by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/670\"\u003eexpressjs/body-parser#670\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 1.20.4 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/body-parser/pull/672\"\u003eexpressjs/body-parser#672\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\"\u003ehttps://github.com/expressjs/body-parser/compare/1.20.3...1.20.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.20.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eImportant\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eIMPORTANT:\u003c/strong\u003e The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e). \u003ca href=\"https://github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth\"\u003eDocumentation\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/body-parser/blob/master/HISTORY.md\"\u003ebody-parser's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.20.6 / 2026-07-09\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6\"\u003eGHSA-v422-hmwv-36x6\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: improve \u003ccode\u003elimit\u003c/code\u003e option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/698\"\u003e#698\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eInvalid \u003ccode\u003elimit\u003c/code\u003e values (e.g. unparseable strings or \u003ccode\u003eNaN\u003c/code\u003e) now throw instead of being silently ignored, which previously disabled size limit enforcement\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enull\u003c/code\u003e and \u003ccode\u003eundefined\u003c/code\u003e fall back to the default 100kb limit\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.5 / 2026-04-24\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003erefactor(json): simplify strict mode error string construction\u003c/li\u003e\n\u003cli\u003efix: extended urlencoded parsing of arrays with \u0026gt;100 elements (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: qs@~6.15.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.4 / 2025-12-01\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@~6.14.0\u003c/li\u003e\n\u003cli\u003edeps: use tilde notation for dependencies\u003c/li\u003e\n\u003cli\u003edeps: http-errors@~2.0.1\u003c/li\u003e\n\u003cli\u003edeps: raw-body@~2.5.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.3 / 2024-09-10\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.13.0\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003edepth\u003c/code\u003e option to customize the depth level in the parser\u003c/li\u003e\n\u003cli\u003eIMPORTANT: The default \u003ccode\u003edepth\u003c/code\u003e level for parsing URL-encoded data is now \u003ccode\u003e32\u003c/code\u003e (previously was \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.2 / 2023-02-21\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix strict json error message on Node.js 19+\u003c/li\u003e\n\u003cli\u003edeps: content-type@~1.0.5\n\u003cul\u003e\n\u003cli\u003eperf: skip value escaping when unnecessary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: raw-body@2.5.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.1 / 2022-10-06\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: qs@6.11.0\u003c/li\u003e\n\u003cli\u003eperf: remove unnecessary object clone\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.20.0 / 2022-04-02\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix error message for json parse whitespace in \u003ccode\u003estrict\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eFix internal error when inflated body exceeds limit\u003c/li\u003e\n\u003cli\u003ePrevent loss of async hooks context\u003c/li\u003e\n\u003cli\u003ePrevent hanging when request already read\u003c/li\u003e\n\u003cli\u003edeps: depd@2.0.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43\"\u003e\u003ccode\u003e5cc4fb8\u003c/code\u003e\u003c/a\u003e 1.20.6 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac\"\u003e\u003ccode\u003e3492672\u003c/code\u003e\u003c/a\u003e fix: improve limit option validation (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/741\"\u003e#741\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575\"\u003e\u003ccode\u003e0defdbe\u003c/code\u003e\u003c/a\u003e release(patch): 1.20.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f\"\u003e\u003ccode\u003ecd0e7a0\u003c/code\u003e\u003c/a\u003e deps(qs): bump qs to 6.15.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51\"\u003e\u003ccode\u003e6f24d7e\u003c/code\u003e\u003c/a\u003e fix: correct off-by-one error in parameterCount (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd\"\u003e\u003ccode\u003eb849bd5\u003c/code\u003e\u003c/a\u003e deps: qs@~6.14.1 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/690\"\u003e#690\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9\"\u003e\u003ccode\u003e2c55e2f\u003c/code\u003e\u003c/a\u003e refactor(json): simplify strict mode error string construction (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/692\"\u003e#692\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/7db202cac84a001e6566c2dc6516b44db98beff3\"\u003e\u003ccode\u003e7db202c\u003c/code\u003e\u003c/a\u003e 1.20.4 (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/672\"\u003e#672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/d8f8adb898676dfdf997b4455e5f9b689b53e989\"\u003e\u003ccode\u003ed8f8adb\u003c/code\u003e\u003c/a\u003e ci: add CodeQL (SAST) (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/body-parser/commit/6d133c19b3e7c0bb8301959ca1dba283d23d23c3\"\u003e\u003ccode\u003e6d133c1\u003c/code\u003e\u003c/a\u003e chore: remove SECURITY.md (\u003ca href=\"https://redirect.github.com/expressjs/body-parser/issues/669\"\u003e#669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/body-parser/compare/1.18.3...1.20.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~ulisesgascon\"\u003eulisesgascon\u003c/a\u003e, a new releaser for body-parser since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `morgan` from 1.9.1 to 1.12.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/morgan/releases\"\u003emorgan's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.1\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87859\"\u003eCVE-2026-87859\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-9f6g-j8ch-79g4\"\u003eGHSA-9f6g-j8ch-79g4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: fix typos across documentation by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/378\"\u003eexpressjs/morgan#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/379\"\u003eexpressjs/morgan#379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/upload-sarif to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/381\"\u003eexpressjs/morgan#381\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/autobuild from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/382\"\u003eexpressjs/morgan#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/383\"\u003eexpressjs/morgan#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/384\"\u003eexpressjs/morgan#384\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.12.1 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/386\"\u003eexpressjs/morgan#386\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/378\"\u003eexpressjs/morgan#378\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/379\"\u003eexpressjs/morgan#379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/morgan/compare/1.12.0...1.12.1\"\u003ehttps://github.com/expressjs/morgan/compare/1.12.0...1.12.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.12.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: upgrade http:// to https:// in README by \u003ca href=\"https://github.com/hanu-14\"\u003e\u003ccode\u003e@​hanu-14\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/363\"\u003eexpressjs/morgan#363\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: bump github actions and dev dependencies by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/369\"\u003eexpressjs/morgan#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/334\"\u003eexpressjs/morgan#334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: add ES modules import example by \u003ca href=\"https://github.com/aladi-debug\"\u003e\u003ccode\u003e@​aladi-debug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/352\"\u003eexpressjs/morgan#352\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: fix README lint errors by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/373\"\u003eexpressjs/morgan#373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: use latest patch per Node.js major, add 23-26 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/374\"\u003eexpressjs/morgan#374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: pass objects through to streams in objectMode by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/375\"\u003eexpressjs/morgan#375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: NO_COLOR env var removes color in dev format by \u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/377\"\u003eexpressjs/morgan#377\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hanu-14\"\u003e\u003ccode\u003e@​hanu-14\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/363\"\u003eexpressjs/morgan#363\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/369\"\u003eexpressjs/morgan#369\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/aladi-debug\"\u003e\u003ccode\u003e@​aladi-debug\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/352\"\u003eexpressjs/morgan#352\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/morgan/compare/1.11.0...1.12.0\"\u003ehttps://github.com/expressjs/morgan/compare/1.11.0...1.12.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e1.11.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add :pid token by \u003ca href=\"https://github.com/ganesh3367\"\u003e\u003ccode\u003e@​ganesh3367\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/329\"\u003eexpressjs/morgan#329\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity Fix:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEscape control characters in \u003ccode\u003e:remote-user\u003c/code\u003e token to prevent log injection\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5078\"\u003eCVE-2026-5078\u003c/a\u003e \u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m\"\u003eGHSA-4vj7-5mj6-jm8m\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/inigomarquinez\"\u003e\u003ccode\u003e@​inigomarquinez\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/291\"\u003eexpressjs/morgan#291\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/morgan/pull/299\"\u003eexpressjs/morgan#299\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/morgan/blob/master/HISTORY.md\"\u003emorgan's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87859\"\u003eCVE-2026-87859\u003c/a\u003e(\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-9f6g-j8ch-79g4\"\u003eGHSA-9f6g-j8ch-79g4\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity fix for \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-15603\"\u003eCVE-2026-15603\u003c/a\u003e(\u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-jxfw-x594-9x9m\"\u003eGHSA-jxfw-x594-9x9m\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow format functions to return objects for streams in \u003ccode\u003eobjectMode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eRespect the \u003ccode\u003eNO_COLOR\u003c/code\u003e environment variable in the \u003ccode\u003edev\u003c/code\u003e format\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003e:pid\u003c/code\u003e token\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity Fix:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eEscape control characters in \u003ccode\u003e:remote-user\u003c/code\u003e token to prevent log injection\n\u003cul\u003e\n\u003cli\u003eFixes \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-5078\"\u003eCVE-2026-5078\u003c/a\u003e \u003ca href=\"https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m\"\u003eGHSA-4vj7-5mj6-jm8m\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.10.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003edeps: on-headers@~1.1.0\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-7339\"\u003eCVE-2025-7339\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/on-headers/security/advisories/GHSA-76c9-3jph-rj3q\"\u003eGHSA-76c9-3jph-rj3q\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.10.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e:total-time\u003c/code\u003e token\u003c/li\u003e\n\u003cli\u003eFix trailing space in colored status code for \u003ccode\u003edev\u003c/code\u003e format\u003c/li\u003e\n\u003cli\u003edeps: basic-auth@~2.0.1\n\u003cul\u003e\n\u003cli\u003edeps: safe-buffer@5.1.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: depd@~2.0.0\n\u003cul\u003e\n\u003cli\u003eReplace internal \u003ccode\u003eeval\u003c/code\u003e usage with \u003ccode\u003eFunction\u003c/code\u003e constructor\u003c/li\u003e\n\u003cli\u003eUse instance methods on \u003ccode\u003eprocess\u003c/code\u003e to check for listeners\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003edeps: on-headers@~1.0.2\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eres.writeHead\u003c/code\u003e patch missing return value\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/b1272e70812dbc504321eeb5a43d14b0822c150d\"\u003e\u003ccode\u003eb1272e7\u003c/code\u003e\u003c/a\u003e 1.12.1 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/386\"\u003e#386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/4b695edf967ce179cdf4009fe8cddd184b7511ee\"\u003e\u003ccode\u003e4b695ed\u003c/code\u003e\u003c/a\u003e fix: escape double quotes in log fields\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/0f74eca337508e006052a0ae48fb2754c076ec76\"\u003e\u003ccode\u003e0f74eca\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/384\"\u003e#384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/e399e3c83f6a83e7e90cb42e77afc9b2674f5209\"\u003e\u003ccode\u003ee399e3c\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/1e86b348a903cc938a7947e90fc8f87da74e90ed\"\u003e\u003ccode\u003e1e86b34\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/autobuild from 4.37.4 to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/87c0afd6484da75b217b9c70a3ae08e30199cddc\"\u003e\u003ccode\u003e87c0afd\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action/upload-sarif to 4.37.9 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/381\"\u003e#381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/286b000228cacba362bfa89791c6268663f86610\"\u003e\u003ccode\u003e286b000\u003c/code\u003e\u003c/a\u003e test: run CI on Windows and macOS (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/379\"\u003e#379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/5a5902afffca3b945b79ef077ad1208d244f451d\"\u003e\u003ccode\u003e5a5902a\u003c/code\u003e\u003c/a\u003e docs: fix typos across documentation (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/063f084a8de1fe02e52333f0b5df2533ced85e42\"\u003e\u003ccode\u003e063f084\u003c/code\u003e\u003c/a\u003e 1.12.0 (\u003ca href=\"https://redirect.github.com/expressjs/morgan/issues/376\"\u003e#376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/morgan/commit/fbf93833186920cc39bb19b247e4a86b61bef4fe\"\u003e\u003ccode\u003efbf9383\u003c/code\u003e\u003c/a\u003e fix: escape all token values in log output\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/morgan/compare/1.9.1...1.12.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for morgan since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `sequelize` from 6.35.2 to 6.37.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/sequelize/sequelize/releases\"\u003esequelize's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.37.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.3...v6.37.4\"\u003e6.37.4\u003c/a\u003e (2024-10-04)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eoracle:\u003c/strong\u003e add support for Oracle Database 23ai (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17345\"\u003e#17345\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/b9e71a7af57568dd85b8a2fdaac59b96ce0f0e95\"\u003eb9e71a7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoracle:\u003c/strong\u003e validate input with TO_TIMESTAMP_TZ and TO_DATE (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17516\"\u003e#17516\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26\"\u003e5deadd2\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.3\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.2...v6.37.3\"\u003e6.37.3\u003c/a\u003e (2024-04-13)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e use schema for foreign key constrains of a table (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17099\"\u003e#17099\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/6aba3826d604a3ba638260bf9437775c59d53144\"\u003e6aba382\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.2\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.1...v6.37.2\"\u003e6.37.2\u003c/a\u003e (2024-03-29)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ereadOnly\u003c/code\u003e to the transaction options types and docs (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17226\"\u003e#17226\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/7c8972fa183e064d7f801446c286ded5514f89e9\"\u003e7c8972f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.37.0...v6.37.1\"\u003e6.37.1\u003c/a\u003e (2024-02-18)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e Add definition of \u003ccode\u003ereturning\u003c/code\u003e in \u003ccode\u003eSaveOptions\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16954\"\u003e#16954\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/505467bd7fb66a0fe3298038307390c597500689\"\u003e505467b\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.37.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.36.0...v6.37.0\"\u003e6.37.0\u003c/a\u003e (2024-02-11)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e support connectionTimeoutMillis dialectOption (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/14119\"\u003e#14119\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/e81200e272d3bfef15bbd90653e7dcff7ab8fc47\"\u003ee81200e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.36.0\u003c/h2\u003e\n\u003ch1\u003e\u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.35.2...v6.36.0\"\u003e6.36.0\u003c/a\u003e (2024-02-02)\u003c/h1\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003epostgres:\u003c/strong\u003e backport stream dialectOption to v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16868\"\u003e#16868\u003c/a\u003e) (\u003ca href=\"https://github.com/sequelize/sequelize/commit/a25005855b5282533a17235b3dd2d2a5eb8723c2\"\u003ea250058\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/78a9733b2affd22eda2fcdbde67ef6d5b3224ae8\"\u003e\u003ccode\u003e78a9733\u003c/code\u003e\u003c/a\u003e meta: ignore mssql failures for releasing v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17524\"\u003e#17524\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26\"\u003e\u003ccode\u003e5deadd2\u003c/code\u003e\u003c/a\u003e fix(oracle): validate input with TO_TIMESTAMP_TZ and TO_DATE (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17516\"\u003e#17516\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/b9e71a7af57568dd85b8a2fdaac59b96ce0f0e95\"\u003e\u003ccode\u003eb9e71a7\u003c/code\u003e\u003c/a\u003e fix(oracle): add support for Oracle Database 23ai (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17345\"\u003e#17345\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/6aba3826d604a3ba638260bf9437775c59d53144\"\u003e\u003ccode\u003e6aba382\u003c/code\u003e\u003c/a\u003e fix(postgres): use schema for foreign key constrains of a table (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17099\"\u003e#17099\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/7c8972fa183e064d7f801446c286ded5514f89e9\"\u003e\u003ccode\u003e7c8972f\u003c/code\u003e\u003c/a\u003e fix: add \u003ccode\u003ereadOnly\u003c/code\u003e to the transaction options types and docs (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/17226\"\u003e#17226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/505467bd7fb66a0fe3298038307390c597500689\"\u003e\u003ccode\u003e505467b\u003c/code\u003e\u003c/a\u003e fix(types): Add definition of \u003ccode\u003ereturning\u003c/code\u003e in \u003ccode\u003eSaveOptions\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16954\"\u003e#16954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/e81200e272d3bfef15bbd90653e7dcff7ab8fc47\"\u003e\u003ccode\u003ee81200e\u003c/code\u003e\u003c/a\u003e feat(postgres): support connectionTimeoutMillis dialectOption (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/14119\"\u003e#14119\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sequelize/sequelize/commit/a25005855b5282533a17235b3dd2d2a5eb8723c2\"\u003e\u003ccode\u003ea250058\u003c/code\u003e\u003c/a\u003e feat(postgres): backport stream dialectOption to v6 (\u003ca href=\"https://redirect.github.com/sequelize/sequelize/issues/16868\"\u003e#16868\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/sequelize/sequelize/compare/v6.35.2...v6.37.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `js-yaml` from 3.13.1 to 3.15.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md\"\u003ejs-yaml's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.15.2 - 2026-08-26\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Hard-limit merge sequence size to 100.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Count empty mappings in merge sequences toward \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e\nto limit CPU usage, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/797\"\u003e#797\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.1 - 2026-07-31\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[backport] Remove quadratic complexity from \u003ccode\u003e!!omap\u003c/code\u003e duplicate key detection.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.15.0 - 2026-06-27\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003emaxTotalMergeKeys\u003c/code\u003e (10000) loader option to limit the total number of\nkeys processed by YAML merge (\u003ccode\u003e\u0026lt;\u0026lt;\u003c/code\u003e) across one \u003ccode\u003esafeLoad()\u003c/code\u003e / \u003ccode\u003esafeLoadAll()\u003c/code\u003e\ncall.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.2] - 2025-11-15\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix prototype pollution in merge (\u0026lt;\u0026lt;).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.1] - 2020-12-07\u003c/h2\u003e\n\u003ch3\u003eSecurity\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix possible code execution in (already unsafe) \u003ccode\u003e.load()\u003c/code\u003e (in \u0026amp;anchor).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.14.0] - 2020-05-22\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport \u003ccode\u003esafe/loadAll(input, options)\u003c/code\u003e variant of call.\u003c/li\u003e\n\u003cli\u003eCI: drop outdated nodejs versions.\u003c/li\u003e\n\u003cli\u003eDev deps bump.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eQuote \u003ccode\u003e=\u003c/code\u003e in plain scalars \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/519\"\u003e#519\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eCheck the node type for \u003ccode\u003e!\u0026lt;?\u0026gt;\u003c/code\u003e tag in case user manually specifies it.\u003c/li\u003e\n\u003cli\u003eVerify that there are no null-bytes in input.\u003c/li\u003e\n\u003cli\u003eFix wrong quote position when writing condensed flow, \u003ca href=\"https://redirect.github.com/nodeca/js-yaml/issues/526\"\u003e#526\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5c45bd6e960603c13644f5cc8b572ca257723b36\"\u003e\u003ccode\u003e5c45bd6\u003c/code\u003e\u003c/a\u003e 3.15.2 released\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/5a708f9f4f22e78b87ebe363848cfa4fa4818c0d\"\u003e\u003ccode\u003e5a708f9\u003c/code\u003e\u003c/a\u003e dist rebuild\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639\"\u003e\u003ccode\u003e3485bc0\u003c/code\u003e\u003c/a\u003e Backport merge limits from v5.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/nodeca/js-yam...\n\n_Description has been truncated_","html_url":"https://github.com/GoogleChrome/lighthouse-ci/pull/1165","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleChrome%2Flighthouse-ci/issues/1165","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1165/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-16T10:18:34.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5882421147","node_id":"PR_kwDOMw1FEs8AAAABI0gj4w","number":1475,"state":"open","title":"chore(deps): bump the npm-security-updates group across 2 directories with 12 updates","user":"dependabot[bot]","labels":["dependencies","javascript","cncf-cla: yes","size/L","needs-ok-to-test"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-16T10:18:34.000Z","updated_at":"2026-10-16T10:18:50.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"npm-security-updates","update_count":12,"packages":[{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"compression","old_version":"1.8.1","new_version":"1.8.2","repository_url":"https://github.com/expressjs/compression"},{"name":"dompurify","old_version":"3.4.14","new_version":"3.4.17","repository_url":"https://github.com/cure53/DOMPurify"},{"name":"qs","old_version":"6.15.3","new_version":"6.16.1","repository_url":"https://github.com/ljharb/qs"},{"name":"fast-uri","old_version":"3.1.6","new_version":"3.1.8","repository_url":"https://github.com/fastify/fast-uri"},{"name":"handlebars","old_version":"4.7.9","new_version":"4.7.10","repository_url":"https://github.com/handlebars-lang/handlebars.js"},{"name":"http-cache-semantics","old_version":"4.2.0","new_version":"4.3.0","repository_url":"https://github.com/kornelski/http-cache-semantics"},{"name":"joi","old_version":"17.13.6","new_version":"17.13.8","repository_url":"https://github.com/hapijs/joi"},{"name":"katex","old_version":"0.16.47","new_version":"0.18.10","repository_url":"https://github.com/KaTeX/KaTeX"},{"name":"proxy-addr","old_version":"2.0.7","new_version":"2.0.8","repository_url":"https://github.com/jshttp/proxy-addr"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"},{"name":"source-map-js","old_version":"1.2.1","new_version":"1.2.2","repository_url":"https://github.com/7rulnik/source-map-js"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm-security-updates group with 12 updates in the /website directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.18` | `1.1.21` |\n| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |\n| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.17` |\n| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.1` |\n| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.6` | `3.1.8` |\n| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.9` | `4.7.10` |\n| [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` |\n| [joi](https://github.com/hapijs/joi) | `17.13.6` | `17.13.8` |\n| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.10` |\n| [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` |\n| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |\n| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |\n\nBumps the npm-security-updates group with 1 update in the /tools/lsp/client directory: [brace-expansion](https://github.com/juliangruber/brace-expansion).\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `compression` from 1.8.1 to 1.8.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/releases\"\u003ecompression's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.2\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/bjohansebas\"\u003e\u003ccode\u003e@​bjohansebas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/248\"\u003eexpressjs/compression#248\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/249\"\u003eexpressjs/compression#249\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/253\"\u003eexpressjs/compression#253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/252\"\u003eexpressjs/compression#252\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/251\"\u003eexpressjs/compression#251\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/261\"\u003eexpressjs/compression#261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/260\"\u003eexpressjs/compression#260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/259\"\u003eexpressjs/compression#259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/258\"\u003eexpressjs/compression#258\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/264\"\u003eexpressjs/compression#264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/263\"\u003eexpressjs/compression#263\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/262\"\u003eexpressjs/compression#262\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: up node version to 25.x in CI by \u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edoc(package): remove history.md and add readme.md to published files by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate link to CONTRIBUTING.md by \u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: run CI on Windows and macOS by \u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/257\"\u003eexpressjs/compression#257\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/268\"\u003eexpressjs/compression#268\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.31.9 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/265\"\u003eexpressjs/compression#265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/266\"\u003eexpressjs/compression#266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/267\"\u003eexpressjs/compression#267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/269\"\u003eexpressjs/compression#269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update outdated Brotli note and fix npm install docs URL by \u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: match Cache-Control no-transform directive case-insensitively by \u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e1.8.2 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/287\"\u003eexpressjs/compression#287\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/imangas\"\u003e\u003ccode\u003e@​imangas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/272\"\u003eexpressjs/compression#272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/270\"\u003eexpressjs/compression#270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/krzysdz\"\u003e\u003ccode\u003e@​krzysdz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/281\"\u003eexpressjs/compression#281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kilisamemarisaaa\"\u003e\u003ccode\u003e@​kilisamemarisaaa\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/283\"\u003eexpressjs/compression#283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Vansh1811\"\u003e\u003ccode\u003e@​Vansh1811\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/276\"\u003eexpressjs/compression#276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vaibhavmashal\"\u003e\u003ccode\u003e@​vaibhavmashal\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/expressjs/compression/pull/286\"\u003eexpressjs/compression#286\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ehttps://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/expressjs/compression/blob/master/HISTORY.md\"\u003ecompression's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.8.2\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-87776\"\u003eCVE-2026-87776\u003c/a\u003e (\u003ca href=\"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95\"\u003eGHSA-vc2v-76pw-4v95\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edeps: add destroy@1.2.0\u003c/li\u003e\n\u003cli\u003eMatch \u003ccode\u003eCache-Control: no-transform\u003c/code\u003e directive case-insensitively\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0f9707417bd53d41a319fce8bdb80dfa08b435c8\"\u003e\u003ccode\u003e0f97074\u003c/code\u003e\u003c/a\u003e 1.8.2 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/287\"\u003e#287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/151f63e91e1b64f8fb0b064e19321a4f28db6bff\"\u003e\u003ccode\u003e151f63e\u003c/code\u003e\u003c/a\u003e fix: destroy compression stream on response close\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/0a764956691bede2b62c711598ee65ea643d3b1e\"\u003e\u003ccode\u003e0a76495\u003c/code\u003e\u003c/a\u003e fix: match Cache-Control no-transform directive case-insensitively (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/286\"\u003e#286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/c17b6e58ac914c84d9e3a64130dcc428e0e26887\"\u003e\u003ccode\u003ec17b6e5\u003c/code\u003e\u003c/a\u003e docs: update outdated Brotli note and fix npm install docs URL (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/276\"\u003e#276\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/112911abc46e0d8fa6c9793ef5005ca1d53ccb7c\"\u003e\u003ccode\u003e112911a\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via reusable workflows (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/269\"\u003e#269\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/1bf5eb0b5eaf5001af9782ade18c6cca690ccaad\"\u003e\u003ccode\u003e1bf5eb0\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/267\"\u003e#267\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/d8fe64d50081d4a13a8ea5c25a852ca27fde0b7b\"\u003e\u003ccode\u003ed8fe64d\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/266\"\u003e#266\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/b218ff54eb8e211100d8a6697d13cdc73fdb13b3\"\u003e\u003ccode\u003eb218ff5\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.31.5 to 4.31.9 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/265\"\u003e#265\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/8a1cf8ecf948c28ffd3d29f942c9a310bc36e5c1\"\u003e\u003ccode\u003e8a1cf8e\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/268\"\u003e#268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/expressjs/compression/commit/4a19855442b7ebfcea4f95caf491968108dc15b8\"\u003e\u003ccode\u003e4a19855\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/expressjs/compression/issues/257\"\u003e#257\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for compression since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dompurify` from 3.4.14 to 3.4.17\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/cure53/DOMPurify/releases\"\u003edompurify's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eDOMPurify 3.4.17\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue with \u003ccode\u003eIN_PLACE\u003c/code\u003e, \u003ccode\u003eSAFE_FOR_TEMPLATES\u003c/code\u003e and shadow roots, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eIN_PLACE\u003c/code\u003e handling of nodes that hooks or custom elements tough during sanitization, thanks \u003ca href=\"https://github.com/uttej-badwane\"\u003e\u003ccode\u003e@​uttej-badwane\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed the SMIL \u003ccode\u003eattributeName\u003c/code\u003e guard in XHTML mode, thanks \u003ca href=\"https://github.com/Koukyosyumei\"\u003e\u003ccode\u003e@​Koukyosyumei\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHardened several smaller edge cases (namespaces, literal-text elements, \u003ccode\u003eisValidAttribute()\u003c/code\u003e), thanks \u003ca href=\"https://github.com/artiphishell\"\u003e\u003ccode\u003e@​artiphishell\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded a purify-edge test runner as a compatibility check, thanks \u003ca href=\"https://github.com/anzal1\"\u003e\u003ccode\u003e@​anzal1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClarified the \u003ccode\u003eIN_PLACE\u003c/code\u003e documentation in the README about possible risks\u003c/li\u003e\n\u003cli\u003eUpdated several dependencies\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.16\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e node removal when working with hooks, thanks \u003ca href=\"https://github.com/manus-pi\"\u003e\u003ccode\u003e@​manus-pi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with \u003ccode\u003eIN_PLACE\u003c/code\u003e sanitization and raw-text roots, thanks \u003ca href=\"https://github.com/h-t-m\"\u003e\u003ccode\u003e@​h-t-m\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed a problem with ESM default exports landing in CommonJS declarations, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMigrated from \u003ccode\u003erollup\u003c/code\u003e to \u003ccode\u003erolldown\u003c/code\u003e because performance, thanks \u003ca href=\"https://github.com/ssi02014\"\u003e\u003ccode\u003e@​ssi02014\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDOMPurify 3.4.15\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded better clobbering hardening when XML content is involved, thanks \u003ca href=\"https://github.com/gnyselcuk\"\u003e\u003ccode\u003e@​gnyselcuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdded several smaller hardening and edge-case improvements, thanks \u003ca href=\"https://github.com/leechristensen\"\u003e\u003ccode\u003e@​leechristensen\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBumped several dependencies where possible\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/a77a3e78b59f72fa4d1c83f22e121ad9cc7d3575\"\u003e\u003ccode\u003ea77a3e7\u003c/code\u003e\u003c/a\u003e release: 3.4.17 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1672\"\u003e#1672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/b9b9d80f7e401771c2ccaef5f45def7eec8f27d7\"\u003e\u003ccode\u003eb9b9d80\u003c/code\u003e\u003c/a\u003e release: 3.4.16 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1636\"\u003e#1636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5\"\u003e\u003ccode\u003e1d7460c\u003c/code\u003e\u003c/a\u003e release: 3.4.15 (\u003ca href=\"https://redirect.github.com/cure53/DOMPurify/issues/1609\"\u003e#1609\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/cure53/DOMPurify/compare/3.4.14...3.4.17\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `qs` from 6.15.3 to 6.16.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/qs/blob/main/CHANGELOG.md\"\u003eqs's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.1\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when \u003ccode\u003eencodeDotInKeys\u003c/code\u003e is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments with \u003ccode\u003eencodeValuesOnly\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/565\"\u003e#565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] parse: only convert top-level dots to brackets when allowDots is on (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: ignore inherited array format names (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: do not throw on elements with no callable \u003ccode\u003etoString\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: seed an overflow container's index from its own keys, not just the source\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: keep a \u003ccode\u003estrictMerge\u003c/code\u003e conflict container's index and \u003ccode\u003earrayLimit\u003c/code\u003e correct\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: only treat \u003ccode\u003e[]\u003c/code\u003e as array syntax when it ends the key\u003c/li\u003e\n\u003cli\u003e[Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003emerge\u003c/code\u003e: apply \u003ccode\u003earrayLimit\u003c/code\u003e to the two-element array built for colliding values\u003c/li\u003e\n\u003cli\u003e[Robustness] \u003ccode\u003eparse\u003c/code\u003e: bound the nesting added by repeated \u003ccode\u003estrictMerge\u003c/code\u003e conflicts (credit \u003ca href=\"https://github.com/Yeaseen\"\u003e\u003ccode\u003e@​Yeaseen\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e[Docs] clarify that \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e limits each array, not the total number of values\u003c/li\u003e\n\u003cli\u003e[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/567\"\u003e#567\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/ljharb/qs/issues/568\"\u003e#568\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[meta] fix changelog indents\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket group (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: \u003ccode\u003eallowDots\u003c/code\u003e: cover stray close brackets before a dot\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003cstrong\u003e6.16.0\u003c/strong\u003e\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003estringify\u003c/code\u003e: add a \u003ccode\u003edepth\u003c/code\u003e option to bound recursion depth (default \u003ccode\u003eInfinity\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] stringify: serialize Date values when a filter is provided\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: enforce \u003ccode\u003earrayLimit\u003c/code\u003e on comma groups under \u003ccode\u003e[]=\u003c/code\u003e when \u003ccode\u003ethrowOnLimitExceeded\u003c/code\u003e is set\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: flatten a collection appended to an overflowed array (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/571\"\u003e#571\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003eisBuffer\u003c/code\u003e: do not invoke a non-callable \u003ccode\u003econstructor.isBuffer\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: do not let \u003ccode\u003eallowEmptyArrays\u003c/code\u003e skip cycle detection (or drop own keys) on an empty array with own properties\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003estringify\u003c/code\u003e: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (\u003ca href=\"https://redirect.github.com/ljharb/qs/issues/562\"\u003e#562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Docs] threat model: clarify \u003ccode\u003estringify\u003c/code\u003e deep-nesting DoS is caller-bounded\u003c/li\u003e\n\u003cli\u003e[Docs] clarify \u003ccode\u003earrayLimit\u003c/code\u003e is a representation threshold, not an element-count cap\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003eparse\u003c/code\u003e: remove a test that pinned \u003ccode\u003e[]=\u003c/code\u003e comma groups escaping \u003ccode\u003earrayLimit\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Tests] \u003ccode\u003estringify\u003c/code\u003e: pin current \u003ccode\u003eencodeDotInKeys\u003c/code\u003e separator-dot behavior\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/2471b66ae696a8a10915c01453ae2c0f139a5adc\"\u003e\u003ccode\u003e2471b66\u003c/code\u003e\u003c/a\u003e v6.16.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/51f736e94b079b8479fa8f668acba84c1e177596\"\u003e\u003ccode\u003e51f736e\u003c/code\u003e\u003c/a\u003e [Docs] document that \u003ccode\u003eqs\u003c/code\u003e and flat parsers disagree about parameter names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/40239f7564e99ab92eb9125defaaf4779a26b03a\"\u003e\u003ccode\u003e40239f7\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003etape\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/d219359f5bedc42815190b2448160fae06b7817c\"\u003e\u003ccode\u003ed219359\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eparse\u003c/code\u003e: do not mutate an object input\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/98157dc1b770240ed4fb91da0faa3fb404b80474\"\u003e\u003ccode\u003e98157dc\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: stop re-encoding structural separator dots when `encodeDot...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/cb075c5c4410c36f3cefc1f11b014537c5bb9558\"\u003e\u003ccode\u003ecb075c5\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003estringify\u003c/code\u003e: \u003ccode\u003earrayFormat: 'comma'\u003c/code\u003e: pass the full encoder arguments wi...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/4b89c03f58d61b06636f37b8a1544d4273364620\"\u003e\u003ccode\u003e4b89c03\u003c/code\u003e\u003c/a\u003e [Fix] \u003ccode\u003eutils\u003c/code\u003e: encode \u003ccode\u003e+\u003c/code\u003e as \u003ccode\u003e%2B\u003c/code\u003e in iso-8859-1 mode so values round-trip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/266527db14153527c407fe163331ebe0165a6fd4\"\u003e\u003ccode\u003e266527d\u003c/code\u003e\u003c/a\u003e [Perf] \u003ccode\u003edecode\u003c/code\u003e: skip decoders when there is no percent sign\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/82c5bd012c2c9bcf6b81fb62acd9dd3fdb5de674\"\u003e\u003ccode\u003e82c5bd0\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eutils\u003c/code\u003e: \u003ccode\u003edecode\u003c/code\u003e: add missing cases\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/qs/commit/3ee412caf5fd26abc4f7644c66a8c708187280db\"\u003e\u003ccode\u003e3ee412c\u003c/code\u003e\u003c/a\u003e [Tests] \u003ccode\u003eparse\u003c/code\u003e: characterize the \u003ccode\u003e]=\u003c/code\u003e split when an \u003ccode\u003e=\u003c/code\u003e precedes any bracket...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/qs/compare/v6.15.3...v6.16.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fast-uri` from 3.1.6 to 3.1.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fastify/fast-uri/releases\"\u003efast-uri's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.1.8\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis security release fixes the following medium-severity security advisory:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj\"\u003eGHSA-hrr3-gc8f-f4qj\u003c/a\u003e — inconsistent host case normalization via percent-encoded octets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.8.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev3.1.7\u003c/h2\u003e\n\u003ch2\u003e⚠️ Security Warning\u003c/h2\u003e\n\u003cp\u003eThis is a security release that fixes the following high-severity security advisories:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3\"\u003eGHSA-qw65-cvwx-89v3\u003c/a\u003e — authority injection via an unvalidated port in \u003ccode\u003eserialize()\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g\"\u003eGHSA-58mr-gqgx-xq4g\u003c/a\u003e — host confusion via unbalanced or misplaced IP-literal brackets\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eUsers of the v3.x release line should upgrade to v3.1.7.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\"\u003ehttps://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/ead3ab7bb134c989e972c8174632d0670023f269\"\u003e\u003ccode\u003eead3ab7\u003c/code\u003e\u003c/a\u003e Bumped v3.1.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/c88b59e3e3a20af1d5d6e499f48908d0fb12a66d\"\u003e\u003ccode\u003ec88b59e\u003c/code\u003e\u003c/a\u003e fix: normalize decoded reg-name case\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/412e40abd4eb8beabfb952d80abf949a2baf27a3\"\u003e\u003ccode\u003e412e40a\u003c/code\u003e\u003c/a\u003e Bumped v3.1.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/9f4c943e4d2133e8d78e0941203879216255bb01\"\u003e\u003ccode\u003e9f4c943\u003c/code\u003e\u003c/a\u003e fix: backport port and IP-literal validation to v3.x (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/216\"\u003e#216\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fastify/fast-uri/commit/1eb3ce436fe050807caba79f886ab894f485a588\"\u003e\u003ccode\u003e1eb3ce4\u003c/code\u003e\u003c/a\u003e fix: treat unterminated bracket hosts as reg-names again (\u003ca href=\"https://redirect.github.com/fastify/fast-uri/issues/214\"\u003e#214\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `handlebars` from 4.7.9 to 4.7.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/releases\"\u003ehandlebars's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md\"\u003ehandlebars's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.7.10 - October 5th, 2026\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003esecurity: Sanitize the source map URL when minifying - f37c599\u003c/li\u003e\n\u003cli\u003esecurity: Iterate lazily in #each and strip whitespace in linear time - 812c226\u003c/li\u003e\n\u003cli\u003esecurity: Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7\u003c/li\u003e\n\u003cli\u003esecurity: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f\u003c/li\u003e\n\u003cli\u003esecurity: Only compile partials that are template strings - c28ee7a\u003c/li\u003e\n\u003cli\u003esecurity: Only dispatch known node types in the Compiler and Visitor - 7d501a5\u003c/li\u003e\n\u003cli\u003esecurity: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj\u003c/li\u003e\n\u003cli\u003eClarify that --root does not restrict filesystem access - 0fcf25c\u003c/li\u003e\n\u003cli\u003eBump minimist to ^1.2.8 - ea8ed82\u003c/li\u003e\n\u003cli\u003eFix Ruby component publishing documentation - d069c1c\u003c/li\u003e\n\u003cli\u003eFix Composer component definition - 6714e07\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCompatibility notes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e{{#each}}\u003c/code\u003e iterates iterables such as \u003ccode\u003eMap\u003c/code\u003e, \u003ccode\u003eSet\u003c/code\u003e and generators lazily, like \u003ccode\u003efor...of\u003c/code\u003e, instead of\ncopying them into an array first. Values added to the iterable while the block renders are now visited too.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003eCommits\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e\"\u003e\u003ccode\u003e45ce152\u003c/code\u003e\u003c/a\u003e v4.7.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8\"\u003e\u003ccode\u003ee47b236\u003c/code\u003e\u003c/a\u003e Update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0\"\u003e\u003ccode\u003ef37c599\u003c/code\u003e\u003c/a\u003e Sanitize the source map URL when minifying\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca\"\u003e\u003ccode\u003e812c226\u003c/code\u003e\u003c/a\u003e Iterate lazily in #each and strip whitespace in linear time\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725\"\u003e\u003ccode\u003e609d1b1\u003c/code\u003e\u003c/a\u003e Escape \u003ccode\u003e\u0026lt;!--\u003c/code\u003e and \u003ccode\u003e\u0026lt;script\u003c/code\u003e in precompiled output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa\"\u003e\u003ccode\u003eceec388\u003c/code\u003e\u003c/a\u003e Don't trust special properties on context data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98\"\u003e\u003ccode\u003ec28ee7a\u003c/code\u003e\u003c/a\u003e Only compile partials that are template strings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1\"\u003e\u003ccode\u003e7d501a5\u003c/code\u003e\u003c/a\u003e Only dispatch known node types in the Compiler and Visitor\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2\"\u003e\u003ccode\u003e703fdcc\u003c/code\u003e\u003c/a\u003e Validate AST values in the compiler instead of the parser\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d\"\u003e\u003ccode\u003e0fcf25c\u003c/code\u003e\u003c/a\u003e Clarify that --root does not restrict filesystem access\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `http-cache-semantics` from 4.2.0 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/kornelski/http-cache-semantics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `joi` from 17.13.6 to 17.13.8\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/4ae6af96f7990fdb336aa8ad7dee5e9f847d084a\"\u003e\u003ccode\u003e4ae6af9\u003c/code\u003e\u003c/a\u003e 17.13.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/b3ed6fbdf123f4d77755e6a5df2d6a7af27cd9e8\"\u003e\u003ccode\u003eb3ed6fb\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3153\"\u003e#3153\u003c/a\u003e from hapijs/fix/messages-proto-flat-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/1d2001cad9971327a62c9fd8eb1afec20cd784d2\"\u003e\u003ccode\u003e1d2001c\u003c/code\u003e\u003c/a\u003e chore: backport \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3151\"\u003e#3151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/ed9d7cdd11ef5f7751fd46886f38dc605c9c3995\"\u003e\u003ccode\u003eed9d7cd\u003c/code\u003e\u003c/a\u003e 17.13.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/f2729f71839c57c94ac500b4be9e4b5b26d4e637\"\u003e\u003ccode\u003ef2729f7\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3145\"\u003e#3145\u003c/a\u003e from hapijs/backport/isodate-timeshift-v17\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/c43fc964799c9b5f0c6921bf788162b67066ae81\"\u003e\u003ccode\u003ec43fc96\u003c/code\u003e\u003c/a\u003e chore: add regression test for \u003ca href=\"https://redirect.github.com/hapijs/joi/issues/3143\"\u003e#3143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/hapijs/joi/commit/115e7b58d5eaaecc5e9b7093d41899ad6fb053ec\"\u003e\u003ccode\u003e115e7b5\u003c/code\u003e\u003c/a\u003e fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/hapijs/joi/compare/v17.13.6...v17.13.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `katex` from 0.16.47 to 0.18.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/releases\"\u003ekatex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.18.10\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.9...v0.18.10\"\u003e0.18.10\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003ea477b2e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.9\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.8...v0.18.9\"\u003e0.18.9\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003eaafa187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.8\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.7...v0.18.8\"\u003e0.18.8\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003eddfcc29\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.7\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.6...v0.18.7\"\u003e0.18.7\u003c/a\u003e (2026-09-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \\reflectbox and \\mapsfrom support (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4262\"\u003e#4262\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ab509fde2026a355d3c80965213c05a10bf144cb\"\u003eab509fd\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.6\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.5...v0.18.6\"\u003e0.18.6\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve tags on empty final rows (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4277\"\u003e#4277\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/02d552ca2198e91fb24cf32fb0a35cf7610a66aa\"\u003e02d552c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.5\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.4...v0.18.5\"\u003e0.18.5\u003c/a\u003e (2026-08-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003echar:\u003c/strong\u003e accept U+10FFFF (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4265\"\u003e#4265\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/680553898e23c55fa6cb66052b4b9396cbe857ce\"\u003e6805538\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/2549\"\u003e#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.18.4\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.3...v0.18.4\"\u003e0.18.4\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md\"\u003ekatex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.9...v0.18.10\"\u003e0.18.10\u003c/a\u003e (2026-09-30)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003ea477b2e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.8...v0.18.9\"\u003e0.18.9\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003etypes:\u003c/strong\u003e add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003eaafa187\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.7...v0.18.8\"\u003e0.18.8\u003c/a\u003e (2026-09-23)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003eddfcc29\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.6...v0.18.7\"\u003e0.18.7\u003c/a\u003e (2026-09-06)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \\reflectbox and \\mapsfrom support (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4262\"\u003e#4262\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ab509fde2026a355d3c80965213c05a10bf144cb\"\u003eab509fd\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.5...v0.18.6\"\u003e0.18.6\u003c/a\u003e (2026-09-05)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003earray:\u003c/strong\u003e preserve tags on empty final rows (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4277\"\u003e#4277\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/02d552ca2198e91fb24cf32fb0a35cf7610a66aa\"\u003e02d552c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.4...v0.18.5\"\u003e0.18.5\u003c/a\u003e (2026-08-31)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003echar:\u003c/strong\u003e accept U+10FFFF (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4265\"\u003e#4265\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/680553898e23c55fa6cb66052b4b9396cbe857ce\"\u003e6805538\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/2549\"\u003e#2549\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.3...v0.18.4\"\u003e0.18.4\u003c/a\u003e (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eenvironment:\u003c/strong\u003e report invalid environment names as ParseError (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4256\"\u003e#4256\u003c/a\u003e) (\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/e507f759f067ad3b9e279837027d4cfb2314915b\"\u003ee507f75\u003c/a\u003e), closes \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/3760\"\u003e#3760\u003c/a\u003e \u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/3760\"\u003e#3760\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.18.2...v0.18.3\"\u003e0.18.3\u003c/a\u003e (2026-08-09)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/411da7029f5c095943c2805ce6db16c2be5f214d\"\u003e\u003ccode\u003e411da70\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.10 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/a477b2e1c30e38e1ada785d5766b1e57211b793e\"\u003e\u003ccode\u003ea477b2e\u003c/code\u003e\u003c/a\u003e feat: make KaTeX fallback to browsr math font before Times New Roman (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4298\"\u003e#4298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/5a6a8f8d26402a1f85e9e79a8f884af8cfcac9a9\"\u003e\u003ccode\u003e5a6a8f8\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4297\"\u003e#4297\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/71a7bc02435353b4ed2420bb7b904cae6a0231bc\"\u003e\u003ccode\u003e71a7bc0\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.9 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/aafa1874d720a7ffc74be705b9f4f4b13d1fe758\"\u003e\u003ccode\u003eaafa187\u003c/code\u003e\u003c/a\u003e feat(types): add contrib module declarations (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/e749fd1582e37ff530e2e3be9c700c5f5b70de08\"\u003e\u003ccode\u003ee749fd1\u003c/code\u003e\u003c/a\u003e chore(release): 0.18.8 [ci skip]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/ddfcc29825a35194e8de7490acea20d96ca05477\"\u003e\u003ccode\u003eddfcc29\u003c/code\u003e\u003c/a\u003e fix(array): preserve trailing rows in align (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4283\"\u003e#4283\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/96e751cd609ba7c99244109c85b24ca754eab409\"\u003e\u003ccode\u003e96e751c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4292\"\u003e#4292\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/726c2d4e43e8fb0890da19de086893759b1a0936\"\u003e\u003ccode\u003e726c2d4\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4287\"\u003e#4287\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/KaTeX/KaTeX/commit/f71045d11261ebcbd52e891b0d5e151fbae02b7c\"\u003e\u003ccode\u003ef71045d\u003c/code\u003e\u003c/a\u003e chore(deps): update dependency js-yaml to v4.3.2 [security] (\u003ca href=\"https://redirect.github.com/KaTeX/KaTeX/issues/4286\"\u003e#4286\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.18.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eInstall script changes\u003c/summary\u003e\n\u003cp\u003eThis version adds \u003ccode\u003eprepare\u003c/code\u003e script that runs during installation. Review the package contents before updating.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `proxy-addr` from 2.0.7 to 2.0.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/releases\"\u003eproxy-addr's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.0.8\u003c/h2\u003e\n\u003ch2\u003eImportant\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd OSSF scorecard action by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ci pipeline and add missing Node.JS versions by \u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/26\"\u003ejshttp/proxy-addr#26\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[StepSecurity] Apply security best practices by \u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/31\"\u003ejshttp/proxy-addr#31\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/32\"\u003ejshttp/proxy-addr#32\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/33\"\u003ejshttp/proxy-addr#33\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/35\"\u003ejshttp/proxy-addr#35\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/34\"\u003ejshttp/proxy-addr#34\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/36\"\u003ejshttp/proxy-addr#36\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: add funding to package.json by \u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/41\"\u003ejshttp/proxy-addr#41\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/43\"\u003ejshttp/proxy-addr#43\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 3.6.0 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/42\"\u003ejshttp/proxy-addr#42\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/47\"\u003ejshttp/proxy-addr#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/46\"\u003ejshttp/proxy-addr#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/50\"\u003ejshttp/proxy-addr#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/49\"\u003ejshttp/proxy-addr#49\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/48\"\u003ejshttp/proxy-addr#48\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 6.0.0 to 6.0.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/56\"\u003ejshttp/proxy-addr#56\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/55\"\u003ejshttp/proxy-addr#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/57\"\u003ejshttp/proxy-addr#57\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/58\"\u003ejshttp/proxy-addr#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u0026quot;arugment\u0026quot; typo in README by \u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/64\"\u003ejshttp/proxy-addr#64\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/63\"\u003ejshttp/proxy-addr#63\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/45\"\u003ejshttp/proxy-addr#45\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/39\"\u003ejshttp/proxy-addr#39\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(ci): npm-publish via reusable workflows by \u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefresh CI by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/69\"\u003ejshttp/proxy-addr#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: typo by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/71\"\u003ejshttp/proxy-addr#71\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelease: 2.0.8 by \u003ca href=\"https://github.com/UlisesGascon\"\u003e\u003ccode\u003e@​UlisesGascon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/70\"\u003ejshttp/proxy-addr#70\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/carpasse\"\u003e\u003ccode\u003e@​carpasse\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/27\"\u003ejshttp/proxy-addr#27\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/step-security-bot\"\u003e\u003ccode\u003e@​step-security-bot\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/29\"\u003ejshttp/proxy-addr#29\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/30\"\u003ejshttp/proxy-addr#30\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Phillip9587\"\u003e\u003ccode\u003e@​Phillip9587\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/40\"\u003ejshttp/proxy-addr#40\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/schiwekM\"\u003e\u003ccode\u003e@​schiwekM\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/61\"\u003ejshttp/proxy-addr#61\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sheplu\"\u003e\u003ccode\u003e@​sheplu\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/pull/54\"\u003ejshttp/proxy-addr#54\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ehttps://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md\"\u003eproxy-addr's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.0.8\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2026-90711\"\u003eCVE-2026-90711\u003c/a\u003e (\u003ca href=\"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h\"\u003eGHSA-jqcg-44mw-7w3h\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610\"\u003e\u003ccode\u003ea11ad82\u003c/code\u003e\u003c/a\u003e 2.0.8 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/70\"\u003e#70\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965\"\u003e\u003ccode\u003e780911d\u003c/code\u003e\u003c/a\u003e fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d\"\u003e\u003ccode\u003e92e103e\u003c/code\u003e\u003c/a\u003e fix(ci): use publised as release trigger event (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9\"\u003e\u003ccode\u003e3e5ac75\u003c/code\u003e\u003c/a\u003e ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c\"\u003e\u003ccode\u003e4b9db81\u003c/code\u003e\u003c/a\u003e chore(ci): npm-publish via workflows (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/54\"\u003e#54\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5\"\u003e\u003ccode\u003e655e895\u003c/code\u003e\u003c/a\u003e build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/39\"\u003e#39\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f\"\u003e\u003ccode\u003e50ce4d0\u003c/code\u003e\u003c/a\u003e build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24\"\u003e\u003ccode\u003e0fd347f\u003c/code\u003e\u003c/a\u003e build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/63\"\u003e#63\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55\"\u003e\u003ccode\u003e6a517fa\u003c/code\u003e\u003c/a\u003e build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/64\"\u003e#64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd\"\u003e\u003ccode\u003e0d45e2a\u003c/code\u003e\u003c/a\u003e Fix \u0026quot;arugment\u0026quot; typo in README (\u003ca href=\"https://redirect.github.com/jshttp/proxy-addr/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eMaintainer changes\u003c/summary\u003e\n\u003cp\u003eThis version was pushed to npm by \u003ca href=\"https://www.npmjs.com/~GitHub%20Actions\"\u003eGitHub Actions\u003c/a\u003e, a new releaser for proxy-addr since your current version.\u003c/p\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `source-map-js` from 1.2.1 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/releases\"\u003esource-map-js's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md\"\u003esource-map-js's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFix crash when executing in browser with CSP script-src that don't permit unsafe-eval (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/29\"\u003e#29\u003c/a\u003e) \u003ca href=\"https://github.com/xfournet\"\u003e\u003ccode\u003e@​xfournet\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix denial of service from malicious indexed source maps (CVE-2026-93749) (\u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/79\"\u003e#79\u003c/a\u003e)\u003c/p\u003e\n\u003cp\u003eReported by \u003ca href=\"https://github.com/waydeshi\"\u003e\u003ccode\u003e@​waydeshi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/issues/76\"\u003e#76\u003c/a\u003e. A fix was also proposed by \u003ca href=\"https://github.com/aniebiet\"\u003e\u003ccode\u003e@​aniebiet\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/7rulnik/source-map-js/pull/78\"\u003e#78\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a\"\u003e\u003ccode\u003e0a1d334\u003c/code\u003e\u003c/a\u003e 1.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739\"\u003e\u003ccode\u003e4c6...\n\n_Description has been truncated_","html_url":"https://github.com/kubernetes-sigs/kro/pull/1475","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubernetes-sigs%2Fkro/issues/1475","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1475/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":"/apps/mobile","pr_created_at":"2026-10-15T21:12:20.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5874016732","node_id":"PR_kwDOSPRbhc8AAAABIt2r_Q","number":85,"state":"closed","title":"build(deps): bump shell-quote from 1.10.0 to 1.12.0 in /apps/mobile","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-15T21:45:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-15T21:12:20.000Z","updated_at":"2026-10-15T21:45:15.000Z","time_to_close":1965,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":"/apps/mobile","ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LIXBON-FOUNDER/Lixbon/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/LIXBON-FOUNDER/Lixbon/pull/85","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/LIXBON-FOUNDER%2FLixbon/issues/85","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/85/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-15T12:56:55.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5866545716","node_id":"PR_kwDOQLDCTc8AAAABIn15gQ","number":184,"state":"open","title":"Bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-15T12:56:55.000Z","updated_at":"2026-10-15T13:04:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/delucis/fontkitten/pull/184","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/delucis%2Ffontkitten/issues/184","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/184/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":"/tests/startup_perf/BlankRNW","pr_created_at":"2026-10-14T23:06:16.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5857126054","node_id":"PR_kwDOSEuU7c8AAAABIgWbiQ","number":1380,"state":"open","title":"deps(npm): bump shell-quote from 1.10.0 to 1.12.0 in /tests/startup_perf/BlankRNW","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T23:06:16.000Z","updated_at":"2026-10-14T23:11:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(npm)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":"/tests/startup_perf/BlankRNW","ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/microsoft-ui-reactor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/microsoft/microsoft-ui-reactor/pull/1380","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fmicrosoft-ui-reactor/issues/1380","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1380/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-14T22:18:55.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5856626395","node_id":"PR_kwDOQRSi3s8AAAABIf9CmA","number":767,"state":"open","title":"chore(deps): bump shell-quote from 1.10.0 to 1.12.0","user":"dependabot[bot]","labels":["dependencies","javascript","dependabot"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-14T22:18:55.000Z","updated_at":"2026-10-14T22:19:24.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote\u0026package-manager=npm_and_yarn\u0026previous-version=1.10.0\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/codeforamerica/sebt-self-service-portal/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/codeforamerica/sebt-self-service-portal/pull/767","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/codeforamerica%2Fsebt-self-service-portal/issues/767","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/767/packages"}},{"old_version":"1.10.0","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-10-14T22:04:49.000Z","version_change":"1.10.0 → 1.12.0","issue":{"uuid":"5856454789","node_id":"PR_kwDOPHmYp88AAAABIf0HJA","number":9,"state":"closed","title":"Bump the npm_and_yarn group across 1 directory with 2 updates","user":"dependabot[bot]","labels":["dependencies","javascript"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-16T01:26:06.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-14T22:04:49.000Z","updated_at":"2026-10-16T01:26:09.000Z","time_to_close":98477,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"npm_and_yarn","update_count":2,"packages":[{"name":"brace-expansion","old_version":"1.1.18","new_version":"1.1.21","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"brace-expansion","old_version":"2.1.4","new_version":"2.1.7","repository_url":"https://github.com/juliangruber/brace-expansion"},{"name":"shell-quote","old_version":"1.10.0","new_version":"1.12.0","repository_url":"https://github.com/ljharb/shell-quote"}],"path":null,"ecosystem":"npm"},"body":"Bumps the npm_and_yarn group with 2 updates in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [shell-quote](https://github.com/ljharb/shell-quote).\n\nUpdates `brace-expansion` from 1.1.18 to 1.1.21\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `brace-expansion` from 2.1.4 to 2.1.7\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/8e81e187b6e9c6c723d16c042657c00acefc2483\"\u003e\u003ccode\u003e8e81e18\u003c/code\u003e\u003c/a\u003e 1.1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\"\u003e\u003ccode\u003effdfa3e\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/c6513ad31e08edb56dc414a629e39cba724b7548\"\u003e\u003ccode\u003ec6513ad\u003c/code\u003e\u003c/a\u003e 1.1.20\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b\"\u003e\u003ccode\u003e1efee7c\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/a34340a053abb475cc226aeb3f71887018e71bd0\"\u003e\u003ccode\u003ea34340a\u003c/code\u003e\u003c/a\u003e 1.1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc\"\u003e\u003ccode\u003e0bcbfc0\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `shell-quote` from 1.10.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md\"\u003eshell-quote's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.11.0...v1.12.0\"\u003ev1.12.0\u003c/a\u003e - 2026-10-02\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/31\"\u003e\u003ccode\u003e[#31](https://github.com/ljharb/shell-quote/issues/31)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026amp;lt;\u0026amp;lt;-\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026amp;gt;(\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026amp;gt;|\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\u0026amp;lt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026amp;gt;\u0026amp;gt;\u003c/code\u003e) \u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.11.0\"\u003ev1.11.0\u003c/a\u003e - 2026-09-29\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Refactor] \u003ccode\u003equote\u003c/code\u003e: drop a replace that can never match in the single-quote branch \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/15\"\u003e\u003ccode\u003e[#15](https://github.com/ljharb/shell-quote/issues/15)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[New] \u003ccode\u003eparse\u003c/code\u003e: support bash ANSI-C quoting (\u003ccode\u003e$'...'\u003c/code\u003e) \u003ca href=\"https://redirect.github.com/ljharb/shell-quote/issues/32\"\u003e\u003ccode\u003e[#32](https://github.com/ljharb/shell-quote/issues/32)\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eCommits\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: reject line terminators in tokens after a \u003ccode\u003ecomment\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a172b0bc\"\u003e\u003ccode\u003e6002b2e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: preserve text after special shell parameters \u003ca href=\"https://github.com/ljharb/shell-quote/commit/81b08a532e898a3627f9305fa13d643ffa82a9d3\"\u003e\u003ccode\u003e81b08a5\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: an escaped backslash does not escape the character after it \u003ca href=\"https://github.com/ljharb/shell-quote/commit/d708019016ce26e1a8a05af4b296e35ef8095c9e\"\u003e\u003ccode\u003ed708019\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve \u003ccode\u003e!\u003c/code\u003e in arguments that also contain \u003ccode\u003e'\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ad399279dbbbd086967d2040c1558b4888b074e6\"\u003e\u003ccode\u003ead39927\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003eparse\u003c/code\u003e: treat \u003ccode\u003e$_name\u003c/code\u003e as a variable name, not \u003ccode\u003e$_\u003c/code\u003e followed by text \u003ca href=\"https://github.com/ljharb/shell-quote/commit/28f88cd422ae4046aca9556c4b74ca90b0ea7f6b\"\u003e\u003ccode\u003e28f88cd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: preserve empty glob patterns \u003ca href=\"https://github.com/ljharb/shell-quote/commit/35c9b97a744211091b772f145bef0b6a5562b68e\"\u003e\u003ccode\u003e35c9b97\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Fix] \u003ccode\u003equote\u003c/code\u003e: escape \u003ccode\u003e~\u003c/code\u003e in glob patterns to prevent shell tilde-expansion \u003ca href=\"https://github.com/ljharb/shell-quote/commit/239d49cae6d231436ea4e676850037018c790c49\"\u003e\u003ccode\u003e239d49c\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e, \u003ccode\u003eauto-changelog\u003c/code\u003e, \u003ccode\u003eeslint\u003c/code\u003e, \u003ccode\u003eevalmd\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/b1e406ed4287a134cc649db47b9a59e21b304472\"\u003e\u003ccode\u003eb1e406e\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[meta] npmignore some files \u003ca href=\"https://github.com/ljharb/shell-quote/commit/ebfc3080cf5f68db5edfddfba49dc8c4ccacd2d5\"\u003e\u003ccode\u003eebfc308\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] add permissions \u003ca href=\"https://github.com/ljharb/shell-quote/commit/3429b0d349211786765e9e68478e029d96ad44e9\"\u003e\u003ccode\u003e3429b0d\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[actions] set least-privilege \u003ccode\u003ecache-mode\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/36f23944db50dd3f0df4da9c7cba0bb63df05f64\"\u003e\u003ccode\u003e36f2394\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[Dev Deps] update \u003ccode\u003eeslint\u003c/code\u003e \u003ca href=\"https://github.com/ljharb/shell-quote/commit/6de9a41ecfc4fe9f9546df08866c8ead039f8909\"\u003e\u003ccode\u003e6de9a41\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ecb8aa618ba6dc6c3b087fce6d7660320d2adeb\"\u003e\u003ccode\u003e6ecb8aa\u003c/code\u003e\u003c/a\u003e v1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/3a7b4ae3960c3ff4413932e276c5b0ecb3a2b456\"\u003e\u003ccode\u003e3a7b4ae\u003c/code\u003e\u003c/a\u003e [Dev Deps] update \u003ccode\u003e@ljharb/eslint-config\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/7d688b9bec1917a22cccd4d4c887128a9c66e8a0\"\u003e\u003ccode\u003e7d688b9\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e test-next terminator (\u003ccode\u003e;;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/f27010ed04bcd925795b350afb1c49e36bbd1ba3\"\u003e\u003ccode\u003ef27010e\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support the \u003ccode\u003ecase\u003c/code\u003e fall-through terminator (\u003ccode\u003e;\u0026amp;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/90cde9cfd8af30fcb65e9fd2cb2f9e181d3f103b\"\u003e\u003ccode\u003e90cde9c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support appending stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/6ad6cd215f89adcc29dd601e085fa54083c2f911\"\u003e\u003ccode\u003e6ad6cd2\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting stdout and stderr (\u003ccode\u003e\u0026amp;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/20533154bb57809c80f55318b8493aef49505f4e\"\u003e\u003ccode\u003e2053315\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support output process substitution (\u003ccode\u003e\u0026gt;(\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/b78d19c14da6356cc12c46b3478203247ab8a295\"\u003e\u003ccode\u003eb78d19c\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support redirecting output despite \u003ccode\u003enoclobber\u003c/code\u003e (\u003ccode\u003e\u0026gt;|\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/21cc333eb0ce5bf094f595b7fdc01b3447ffd4b0\"\u003e\u003ccode\u003e21cc333\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support opening a file for reading and writing (\u003ccode\u003e\\\u0026lt;\u0026gt;\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ljharb/shell-quote/commit/dbfac376d4065d37539d3abdb5e76847f93797d3\"\u003e\u003ccode\u003edbfac37\u003c/code\u003e\u003c/a\u003e [New] \u003ccode\u003eparse\u003c/code\u003e: support tab-stripping here-documents (\u003ccode\u003e\u0026lt;\u0026lt;-\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/bjohnson1279/permit-tracker-frontend/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/bjohnson1279/permit-tracker-frontend/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bjohnson1279%2Fpermit-tracker-frontend/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}}]}